Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/1EA8099C8A0411EFB73F3A91762E951A.roa
File: 1EA8099C8A0411EFB73F3A91762E951A.roa (raw, json)
Hash identifier: uKfuden1vU6UjgZkwXrdoNVgoBACmDQjhGLRAIDjfwo=
Subject key identifier: 75:3F:12:6A:5F:19:61:ED:B1:33:E5:B6:E8:E8:F2:DD:E9:D5:03:04
Certificate issuer: /CN=F36C06DFAF/serialNumber=8BF44A3919B01DD545A5137DC96D8887C14494C4
Certificate serial: 0D
Authority key identifier: 8B:F4:4A:39:19:B0:1D:D5:45:A5:13:7D:C9:6D:88:87:C1:44:94:C4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/1EA8099C8A0411EFB73F3A91762E951A.roa
Signing time: Mon 14 Oct 2024 08:12:57 +0000
ROA not before: Mon 14 Oct 2024 08:12:53 +0000
ROA not after: Mon 08 Oct 2040 08:12:53 +0000
asID: 37467
IP address blocks: 197.154.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 10:59:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C06DFAF/serialNumber=8BF44A3919B01DD545A5137DC96D8887C14494C4
Validity
Not Before: Oct 14 08:12:53 2024 GMT
Not After : Oct 8 08:12:53 2040 GMT
Subject: CN=670cd289-daa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bd:0d:0b:d3:5c:7e:ac:c9:e6:ac:03:97:f3:
4c:8a:b8:c0:aa:78:66:f1:ef:46:8c:ed:8f:23:9e:
34:70:18:6c:94:a3:5c:88:75:03:26:c3:2b:a7:1e:
ae:22:97:21:f7:7b:f7:e4:8c:15:c8:1c:74:a4:19:
21:a4:9d:5a:89:66:4c:ad:ba:04:81:f8:2b:ce:3a:
64:82:96:41:4f:d1:ce:45:ec:93:1e:f7:f4:13:6b:
d1:d9:bc:1f:4b:0d:d4:e3:6d:5f:c4:d1:94:cf:e6:
2e:e1:da:40:08:5f:f7:8f:40:51:dc:16:8a:ef:0b:
15:f1:1c:3c:e0:02:cc:7c:ec:92:d6:ee:e5:7e:59:
c2:a3:52:86:02:4a:4a:52:6e:01:64:15:c4:d2:de:
9e:64:e1:b9:d8:0a:12:e9:cd:c8:5b:19:60:74:00:
9b:bd:88:af:ba:22:d2:30:5a:a0:9d:2a:f8:99:6c:
30:a8:86:a0:bf:18:49:57:cb:e4:24:14:15:b1:c8:
12:43:c9:62:0d:d1:36:cd:5c:4b:4a:ba:59:c2:45:
18:42:50:42:14:74:54:94:8a:8c:4c:c2:25:19:09:
69:44:73:81:5a:6e:7c:c2:dc:c3:de:c0:53:b6:9d:
52:99:6b:b7:6b:48:e9:1d:a8:15:fb:b3:0e:31:bb:
49:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3F:12:6A:5F:19:61:ED:B1:33:E5:B6:E8:E8:F2:DD:E9:D5:03:04
X509v3 Authority Key Identifier:
keyid:8B:F4:4A:39:19:B0:1D:D5:45:A5:13:7D:C9:6D:88:87:C1:44:94:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/1EA8099C8A0411EFB73F3A91762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.154.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6f:5a:ac:89:79:63:3e:0f:54:91:11:91:f2:58:91:50:d3:6f:
22:69:b9:c9:d5:a5:21:ce:9b:6a:32:33:21:a9:92:87:3a:ab:
b5:dd:af:cf:dd:ea:42:92:75:90:45:b8:43:06:1e:b2:51:0c:
12:7e:28:56:15:e7:cd:2f:0d:bb:24:fe:98:5b:99:4f:a3:86:
fd:76:ad:97:0a:d4:98:35:a3:4a:d3:50:46:5f:56:26:1b:85:
8d:fe:13:c5:fe:bb:b7:20:65:e1:52:db:98:c4:47:cc:1e:d7:
88:ae:e7:d3:f7:93:6f:03:61:9b:53:8f:e6:c9:d1:04:3a:c0:
30:c2:b0:39:c2:f4:23:86:69:a6:dd:36:f0:70:fd:f3:6d:f5:
04:6d:81:20:7c:03:26:bd:03:35:ca:5c:52:7e:e9:ca:38:04:
6e:e1:5f:aa:c2:55:f2:b4:bf:0f:39:c2:99:be:22:c0:43:32:
6a:fa:38:dd:54:4d:b9:dc:b2:4e:de:c2:05:76:7a:dd:4c:c6:
e9:37:a8:a6:3c:2d:f1:fa:3d:6d:be:11:2f:04:a3:8b:29:a4:
c2:3c:11:82:db:be:e1:59:15:30:0d:94:a4:97:0d:a9:94:a7:
8c:f8:76:a6:60:01:88:11:94:72:a4:d5:b4:ea:2d:1d:d9:9a:
d8:6c:44:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 14 13:08:42 2024 by rpki-client on console-fra.rpki-client.org