Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/68D67046A01A11EE995D5555D25BE465.roa
File: 68D67046A01A11EE995D5555D25BE465.roa (raw, json)
Hash identifier: 4xbfjBmUcrr7ffXm7TbrQ0lVtrvoORsukXJ1TtaRNtI=
Subject key identifier: 7D:EB:03:28:62:5A:2A:A3:B4:70:F7:90:7B:B0:B2:B3:EA:B6:5B:37
Certificate issuer: /CN=F36B583CAF/serialNumber=293E5CFF530308B7F0F6B89E13F70C64F5E1099A
Certificate serial: 0166
Authority key identifier: 29:3E:5C:FF:53:03:08:B7:F0:F6:B8:9E:13:F7:0C:64:F5:E1:09:9A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KT5c_1MDCLfw9rieE_cMZPXhCZo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/68D67046A01A11EE995D5555D25BE465.roa
Signing time: Thu 21 Dec 2023 16:02:58 +0000
ROA not before: Tue 17 Dec 2024 16:02:55 +0000
ROA not after: Tue 31 Dec 2024 16:02:55 +0000
asID: 328615
IP address blocks: 197.215.130.0/24 maxlen: 24
197.215.131.0/24 maxlen: 24
197.215.132.0/24 maxlen: 24
2c0f:3200:6000::/36 maxlen: 48
Validation: Failed, certificate revoked on Sun 11 Feb 2024 08:38:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358 (0x166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B583CAF/serialNumber=293E5CFF530308B7F0F6B89E13F70C64F5E1099A
Validity
Not Before: Dec 17 16:02:55 2024 GMT
Not After : Dec 31 16:02:55 2024 GMT
Subject: CN=658461b2-bd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:78:64:dd:40:23:95:d7:ac:51:b2:ad:ca:54:
a6:6f:df:eb:a0:fd:a4:27:9f:ef:1c:12:2a:b2:12:
c8:0d:ef:18:cd:62:6d:4e:0a:05:6e:f1:b0:90:78:
77:4a:e6:40:1f:87:60:7a:5e:35:d8:7b:71:c9:a8:
78:0c:44:08:2f:81:d4:7f:85:06:f9:09:d7:8e:f9:
67:22:84:74:98:ef:e4:b4:4f:9b:ae:b8:4d:f6:59:
31:de:92:65:a6:d5:73:a2:4e:ba:c7:41:a3:14:a8:
5d:53:4d:1b:9a:e4:f8:21:00:0c:35:7d:e9:4a:26:
23:6b:68:f8:19:b0:41:96:28:8e:b7:20:c7:33:c8:
c9:4e:32:61:0b:6f:2c:91:a0:d8:46:5a:6b:58:d6:
25:38:af:f9:9d:85:cb:4f:ee:62:3c:ae:f4:ce:0a:
da:ee:b7:ad:20:af:ce:ab:86:b7:e7:07:28:6a:fe:
a6:e2:09:f3:c3:1d:70:98:92:7b:e3:6b:3e:f5:19:
46:bf:01:9c:6d:25:82:d3:22:2d:21:5e:f8:e2:75:
76:52:f4:14:cd:f2:f9:40:07:4e:eb:68:82:1f:3a:
d7:c5:2c:01:8d:1a:c6:6e:dc:7e:e1:9a:1d:f1:8f:
a1:5b:83:8f:1b:50:2a:c5:48:d0:9a:10:e5:3b:a6:
78:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EB:03:28:62:5A:2A:A3:B4:70:F7:90:7B:B0:B2:B3:EA:B6:5B:37
X509v3 Authority Key Identifier:
keyid:29:3E:5C:FF:53:03:08:B7:F0:F6:B8:9E:13:F7:0C:64:F5:E1:09:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KT5c_1MDCLfw9rieE_cMZPXhCZo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/68D67046A01A11EE995D5555D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.215.130.0-197.215.132.255
IPv6:
2c0f:3200:6000::/36
Signature Algorithm: sha256WithRSAEncryption
82:6a:6f:99:4c:bc:c4:7e:9c:3f:e2:f1:6a:21:c5:ec:77:5d:
47:e7:f4:0a:3c:45:55:14:b7:be:be:3f:fe:d1:2a:06:f5:5f:
52:d5:5e:9f:0a:19:48:b5:13:88:9d:be:89:a0:3c:36:8d:e0:
b2:ed:64:a7:8e:a6:2f:64:0a:ce:65:af:52:d7:5f:51:ef:97:
0d:30:e8:99:ec:7a:82:03:e4:47:aa:9e:1a:3a:f5:c4:f1:ab:
d2:20:2d:8c:90:a6:ec:c6:cb:07:23:87:5c:23:fb:23:02:ae:
5f:31:6d:5d:ff:7b:36:13:02:70:dc:8d:27:49:5a:76:ea:44:
7b:a7:a6:92:95:83:89:3d:99:4d:8a:48:0c:2e:98:12:d6:b7:
8f:dd:16:63:00:b9:2c:27:f9:6e:bf:32:d4:98:54:7f:c7:19:
6d:a0:fd:f5:39:8a:5c:9a:1d:31:ad:69:93:44:b0:1e:26:35:
76:ca:e8:da:31:84:18:bf:8f:61:b2:f6:aa:a9:eb:ef:e4:ab:
7e:dc:de:3b:6a:eb:c7:09:a4:08:98:93:6e:a2:00:e3:f8:29:
c3:1a:4b:1c:59:5c:18:c1:b3:e7:ec:25:b2:b4:7d:ff:4c:82:
19:6c:f1:54:2d:e6:5c:01:80:54:6e:b0:82:96:f4:67:af:e1:
34:ee:1c:c6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org