Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/9DDC57D462B011EFAB7BE888762E951A.roa
File: 9DDC57D462B011EFAB7BE888762E951A.roa (raw, json)
Hash identifier: V4DCBYwY6GKA8g6MrDZPCVrqy1AdySRkScdUJ/xX5q0=
Subject key identifier: EB:88:51:B6:43:33:5C:D4:72:86:95:FD:B7:5A:B0:45:81:A2:A7:F4
Certificate issuer: /CN=F36B583CAF/serialNumber=293E5CFF530308B7F0F6B89E13F70C64F5E1099A
Certificate serial: 028E
Authority key identifier: 29:3E:5C:FF:53:03:08:B7:F0:F6:B8:9E:13:F7:0C:64:F5:E1:09:9A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KT5c_1MDCLfw9rieE_cMZPXhCZo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/9DDC57D462B011EFAB7BE888762E951A.roa
Signing time: Sun 25 Aug 2024 07:06:57 +0000
ROA not before: Sun 25 Aug 2024 07:06:54 +0000
ROA not after: Tue 31 Dec 2024 07:06:54 +0000
asID: 328615
IP address blocks: 2c0f:3200:6200::/40 maxlen: 48
Validation: Failed, certificate revoked on Fri 06 Sep 2024 01:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 654 (0x28e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B583CAF/serialNumber=293E5CFF530308B7F0F6B89E13F70C64F5E1099A
Validity
Not Before: Aug 25 07:06:54 2024 GMT
Not After : Dec 31 07:06:54 2024 GMT
Subject: CN=66cad811-563b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6b:89:4a:f7:65:38:f4:23:b3:a4:e4:38:6e:
33:46:c9:89:71:cb:9b:b6:4d:92:ba:5a:a0:91:15:
ef:f9:43:0b:f3:4e:7f:ba:24:24:31:9d:bb:05:84:
0a:8a:18:7c:92:a4:8f:a6:ea:91:f7:4f:b7:2f:6d:
e3:58:c6:04:24:7c:a7:90:44:5d:ec:37:47:07:86:
33:d9:bc:a4:31:79:76:0e:86:3f:0a:60:f9:0d:2a:
bd:0e:6c:56:86:7e:30:e9:b3:05:5d:a0:f2:5c:7c:
16:11:a4:a4:10:a6:f2:0a:c1:8b:58:d1:cd:24:51:
68:2b:5c:22:fb:b9:36:27:5f:62:d9:43:6e:8f:59:
2b:4e:ce:72:2d:22:4b:91:f9:f1:f8:d0:09:f6:40:
a5:b1:a7:38:8d:ed:fd:79:ae:c9:36:76:c0:b7:d1:
ab:38:be:67:49:a4:69:a1:73:66:62:dc:4a:61:37:
2f:62:72:ad:ba:82:05:fc:71:88:0a:73:a8:9d:d8:
34:8d:d0:79:bd:b4:fb:2b:14:18:3f:57:5a:90:e5:
ab:e4:87:06:03:2b:10:24:5c:d1:6f:fe:b1:47:4a:
43:49:2d:ab:35:5a:df:e6:8d:85:8b:26:06:85:0c:
fe:35:85:16:c6:17:59:9d:a8:c4:1b:c5:83:da:eb:
87:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:88:51:B6:43:33:5C:D4:72:86:95:FD:B7:5A:B0:45:81:A2:A7:F4
X509v3 Authority Key Identifier:
keyid:29:3E:5C:FF:53:03:08:B7:F0:F6:B8:9E:13:F7:0C:64:F5:E1:09:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KT5c_1MDCLfw9rieE_cMZPXhCZo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/9DDC57D462B011EFAB7BE888762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:3200:6200::/40
Signature Algorithm: sha256WithRSAEncryption
90:a5:2f:12:42:5a:a9:fe:af:29:6f:8c:74:27:0b:a4:86:22:
76:36:03:96:cc:ba:a1:8f:8a:02:f2:a1:6d:0c:da:8e:91:c3:
bd:cb:07:64:f0:94:8a:6d:a7:f8:3e:84:1e:2a:83:e6:ee:b0:
f0:85:80:c8:86:c1:71:71:f6:d5:b2:d2:f2:1f:7b:c7:53:db:
e5:e9:ac:54:ed:dc:59:bb:fd:25:eb:b2:64:cd:0b:4b:2b:03:
15:20:4d:8c:e9:aa:c0:1f:19:73:d4:2c:4d:3a:6d:65:59:5e:
d3:f6:f9:29:d6:8a:ee:50:45:bf:d8:6f:2b:20:0a:91:6a:fd:
0f:98:e8:4f:fe:85:6a:35:0d:d7:ca:f9:ef:96:a2:ba:bf:5a:
30:3b:9b:8e:78:47:25:85:2d:89:44:b1:f7:08:23:3d:37:f2:
e6:f3:bf:d0:f4:96:5c:e0:6d:ea:c3:73:a4:8c:a8:b7:d1:70:
f0:65:9e:12:36:aa:c5:ab:00:43:de:32:dd:56:87:2f:ca:03:
db:3a:6f:92:68:aa:0f:8e:8a:32:37:cd:fc:60:25:fb:cb:86:
9d:4f:21:b2:99:e5:30:4a:23:fe:07:97:00:b9:62:ef:7e:34:
b8:9c:09:d9:85:94:06:16:8f:28:07:9e:f4:b1:db:3f:a7:e8:
70:01:12:b9
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjU4M0NBRjExMC8GA1UEBRMoMjkzRTVDRkY1MzAzMDhCN0YwRjZCODlFMTNGNzBD
NjRGNUUxMDk5QTAeFw0yNDA4MjUwNzA2NTRaFw0yNDEyMzEwNzA2NTRaMBgxFjAU
BgNVBAMTDTY2Y2FkODExLTU2M2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGa4lK92U49COzpOQ4bjNGyYlxy5u2TZK6WqCRFe/5QwvzTn+6JCQxnbsF
hAqKGHySpI+m6pH3T7cvbeNYxgQkfKeQRF3sN0cHhjPZvKQxeXYOhj8KYPkNKr0O
bFaGfjDpswVdoPJcfBYRpKQQpvIKwYtY0c0kUWgrXCL7uTYnX2LZQ26PWStOznIt
IkuR+fH40An2QKWxpziN7f15rsk2dsC30as4vmdJpGmhc2Zi3EphNy9icq26ggX8
cYgKc6id2DSN0Hm9tPsrFBg/V1qQ5avkhwYDKxAkXNFv/rFHSkNJLas1Wt/mjYWL
JgaFDP41hRbGF1mdqMQbxYPa64fLAgMBAAGjggKnMIICozAdBgNVHQ4EFgQU64hR
tkMzXNRyhpX9t1qwRYGip/QwHwYDVR0jBBgwFoAUKT5c/1MDCLfw9rieE/cMZPXh
CZowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI1ODNDLzVERjc5QzdDOTcxNTExRUQ5OUY4NDdCOEYxMjIyNDY4L0tUNWNf
MU1EQ0xmdzlyaWVFX2NNWlBYaENaby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0tUNWNfMU1EQ0xmdzlyaWVFX2NNWlBYaENaby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkI1ODNDLzVERjc5QzdDOTcxNTExRUQ5OUY4NDdCOEYx
MjIyNDY4LzlEREM1N0Q0NjJCMDExRUZBQjdCRTg4ODc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAsDzIAYjANBgkqhkiG9w0B
AQsFAAOCAQEAkKUvEkJaqf6vKW+MdCcLpIYidjYDlsy6oY+KAvKhbQzajpHDvcsH
ZPCUim2n+D6EHiqD5u6w8IWAyIbBcXH21bLS8h97x1Pb5emsVO3cWbv9JeuyZM0L
SysDFSBNjOmqwB8Zc9QsTTptZVle0/b5KdaK7lBFv9hvKyAKkWr9D5joT/6FajUN
18r575aiur9aMDubjnhHJYUtiUSx9wgjPTfy5vO/0PSWXOBt6sNzpIyot9Fw8GWe
EjaqxasAQ94y3VaHL8oD2zpvkmiqD46KMjfN/GAl+8uGnU8hspnlMEoj/geXALli
7340uJwJ2YWUBhaPKAee9LHbP6focAESuQ==
-----END CERTIFICATE-----
Generated at Fri Sep 6 03:19:25 2024 by rpki-client on console-fra.rpki-client.org