Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/03547DD4FA0311ED94BDF0624AD9E6FC.roa
File: 03547DD4FA0311ED94BDF0624AD9E6FC.roa (raw, json)
Hash identifier: hyVJu5to+QGsMz+GL3GMvUioTcipIOVjMRpWh7mJE9M=
Subject key identifier: 80:8F:83:62:AA:4D:F2:F6:68:0A:D1:89:5C:18:02:3F:75:03:9F:BB
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0B9F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/03547DD4FA0311ED94BDF0624AD9E6FC.roa
Signing time: Wed 24 May 2023 07:17:17 +0000
ROA not before: Wed 24 May 2023 07:17:12 +0000
ROA not after: Fri 23 May 2025 07:17:12 +0000
asID: 30081
IP address blocks: 196.251.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2975 (0xb9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 24 07:17:12 2023 GMT
Not After : May 23 07:17:12 2025 GMT
Subject: CN=646db9fc-35e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6e:84:5b:6c:98:37:73:35:14:bf:ce:19:41:
b2:c9:26:0b:56:7f:b9:ab:07:1d:c2:93:7d:bb:2a:
73:42:e0:24:32:82:f5:95:8f:82:ba:7c:14:e0:63:
38:a5:6c:1f:49:6f:1e:91:12:db:4d:8d:34:2c:56:
fc:03:f5:ca:9c:72:f2:bf:f5:06:48:53:72:c4:c5:
24:81:e3:89:9f:32:69:c5:b0:8e:d4:d2:8b:fa:ce:
38:42:55:e9:e6:d1:18:02:8b:05:d1:75:75:ab:22:
4e:1f:e7:a4:29:bb:28:bf:52:ff:3d:69:fe:28:a8:
91:60:ee:d8:3a:c5:65:92:c9:d0:ec:6e:31:51:8a:
0a:50:78:8e:8e:7f:40:9e:5c:d8:82:34:63:98:4e:
1a:23:e6:b5:59:7c:1d:72:70:e1:60:21:2e:13:0a:
31:72:7d:88:ec:19:6a:f9:27:be:53:93:1b:0f:82:
94:df:63:5f:9f:4d:5b:98:8f:52:5f:eb:9f:32:59:
3b:9b:73:de:86:ab:12:2f:44:8a:81:1c:c8:d9:ae:
28:d4:bc:47:b6:a5:89:80:08:b0:96:fe:e6:99:04:
ae:6f:a0:83:84:55:a0:f8:78:c9:96:96:a9:68:2e:
8d:03:7f:74:91:87:5f:d6:08:fd:af:01:36:3a:2d:
81:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8F:83:62:AA:4D:F2:F6:68:0A:D1:89:5C:18:02:3F:75:03:9F:BB
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/03547DD4FA0311ED94BDF0624AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.251.0/24
Signature Algorithm: sha256WithRSAEncryption
46:8e:29:5d:86:7c:be:c7:e8:a8:d6:3b:4d:87:7d:a2:8a:9b:
e8:18:5b:fb:e9:63:20:04:15:5a:24:af:7e:f8:d6:88:5b:d9:
ee:85:9e:37:ce:62:aa:08:07:ff:77:b8:89:90:9c:cf:35:6b:
bd:c8:f2:62:cd:10:2a:11:71:1c:78:3f:41:5b:67:fa:86:7d:
2b:29:81:a7:bb:d1:d0:5f:04:72:c2:f4:d9:19:d6:32:94:32:
c0:fb:c9:9f:29:60:90:d5:e6:1a:d0:ed:0b:80:1d:d4:b2:d0:
72:fd:5b:9d:52:e7:dd:15:b9:5f:65:8b:79:6a:d5:f2:f7:13:
22:98:ab:e1:42:9d:a6:6c:2d:f9:0f:e5:a8:08:33:bb:76:52:
69:88:dc:d1:77:e7:81:f3:63:f1:a1:11:d6:32:f1:f6:77:d6:
69:6e:ba:7b:51:da:72:49:9f:61:39:ec:05:e1:ca:c7:22:db:
43:07:ca:4c:3b:a6:8d:85:f3:a6:2b:f1:f5:64:02:bf:e5:25:
be:e5:10:68:01:3d:83:32:54:03:b3:2b:36:cf:79:73:7b:ac:
10:64:79:78:d0:56:bc:20:d1:96:3e:bf:7c:a1:bf:9d:ef:6f:
72:25:82:23:33:ea:21:34:72:d8:d5:ab:22:31:28:0c:d7:11:
42:d5:b8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org