Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3384/A7F90D10B30011EB848B4A5CF8AEA228/4EB22C50C10511ECA2212299F1222468.roa
File: 4EB22C50C10511ECA2212299F1222468.roa (raw, json)
Hash identifier: CThzn9Q1+g/i0qjkbysERLt3nWDl3Ha+lm8GnRJAgvE=
Subject key identifier: C2:86:A4:5B:39:4E:8C:78:FF:8D:8D:02:BC:08:76:1D:6F:7C:0B:85
Certificate issuer: /CN=F36C3384AF/serialNumber=32E6680B0A20A80019EBBAC02D331EB30270DE87
Certificate serial: 0171
Authority key identifier: 32:E6:68:0B:0A:20:A8:00:19:EB:BA:C0:2D:33:1E:B3:02:70:DE:87
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/MuZoCwogqAAZ67rALTMeswJw3oc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C3384/A7F90D10B30011EB848B4A5CF8AEA228/4EB22C50C10511ECA2212299F1222468.roa
Signing time: Wed 20 Apr 2022 23:55:08 +0000
ROA not before: Thu 21 Apr 2022 23:55:04 +0000
ROA not after: Sat 21 Apr 2040 23:55:04 +0000
asID: 328594
IP address blocks: 41.242.152.0/21 maxlen: 21
41.242.152.0/22 maxlen: 22
41.242.152.0/23 maxlen: 23
41.242.152.0/24 maxlen: 24
41.242.153.0/24 maxlen: 24
41.242.154.0/23 maxlen: 23
41.242.154.0/24 maxlen: 24
41.242.155.0/24 maxlen: 24
41.242.156.0/22 maxlen: 22
41.242.156.0/23 maxlen: 23
41.242.156.0/24 maxlen: 24
41.242.157.0/24 maxlen: 24
41.242.158.0/23 maxlen: 23
41.242.158.0/24 maxlen: 24
41.242.159.0/24 maxlen: 24
2c0f:eb98::/32 maxlen: 32
2c0f:eb98::/48 maxlen: 48
2c0f:eb98:13::/48 maxlen: 48
2c0f:eb98:14::/48 maxlen: 48
2c0f:eb98:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 21 Apr 2022 08:08:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369 (0x171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C3384AF/serialNumber=32E6680B0A20A80019EBBAC02D331EB30270DE87
Validity
Not Before: Apr 21 23:55:04 2022 GMT
Not After : Apr 21 23:55:04 2040 GMT
Subject: CN=62609d5c-87dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fd:05:ef:38:fb:cd:40:7e:0c:78:16:3a:2e:
08:4e:f7:21:e0:c0:b0:ea:ae:be:e4:0c:c2:dd:2f:
c8:db:54:13:a5:10:db:e8:5a:0e:19:9a:96:83:37:
04:43:b5:6f:e3:00:0e:37:bf:8c:e6:6c:b7:42:dc:
d4:09:cf:69:6a:31:21:3a:b8:ce:eb:34:c1:e2:93:
dd:25:91:62:28:9f:9d:2c:71:c1:bd:6e:91:c6:87:
b5:19:93:55:25:c2:b4:7b:37:76:6f:5f:fe:dc:89:
9f:58:d5:53:02:73:fc:3b:b4:67:fc:cf:94:2e:19:
34:a7:d9:87:f6:18:df:6f:b7:9b:b2:21:b2:b7:36:
e8:a7:2b:9a:68:90:4c:62:9a:8c:03:a3:0b:11:03:
27:34:12:fc:4c:48:97:be:43:03:89:a3:01:bd:15:
0c:c0:0f:8c:2a:34:80:14:02:c6:00:f6:4f:9e:f9:
ed:f5:11:68:cd:f7:7d:b5:2f:b2:c0:06:77:54:9f:
e5:c5:ea:96:92:5a:ed:69:4a:85:81:65:ef:b9:33:
29:78:d4:49:79:bd:e2:80:20:9e:cd:c7:3c:53:9a:
ec:61:a1:83:1b:73:8e:03:2f:3f:42:6b:7c:d5:3e:
ec:4f:1c:fc:5b:97:e1:63:63:d6:f8:97:38:e1:8f:
44:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:86:A4:5B:39:4E:8C:78:FF:8D:8D:02:BC:08:76:1D:6F:7C:0B:85
X509v3 Authority Key Identifier:
keyid:32:E6:68:0B:0A:20:A8:00:19:EB:BA:C0:2D:33:1E:B3:02:70:DE:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3384/A7F90D10B30011EB848B4A5CF8AEA228/MuZoCwogqAAZ67rALTMeswJw3oc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MuZoCwogqAAZ67rALTMeswJw3oc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3384/A7F90D10B30011EB848B4A5CF8AEA228/4EB22C50C10511ECA2212299F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.242.152.0/21
IPv6:
2c0f:eb98::/32
Signature Algorithm: sha256WithRSAEncryption
a1:91:87:81:56:3f:21:38:2d:23:d6:80:60:9c:f9:6f:b3:75:
1b:19:2f:b7:0c:44:6c:a4:56:88:5d:68:55:86:23:c4:4b:91:
ca:98:58:bf:03:65:43:0b:32:2d:27:10:a7:ed:ae:b5:36:39:
00:30:46:9c:82:b1:1c:b8:78:98:78:98:b9:ed:7b:80:d6:f7:
73:55:78:48:be:55:8e:06:fb:87:9e:a0:54:8f:cb:38:3f:bd:
81:69:c5:30:be:02:ce:49:3a:c2:cf:c8:c4:9d:de:25:04:38:
c4:68:31:95:8a:18:54:34:9e:d5:7e:56:ea:17:a5:58:f9:95:
98:ff:b1:7b:fa:17:6f:c5:32:2a:97:b8:64:a0:81:26:af:4c:
d9:88:0d:68:96:d0:30:c9:67:5c:e9:97:a0:d2:0a:d8:a5:a0:
c8:db:ba:56:9e:f8:a6:9a:53:82:96:54:12:5d:e8:b4:45:5a:
d2:a1:0c:5a:19:1d:9b:b7:ad:db:b7:55:01:2f:f9:3e:81:18:
97:58:97:cc:7b:6d:5a:27:6a:91:ac:8b:bf:80:9c:7e:24:15:
af:95:03:56:f4:ea:74:37:d6:f9:a9:2a:66:da:8a:d4:db:a2:
2b:79:c8:ad:e3:88:53:98:c1:9a:5b:38:46:32:2f:5b:c5:df:
5f:e6:8c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org