Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/90535D529A8C11EEB497063ED25BE465.roa
File: 90535D529A8C11EEB497063ED25BE465.roa (raw, json)
Hash identifier: rpFN+uwSepVJD5RrKQcg2xm4V92Lm/xk9uUESiLDOC4=
Subject key identifier: 5F:E5:63:B7:61:6D:FB:0B:45:2E:F4:84:29:BA:03:9A:3F:2D:37:3F
Certificate issuer: /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial: F7
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/90535D529A8C11EEB497063ED25BE465.roa
Signing time: Thu 14 Dec 2023 14:25:00 +0000
ROA not before: Thu 14 Dec 2023 14:24:57 +0000
ROA not after: Wed 14 Dec 2033 14:24:57 +0000
asID: 37105
IP address blocks: 41.56.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 Aug 2024 09:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 247 (0xf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Validity
Not Before: Dec 14 14:24:57 2023 GMT
Not After : Dec 14 14:24:57 2033 GMT
Subject: CN=657b103c-9139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5a:75:20:78:72:05:6a:87:bc:ca:ce:23:a8:
99:51:c6:4c:8b:f9:b3:2f:a9:df:15:1e:eb:5d:5f:
a9:18:d4:c7:b4:62:b2:6a:4c:00:c6:e0:38:7c:14:
d9:6b:af:ef:3f:ce:2d:e2:4d:ed:a8:81:ee:47:2a:
d9:f6:2f:9c:54:ab:57:d3:b3:8a:6e:25:7e:e8:d4:
5f:3f:07:64:b9:bd:c4:74:05:ce:e2:3d:fa:01:7b:
3a:c3:b7:ee:64:f7:f6:73:1b:c8:43:36:cd:08:46:
63:ab:1e:08:5d:a9:84:73:56:ea:e4:27:51:4b:19:
db:65:bf:3a:b4:f6:66:8b:71:ce:2a:6c:30:15:31:
f5:2b:35:1f:04:9b:2c:e5:d6:e1:60:2c:1f:98:c4:
9c:6a:68:ad:41:48:f3:e0:c8:c9:58:e7:b5:87:19:
75:6e:71:59:27:99:40:0b:fe:63:94:79:03:d7:3a:
d1:12:55:4f:cc:cd:f5:0a:a5:c4:df:17:10:0a:95:
3a:68:6d:f8:29:a9:74:e5:53:26:5c:0b:d7:00:ca:
b3:32:c9:c0:ea:ab:7a:95:00:94:ec:29:53:f5:63:
c5:4e:97:0c:a5:a1:a5:13:32:39:53:72:b9:94:48:
64:3e:e1:28:b4:84:e3:ca:30:91:b4:01:3a:1b:f6:
5b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E5:63:B7:61:6D:FB:0B:45:2E:F4:84:29:BA:03:9A:3F:2D:37:3F
X509v3 Authority Key Identifier:
keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/90535D529A8C11EEB497063ED25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.56.42.0/24
Signature Algorithm: sha256WithRSAEncryption
75:58:84:ba:e9:72:45:d8:94:a2:72:67:6a:81:1f:21:a8:ed:
6f:8c:7f:2d:33:f8:f5:5d:e2:6e:f0:99:74:4d:34:20:bf:00:
4e:e7:1b:9d:2b:30:39:65:1b:cf:d2:8b:25:e0:7c:1f:80:11:
b1:25:28:a3:c8:b1:ef:99:ac:62:14:ae:28:ee:1f:ca:da:da:
a9:af:2e:89:67:f9:06:c0:98:49:70:a1:d3:ff:6f:63:d8:61:
32:9b:9c:cc:2c:3e:55:1f:e8:0f:67:da:a5:bb:69:76:51:90:
44:06:77:80:a0:70:3b:a1:39:db:eb:b7:1e:65:99:3b:61:e8:
2a:a0:3f:3d:92:99:9a:24:a1:98:2d:f9:e6:24:46:da:51:93:
5c:30:97:01:57:80:cd:3d:32:91:87:11:90:37:2a:36:df:8f:
40:2c:2e:95:b2:54:2b:5a:dd:c8:f6:5d:d4:b1:07:75:7f:83:
2e:25:b7:1a:cd:39:86:cb:e0:fa:55:57:69:aa:7d:15:e2:83:
c9:a4:e2:35:0b:ad:bd:cd:5d:7e:e4:ad:50:d9:9e:a7:3b:8c:
cf:cb:4e:22:2a:67:5c:ad:b6:97:2d:e2:c2:71:59:36:09:c7:
e7:26:ad:45:4a:09:f4:79:37:64:75:5a:90:08:6c:ad:9b:b1:
1f:bd:70:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 24 10:34:37 2024 by rpki-client on console-ams.rpki-client.org