Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/7FB12DB65BF311EFA308E49C762E951A.roa
File: 7FB12DB65BF311EFA308E49C762E951A.roa (raw, json)
Hash identifier: Aun/h8mK7+6ILVldKmQq63kE22yIzb4J34LCtnqPm3c=
Subject key identifier: A2:C3:06:3B:46:3F:4F:B6:27:A7:5E:E3:A0:69:CF:B3:1D:CB:3A:22
Certificate issuer: /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial: 01FE
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/7FB12DB65BF311EFA308E49C762E951A.roa
Signing time: Fri 16 Aug 2024 17:18:05 +0000
ROA not before: Mon 19 Aug 2024 17:18:00 +0000
ROA not after: Sat 19 Aug 2034 17:18:00 +0000
asID: 37105
IP address blocks: 196.2.96.0/20 maxlen: 20
Validation: Failed, certificate revoked on Thu 24 Oct 2024 16:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 510 (0x1fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Validity
Not Before: Aug 19 17:18:00 2024 GMT
Not After : Aug 19 17:18:00 2034 GMT
Subject: CN=66bf89cd-b23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:df:7e:73:93:aa:01:96:ff:1a:88:b6:bd:f7:
bc:9c:37:75:a2:5a:3b:cc:92:2d:24:18:13:d4:af:
48:5b:20:00:d2:cd:19:37:86:3a:10:ee:dc:ab:ac:
ab:45:81:64:81:32:e9:f8:b9:78:e8:c8:64:4b:55:
77:a4:14:4a:7d:3b:e8:c9:7b:3d:18:a0:0c:83:98:
9c:f9:5c:91:30:ad:2f:70:1b:e6:2b:20:f3:1a:fa:
1d:51:b2:a2:bf:a6:c4:93:69:0f:d1:d1:ae:e3:f5:
0f:0b:58:91:2b:56:f7:c5:56:91:03:84:c7:12:10:
e0:6e:6c:00:57:19:3f:f4:36:8c:bd:00:7e:82:5c:
94:67:ff:eb:c9:db:9a:66:e1:98:4a:bb:06:26:d1:
d9:48:2b:1c:f2:f4:7b:8b:6c:fa:e2:aa:4b:c8:82:
eb:29:8a:f5:82:d5:d4:91:5a:62:eb:ab:77:81:8d:
66:73:b3:4c:17:ab:3d:5c:21:a3:83:42:40:fe:b9:
87:2a:97:a5:a3:93:54:dc:d5:37:4a:c2:df:46:d3:
b9:dc:42:b2:44:66:7d:21:1a:37:a9:41:b9:6c:d6:
3e:9e:af:0d:a2:e1:73:d4:ed:8b:ec:83:6c:61:c9:
a3:d0:e9:9b:45:00:31:d9:35:b6:28:1a:0b:25:c7:
f7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C3:06:3B:46:3F:4F:B6:27:A7:5E:E3:A0:69:CF:B3:1D:CB:3A:22
X509v3 Authority Key Identifier:
keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/7FB12DB65BF311EFA308E49C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.2.96.0/20
Signature Algorithm: sha256WithRSAEncryption
06:c1:91:4d:31:55:75:85:f4:bd:9a:e9:e9:fe:50:4d:ba:d7:
2f:99:0e:71:16:1e:e7:eb:ac:b4:ae:8a:6c:62:be:8a:b6:5b:
ff:94:22:05:cf:cb:5e:ba:bb:2d:7b:5e:d3:11:73:ff:9f:ce:
18:f9:cc:90:57:1c:80:c7:ba:33:ae:8d:85:26:d4:ac:62:2b:
67:2f:cc:0d:82:46:cc:41:69:c2:ea:ea:8e:38:c9:56:8c:56:
ec:1b:16:c5:4b:2f:d4:1a:60:22:db:0d:f3:15:f6:bc:54:8b:
5f:bd:23:fc:2c:5d:10:f8:db:10:e2:b9:76:e3:d3:37:e9:a0:
4c:cb:89:55:61:df:88:b5:aa:6e:5c:20:44:e6:0d:e5:03:df:
69:7a:19:0b:4b:19:ef:c2:a5:49:99:fd:19:c1:07:0d:71:8f:
7a:08:80:2e:59:51:ef:52:39:07:26:b0:f6:af:ca:67:c4:3b:
31:ef:7e:5f:47:59:98:e4:5f:a5:01:35:6a:1a:4d:a4:3d:96:
7b:3f:b4:37:e1:33:12:2e:7f:ee:f4:75:e6:2b:51:e4:98:e3:
61:cb:04:c9:97:11:b1:ee:7d:a3:39:65:26:30:2a:53:bd:d6:
a4:e8:9f:54:ee:d4:59:d6:5b:bc:fc:b8:51:f6:b6:65:74:b3:
fc:2d:c4:56
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkJGNDFBRjExMC8GA1UEBRMoM0Y2NzdGM0ExOEFDQUFFNkM5N0Y4MUY5OUFFODc5
NDY1NEUwNDEwQjAeFw0yNDA4MTkxNzE4MDBaFw0zNDA4MTkxNzE4MDBaMBgxFjAU
BgNVBAMTDTY2YmY4OWNkLWIyM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDM335zk6oBlv8aiLa997ycN3WiWjvMki0kGBPUr0hbIADSzRk3hjoQ7tyr
rKtFgWSBMun4uXjoyGRLVXekFEp9O+jJez0YoAyDmJz5XJEwrS9wG+YrIPMa+h1R
sqK/psSTaQ/R0a7j9Q8LWJErVvfFVpEDhMcSEOBubABXGT/0Noy9AH6CXJRn/+vJ
25pm4ZhKuwYm0dlIKxzy9HuLbPriqkvIguspivWC1dSRWmLrq3eBjWZzs0wXqz1c
IaODQkD+uYcql6Wjk1Tc1TdKwt9G07ncQrJEZn0hGjepQbls1j6erw2i4XPU7Yvs
g2xhyaPQ6ZtFADHZNbYoGgslx/epAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUosMG
O0Y/T7Ynp17joGnPsx3LOiIwHwYDVR0jBBgwFoAUP2d/OhisqubJf4H5muh5RlTg
QQswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJCRjQxLzE0Q0RGOEIyMTBENjExRUU5NThDMEYxNTRBRDlFNkZDL1AyZF9P
aGlzcXViSmY0SDVtdWg1UmxUZ1FRcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1AyZF9PaGlzcXViSmY0SDVtdWg1UmxUZ1FRcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkJCRjQxLzE0Q0RGOEIyMTBENjExRUU5NThDMEYxNTRB
RDlFNkZDLzdGQjEyREI2NUJGMzExRUZBMzA4RTQ5Qzc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATEAmAwDQYJKoZIhvcNAQEL
BQADggEBAAbBkU0xVXWF9L2a6en+UE261y+ZDnEWHufrrLSuimxivoq2W/+UIgXP
y166uy17XtMRc/+fzhj5zJBXHIDHujOujYUm1KxiK2cvzA2CRsxBacLq6o44yVaM
VuwbFsVLL9QaYCLbDfMV9rxUi1+9I/wsXRD42xDiuXbj0zfpoEzLiVVh34i1qm5c
IETmDeUD32l6GQtLGe/CpUmZ/RnBBw1xj3oIgC5ZUe9SOQcmsPavymfEOzHvfl9H
WZjkX6UBNWoaTaQ9lns/tDfhMxIuf+70deYrUeSY42HLBMmXEbHufaM5ZSYwKlO9
1qTon1Tu1FnWW7z8uFH2tmV0s/wtxFY=
-----END CERTIFICATE-----
Generated at Thu Oct 24 19:10:32 2024 by rpki-client on console-fra.rpki-client.org