Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/9E7B907C1F1F11EEA5F8127A4AD9E6FC.roa
File: 9E7B907C1F1F11EEA5F8127A4AD9E6FC.roa (raw, json)
Hash identifier: +KPs/X1OTXkhFZ2sMQ+737SzDMOY+X8D91MyUK/7nz4=
Subject key identifier: 9B:84:A0:D4:E8:8E:F6:69:96:E9:36:77:7B:2D:18:1F:98:4B:45:0F
Certificate issuer: /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial: 52
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/9E7B907C1F1F11EEA5F8127A4AD9E6FC.roa
Signing time: Mon 10 Jul 2023 12:45:16 +0000
ROA not before: Mon 10 Jul 2023 12:45:11 +0000
ROA not after: Sun 10 Jul 2033 12:45:11 +0000
asID: 37105
IP address blocks: 41.216.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 Aug 2024 10:22:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82 (0x52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Validity
Not Before: Jul 10 12:45:11 2023 GMT
Not After : Jul 10 12:45:11 2033 GMT
Subject: CN=64abfd5c-9a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b7:d2:0b:26:f6:95:97:21:12:09:c6:7c:ec:
ed:c9:34:aa:77:0a:56:1a:44:1f:17:15:94:2c:ab:
c0:e1:e6:c1:0c:70:e1:d5:b5:b1:b8:7c:c4:19:b9:
f1:41:ba:96:c0:e8:62:e6:35:23:33:b7:a0:7b:43:
bf:a1:24:91:08:ed:27:b8:a4:6d:b9:f8:ea:f8:73:
72:15:5c:84:45:fa:7c:43:95:00:8a:17:16:70:b2:
ff:03:22:eb:ab:c6:47:fd:5b:d8:ef:ac:37:ca:a6:
89:23:c3:be:08:cb:9d:ce:25:6c:59:f3:24:b7:08:
fa:df:e0:aa:b8:32:ad:e0:00:6b:7b:25:74:f7:91:
d2:61:b8:ae:aa:54:0a:5b:82:cf:e7:fb:05:5d:4c:
c2:04:a9:f8:f6:d7:0d:7b:f7:7c:30:4d:c9:6b:b9:
ce:07:54:8f:1b:cb:b4:e8:74:e2:e9:63:f9:a7:fb:
67:43:17:90:45:cc:b9:2c:6d:ad:3f:be:7e:af:56:
b5:9e:39:c3:06:21:1a:38:69:59:bf:01:b1:cd:84:
cb:0c:9e:9a:5c:28:99:ad:01:c0:ff:12:c1:a4:09:
a2:79:d8:a4:db:c5:70:cd:19:58:23:c0:95:0f:fd:
73:3e:b6:79:d7:83:fd:68:bd:ee:0f:e4:74:f8:ad:
d0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:84:A0:D4:E8:8E:F6:69:96:E9:36:77:7B:2D:18:1F:98:4B:45:0F
X509v3 Authority Key Identifier:
keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/9E7B907C1F1F11EEA5F8127A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.200.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:c5:24:dd:7e:f4:9c:a6:e7:d1:e9:7b:a9:a0:8a:70:d4:ad:
25:1d:3e:31:b2:f3:0d:a1:b2:c6:1d:c6:7c:da:93:77:84:8f:
2f:a0:c2:b0:d7:6a:0c:0e:7f:78:0e:08:6c:7e:ac:fc:28:55:
63:93:52:6f:eb:7b:1d:a5:51:a2:e4:75:d2:41:4f:e3:94:6c:
ff:71:d1:72:3f:76:d0:0f:3a:29:71:c5:1b:c3:0d:fe:92:63:
14:68:b3:23:02:2b:e4:d4:41:72:3e:42:d5:6a:f4:53:4d:cc:
7d:e8:5f:9c:9b:b2:fa:2c:e4:49:4b:ad:31:fe:f1:12:99:94:
14:ac:4e:a7:df:bd:d1:ac:81:1e:0c:06:c5:e0:90:58:15:f5:
e9:5f:6e:20:2b:4a:52:9d:6a:14:b2:9e:62:84:4a:ef:d0:ac:
d1:d8:bb:0d:a1:c9:c6:e7:61:dd:b7:86:dd:5a:6e:3c:99:21:
bc:d0:bf:9f:b8:ce:3e:52:ca:12:96:1d:39:1d:0d:83:38:be:
d7:f9:59:73:46:54:72:ee:88:85:89:72:a4:75:04:2a:05:39:
1d:db:f1:96:2c:55:27:c2:57:5b:74:5c:99:dc:5f:ad:8d:2a:
be:3b:e0:1c:32:6c:61:e5:f7:fc:e2:8f:fc:88:3a:0b:dc:dd:
02:4f:98:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 24 13:38:17 2024 by rpki-client on console-ams.rpki-client.org