Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/685B804C78ED11EE808E734F4AD9E6FC.roa
File: 685B804C78ED11EE808E734F4AD9E6FC.roa (raw, json)
Hash identifier: PzyyQGDYC32MAKShG33WiZN93vVPd2jc+pL5k2cXh5Y=
Subject key identifier: 5B:BF:30:CA:6D:3F:28:73:2C:50:03:06:20:45:A9:5B:E0:37:EB:AB
Certificate issuer: /CN=F36C1E88AF/serialNumber=D9D6E04DE3C3613BCE1DB29D77C6A1388AC4223D
Certificate serial: 04
Authority key identifier: D9:D6:E0:4D:E3:C3:61:3B:CE:1D:B2:9D:77:C6:A1:38:8A:C4:22:3D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2dbgTePDYTvOHbKdd8ahOIrEIj0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/685B804C78ED11EE808E734F4AD9E6FC.roa
Signing time: Wed 01 Nov 2023 19:32:35 +0000
ROA not before: Wed 01 Nov 2023 19:32:25 +0000
ROA not after: Wed 30 Nov 2033 19:32:25 +0000
asID: 328162
IP address blocks: 2001:43f8:d60::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 29 Jun 2024 20:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C1E88AF/serialNumber=D9D6E04DE3C3613BCE1DB29D77C6A1388AC4223D
Validity
Not Before: Nov 1 19:32:25 2023 GMT
Not After : Nov 30 19:32:25 2033 GMT
Subject: CN=6542a7d3-4de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c9:cb:44:10:e8:47:14:f4:99:60:28:ab:75:
f4:15:34:3a:91:c8:5f:ac:5c:d9:b2:b9:f7:c3:e9:
e2:5a:4f:8d:8a:f3:3b:2b:40:fb:61:d2:98:d4:79:
ec:a2:a9:10:18:39:31:1a:5f:87:9c:ab:29:c0:db:
cd:7f:af:38:0c:f7:0b:24:40:06:9d:24:b6:82:d0:
0c:7f:32:d2:40:ac:b5:40:4c:3d:4c:06:f5:9f:b2:
ce:57:63:95:16:7c:55:fc:49:6d:c5:58:27:ff:ce:
1e:af:9c:cc:e3:50:2b:c2:76:77:84:05:15:f3:4a:
60:62:6c:67:b2:e2:f5:cf:f8:7c:ce:73:7f:49:20:
cd:ae:2d:5e:14:49:22:9b:c7:c1:3c:bc:e9:21:c8:
14:46:2b:f6:22:32:99:98:dc:9c:c2:29:f6:f8:02:
64:3d:c6:82:1f:6b:0d:16:30:5b:47:96:b2:e9:f2:
cd:2e:a5:e0:0a:28:79:57:f9:0f:cd:d0:6b:93:55:
0d:5e:33:8b:b2:8f:3e:3a:be:cd:63:5a:74:4a:80:
cf:48:a2:1d:87:3c:3b:96:90:88:40:43:01:6c:b0:
19:de:65:9d:d2:b8:1f:25:30:bb:66:4b:17:7c:5b:
95:fa:3a:e6:b9:88:89:ea:96:4e:02:7a:7f:e3:c0:
cd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BF:30:CA:6D:3F:28:73:2C:50:03:06:20:45:A9:5B:E0:37:EB:AB
X509v3 Authority Key Identifier:
keyid:D9:D6:E0:4D:E3:C3:61:3B:CE:1D:B2:9D:77:C6:A1:38:8A:C4:22:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2dbgTePDYTvOHbKdd8ahOIrEIj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/685B804C78ED11EE808E734F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:d60::/48
Signature Algorithm: sha256WithRSAEncryption
10:51:b0:48:f7:ed:5c:25:99:4b:d5:c8:24:f1:cc:62:15:16:
f2:41:96:5f:b4:e5:8d:60:c7:71:ab:e1:ff:b7:5d:6b:ca:aa:
ee:04:bf:9e:42:83:b5:cc:a2:3b:67:80:9b:39:48:89:42:89:
b5:cc:69:e4:e6:7d:3e:fc:43:22:8a:45:53:42:57:99:e6:e2:
6f:ed:ad:4c:00:b5:85:ab:2c:af:dc:8d:20:d3:5a:8d:eb:5d:
4f:17:6a:cf:bb:26:15:cd:2b:1d:c0:e2:af:2c:cb:fa:80:4e:
48:14:3f:3e:97:ee:7b:67:26:03:84:57:7b:57:0e:b2:fe:d4:
0e:e2:86:77:1d:4b:5d:ef:8a:cb:9e:b9:80:2c:74:6f:65:d1:
fa:d6:60:31:01:f4:4b:48:cf:21:98:6a:f5:cf:00:dc:36:77:
22:37:b5:2d:aa:16:bb:60:e1:dd:04:79:36:63:3e:54:a6:3d:
3c:81:fb:3a:24:af:29:89:e7:f9:1e:8e:a4:e5:4e:a9:fe:90:
14:c1:72:09:ad:31:35:05:31:7f:30:7b:31:48:76:11:bc:7a:
b6:6a:df:71:0f:2d:46:44:12:21:8f:df:ec:7d:18:c5:58:2f:
a7:e8:51:ed:4a:a1:11:80:b6:f4:72:f8:dc:fc:5f:6a:de:96:
2d:d5:ba:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 22:21:44 2024 by rpki-client on console-fra.rpki-client.org