Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/A0166F34A01A11EEA16BCF55D25BE465.roa
File: A0166F34A01A11EEA16BCF55D25BE465.roa (raw, json)
Hash identifier: scLK2vrBPVJUAwKRjr/Bp09Xvl1nis8QIpSycK8X4cg=
Subject key identifier: 1F:CC:DF:BF:2F:0E:B4:11:D2:30:15:7F:A4:38:55:02:1B:72:1B:8D
Certificate issuer: /CN=F36B583CAF/serialNumber=293E5CFF530308B7F0F6B89E13F70C64F5E1099A
Certificate serial: 0168
Authority key identifier: 29:3E:5C:FF:53:03:08:B7:F0:F6:B8:9E:13:F7:0C:64:F5:E1:09:9A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KT5c_1MDCLfw9rieE_cMZPXhCZo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/A0166F34A01A11EEA16BCF55D25BE465.roa
Signing time: Thu 21 Dec 2023 16:04:31 +0000
ROA not before: Tue 17 Dec 2024 16:04:28 +0000
ROA not after: Tue 31 Dec 2024 16:04:28 +0000
asID: 37558
IP address blocks: 197.215.128.0/19 maxlen: 24
2c0f:3200::/32 maxlen: 48
Validation: Failed, certificate revoked on Sun 11 Feb 2024 08:39:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360 (0x168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B583CAF/serialNumber=293E5CFF530308B7F0F6B89E13F70C64F5E1099A
Validity
Not Before: Dec 17 16:04:28 2024 GMT
Not After : Dec 31 16:04:28 2024 GMT
Subject: CN=6584620f-e2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:48:d8:14:d1:6a:b1:c8:9b:6d:33:c8:a4:f5:
a3:cf:ff:c0:34:e7:d3:b2:0d:ff:79:c2:94:2d:fd:
f4:9a:7b:72:7f:9d:25:1a:6c:71:e4:13:3c:0e:3c:
3e:ef:12:21:e4:d8:1d:58:02:be:4b:b7:43:52:61:
dc:f2:47:70:47:3e:1d:9a:fa:77:ed:e6:cc:a9:06:
02:90:5e:31:2f:d9:60:74:98:11:6d:df:ba:3c:74:
17:8c:62:ee:76:b3:f6:d7:1b:37:83:69:81:f6:69:
42:16:25:b9:4d:18:f2:b7:5a:4b:50:1a:9d:6d:b1:
c8:fa:bd:da:1b:52:23:4a:a7:ce:97:8f:e8:74:ab:
12:b1:e4:45:c2:66:60:e0:3d:94:6a:bb:c7:60:d0:
5d:10:95:1e:c1:31:ca:7a:3c:61:2c:32:6f:6c:ab:
f2:f8:53:03:b9:27:e6:ae:05:8a:76:18:02:ac:0c:
de:6a:cd:1d:d8:4f:e6:43:49:04:f5:94:9b:a3:a3:
58:e3:cf:99:36:68:73:be:ec:98:4f:38:9e:8c:63:
5a:58:d2:5c:cf:d1:6f:3b:5b:e5:c0:9b:48:a4:1e:
b0:f3:16:fe:e0:75:eb:76:d3:44:e7:44:e2:f4:51:
d9:ac:c2:ba:16:97:d9:0c:b3:3a:26:7b:18:54:6e:
95:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CC:DF:BF:2F:0E:B4:11:D2:30:15:7F:A4:38:55:02:1B:72:1B:8D
X509v3 Authority Key Identifier:
keyid:29:3E:5C:FF:53:03:08:B7:F0:F6:B8:9E:13:F7:0C:64:F5:E1:09:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KT5c_1MDCLfw9rieE_cMZPXhCZo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/A0166F34A01A11EEA16BCF55D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.215.128.0/19
IPv6:
2c0f:3200::/32
Signature Algorithm: sha256WithRSAEncryption
38:45:40:25:21:29:b3:99:5c:68:f6:3c:6d:42:24:69:54:13:
68:e9:b5:ed:bb:2e:55:cc:46:0d:de:f8:fc:54:ad:0a:58:ea:
c8:70:35:21:3c:f5:33:e9:1e:22:41:0c:1b:7e:fa:7b:1e:77:
93:b8:c5:ff:3d:19:99:fb:2f:49:68:07:49:67:42:b3:c2:52:
3e:e2:2b:cc:df:a0:3e:ac:7b:4b:cd:f4:1a:4f:5f:2f:d3:fb:
f1:3e:06:be:40:46:e8:ad:c7:df:a8:43:25:28:79:20:9c:4d:
05:91:a0:c5:cb:a5:30:e5:f3:f1:6e:3a:93:b2:a2:48:d1:9c:
3b:eb:80:f2:46:8f:90:19:10:a7:35:0e:3f:64:60:01:93:55:
aa:d2:53:c0:68:6c:9a:bb:5e:ac:6f:75:a9:86:4e:06:0f:b5:
3d:5f:b7:1b:65:58:ba:4b:64:a2:0f:50:ca:69:15:9d:63:6d:
cc:56:6d:b1:5a:bd:b1:16:42:c9:05:d6:37:53:e6:18:f4:d8:
d2:bb:05:58:04:a7:3a:71:fb:7d:c7:f4:3a:a4:df:2c:c9:54:
30:47:70:61:47:55:0b:d4:1d:a3:2b:57:75:37:de:58:94:58:
43:0e:6c:d0:a3:21:d2:b0:3b:32:40:dd:18:b6:24:cb:7c:a5:
90:15:0f:c0
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QjU4M0NBRjExMC8GA1UEBRMoMjkzRTVDRkY1MzAzMDhCN0YwRjZCODlFMTNGNzBD
NjRGNUUxMDk5QTAeFw0yNDEyMTcxNjA0MjhaFw0yNDEyMzExNjA0MjhaMBgxFjAU
BgNVBAMTDTY1ODQ2MjBmLWUyY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4SNgU0WqxyJttM8ik9aPP/8A059OyDf95wpQt/fSae3J/nSUabHHkEzwO
PD7vEiHk2B1YAr5Lt0NSYdzyR3BHPh2a+nft5sypBgKQXjEv2WB0mBFt37o8dBeM
Yu52s/bXGzeDaYH2aUIWJblNGPK3WktQGp1tscj6vdobUiNKp86Xj+h0qxKx5EXC
ZmDgPZRqu8dg0F0QlR7BMcp6PGEsMm9sq/L4UwO5J+auBYp2GAKsDN5qzR3YT+ZD
SQT1lJujo1jjz5k2aHO+7JhPOJ6MY1pY0lzP0W87W+XAm0ikHrDzFv7gdet200Tn
ROL0UdmswroWl9kMszomexhUbpXnAgMBAAGjggK0MIICsDAdBgNVHQ4EFgQUH8zf
vy8OtBHSMBV/pDhVAhtyG40wHwYDVR0jBBgwFoAUKT5c/1MDCLfw9rieE/cMZPXh
CZowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI1ODNDLzVERjc5QzdDOTcxNTExRUQ5OUY4NDdCOEYxMjIyNDY4L0tUNWNf
MU1EQ0xmdzlyaWVFX2NNWlBYaENaby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0tUNWNfMU1EQ0xmdzlyaWVFX2NNWlBYaENaby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkI1ODNDLzVERjc5QzdDOTcxNTExRUQ5OUY4NDdCOEYx
MjIyNDY4L0EwMTY2RjM0QTAxQTExRUVBMTZCQ0Y1NUQyNUJFNDY1LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAXF14AwDQQCAAIwBwMFACwP
MgAwDQYJKoZIhvcNAQELBQADggEBADhFQCUhKbOZXGj2PG1CJGlUE2jpte27LlXM
Rg3e+PxUrQpY6shwNSE89TPpHiJBDBt++nsed5O4xf89GZn7L0loB0lnQrPCUj7i
K8zfoD6se0vN9BpPXy/T+/E+Br5ARuitx9+oQyUoeSCcTQWRoMXLpTDl8/FuOpOy
okjRnDvrgPJGj5AZEKc1Dj9kYAGTVarSU8BobJq7XqxvdamGTgYPtT1ftxtlWLpL
ZKIPUMppFZ1jbcxWbbFavbEWQskF1jdT5hj02NK7BVgEpzpx+33H9Dqk3yzJVDBH
cGFHVQvUHaMrV3U33liUWEMObNCjIdKwOzJA3Ri2JMt8pZAVD8A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org