Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/74D3F1A41CA611EE892F82744AD9E6FC.roa
File: 74D3F1A41CA611EE892F82744AD9E6FC.roa (raw, json)
Hash identifier: bUKu40GIiYagtIuovm+kZ6sOtu/Y4KhUFapHr9p7C+M=
Subject key identifier: 0B:39:0A:FE:E0:0F:5D:E4:F1:27:4A:7A:CC:D6:BC:CE:EC:94:7D:65
Certificate issuer: /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial: 4C
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/74D3F1A41CA611EE892F82744AD9E6FC.roa
Signing time: Fri 07 Jul 2023 09:12:55 +0000
ROA not before: Fri 07 Jul 2023 09:12:49 +0000
ROA not after: Thu 07 Jul 2033 09:12:49 +0000
asID: 37105
IP address blocks: 41.56.0.0/24 maxlen: 24
41.56.64.0/18 maxlen: 18
Validation: Failed, certificate revoked on Tue 03 Sep 2024 07:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76 (0x4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Validity
Not Before: Jul 7 09:12:49 2023 GMT
Not After : Jul 7 09:12:49 2033 GMT
Subject: CN=64a7d716-c37c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:80:64:e1:aa:0a:7d:27:8f:17:9a:3e:a2:62:
6c:73:f8:9f:de:ac:be:fd:29:d7:88:05:15:6d:84:
17:a2:3d:c4:8d:d3:16:ff:0f:12:76:fb:fd:c4:2f:
92:33:ac:3f:4b:38:66:db:c0:d9:25:93:11:b0:40:
95:88:2d:81:d9:bf:54:2b:56:4f:47:b0:05:35:f9:
76:48:25:5a:1f:d0:1f:9d:34:24:80:99:a7:f6:ae:
02:17:60:6f:f7:f4:8d:83:67:00:77:be:88:68:53:
c5:f0:82:3a:e9:5d:db:91:d7:a1:1e:0c:08:68:27:
ea:80:74:95:e8:eb:c6:3e:ad:45:0c:b5:06:06:03:
40:d1:ed:27:90:cb:50:9d:e2:28:fe:09:ed:d7:42:
2a:3c:39:bd:82:b1:0d:9f:fa:71:f1:27:b6:6d:5d:
0a:4a:5a:96:8b:3e:fb:3c:9e:0a:70:61:78:36:c1:
e9:80:03:4b:a4:c0:89:df:7e:7b:79:69:22:ad:c0:
e8:b6:10:8b:0a:8a:41:d8:d4:3a:b3:ff:f4:3b:e4:
f4:0b:3f:97:69:5c:7f:0b:80:11:ff:16:41:84:6f:
f6:96:c1:01:ef:7e:9b:cb:e4:d3:90:76:c6:db:b5:
5b:ab:ac:84:8a:16:94:3e:da:6f:88:05:90:ad:93:
3a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:39:0A:FE:E0:0F:5D:E4:F1:27:4A:7A:CC:D6:BC:CE:EC:94:7D:65
X509v3 Authority Key Identifier:
keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/74D3F1A41CA611EE892F82744AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.56.0.0/24
41.56.64.0/18
Signature Algorithm: sha256WithRSAEncryption
7d:9a:43:55:f1:f3:aa:b7:57:c3:06:04:fa:df:84:b1:92:62:
ea:6a:9a:3b:b8:d2:f5:f1:a4:27:9a:c3:36:5f:0f:b6:8f:3a:
ec:7a:a4:dd:af:03:7f:1c:38:33:64:34:7c:f7:23:5d:b1:cb:
0b:23:56:81:78:d6:5c:8f:d1:8f:ce:b7:c2:8f:e1:d4:92:db:
22:ad:14:b1:30:8d:4d:6e:af:24:cb:84:48:38:ea:2d:10:35:
87:24:fd:9c:bd:bf:35:41:d0:c0:dc:65:ef:b8:55:ca:eb:01:
9e:d6:82:12:58:75:95:16:72:3f:7d:32:fc:4a:4a:7e:48:27:
41:79:53:b6:77:e4:ca:8c:83:ff:a4:d9:4e:54:a5:11:fc:b4:
bd:f8:25:53:92:aa:cf:7c:b5:1b:05:a4:b3:a1:18:86:38:c2:
a2:fb:55:88:04:26:46:87:8f:54:27:44:25:af:85:dd:d0:4e:
c1:dd:0a:5a:df:30:ba:63:41:89:a9:18:98:90:25:ef:cc:6c:
f6:07:8a:8e:19:c5:dc:89:d3:7b:23:76:28:50:7f:98:e4:bd:
c1:fb:b8:bb:94:32:61:56:96:e9:b0:64:67:54:82:d8:c4:ae:
3e:f0:bd:5a:e9:9f:88:a7:60:a1:d9:b1:ca:0b:b7:d9:e0:10:
fa:9f:e1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 09:41:52 2024 by rpki-client on console-fra.rpki-client.org