Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/22A46596113211EE93D2C0254AD9E6FC.roa
File: 22A46596113211EE93D2C0254AD9E6FC.roa (raw, json)
Hash identifier: aDBo6XYKZcK5oZFaITXl9/rgbqtpR0Cz4cpGMAJcv8Y=
Subject key identifier: CD:61:49:65:C7:8D:1D:F4:9E:C7:F0:7A:6E:06:87:46:3B:06:97:6D
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0C1D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/22A46596113211EE93D2C0254AD9E6FC.roa
Signing time: Thu 22 Jun 2023 19:22:32 +0000
ROA not before: Thu 22 Jun 2023 19:22:27 +0000
ROA not after: Tue 17 Jun 2025 19:22:27 +0000
asID: 209181
IP address blocks: 196.251.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3101 (0xc1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 22 19:22:27 2023 GMT
Not After : Jun 17 19:22:27 2025 GMT
Subject: CN=64949f78-5e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c3:fd:ca:fb:53:06:b0:f0:05:de:d6:38:bf:
56:4c:94:ac:87:d0:a1:f6:db:e9:3f:4d:45:3a:15:
9c:55:85:ed:84:70:8b:aa:18:04:9b:ec:a2:80:12:
2d:a5:8e:15:af:86:c6:d8:62:c7:4f:1d:69:ae:87:
df:4d:8d:0e:28:f2:73:64:b3:f6:7d:a3:97:24:39:
29:7b:82:28:ea:24:d0:0f:cf:a2:7e:b6:a7:98:e0:
3b:87:8d:51:ab:4c:5d:71:20:aa:4e:69:ee:6f:4b:
fd:70:79:3b:ce:01:b1:12:fd:00:b8:aa:55:18:6e:
24:81:a0:26:70:bd:1d:90:70:5c:e1:85:61:7b:ee:
dc:c7:2f:af:dc:7a:7a:73:54:74:27:69:6a:c1:b7:
85:87:2e:66:c3:35:69:40:77:2d:38:3c:d0:58:41:
51:96:92:7f:70:e0:fc:59:cf:dd:ff:1b:fa:fc:79:
df:7b:85:8e:e7:47:68:fd:77:e6:c7:9a:40:8b:3f:
77:ff:13:37:1d:d4:05:d6:78:ca:78:60:88:c2:2c:
75:8c:53:f1:5c:6c:ec:2c:86:c5:8a:52:05:33:01:
6e:75:7c:5b:f2:6e:de:c2:32:40:28:6c:87:c4:c7:
46:5a:af:6e:fa:88:f0:5d:98:13:89:8f:3b:1e:c6:
72:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:61:49:65:C7:8D:1D:F4:9E:C7:F0:7A:6E:06:87:46:3B:06:97:6D
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/22A46596113211EE93D2C0254AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.249.0/24
Signature Algorithm: sha256WithRSAEncryption
78:59:d2:9c:33:4c:3b:f4:eb:7c:91:20:9d:ec:76:89:46:b2:
ed:74:91:86:86:b0:02:23:86:ed:cb:db:94:93:49:02:65:d6:
89:5b:9f:42:ec:d0:36:e0:b6:2f:d4:d8:21:d4:46:bf:ef:14:
5d:a8:3c:fa:ad:6d:40:60:42:1c:bc:e8:51:8b:77:76:c3:85:
37:c1:1c:90:dd:29:f6:00:8d:dd:cb:b3:2d:e8:0d:ea:8c:43:
48:82:c0:4d:74:0d:b6:15:56:c6:01:4b:da:ef:33:69:d8:76:
65:80:e2:c3:7c:94:8b:9f:f0:b4:e4:b1:85:98:79:d3:00:7b:
b6:04:b1:09:9d:a5:5a:36:50:cf:7e:3e:de:03:d6:30:2c:1e:
f1:22:c5:17:d8:ba:98:cf:d0:a9:3c:bb:75:2b:35:3b:eb:a4:
58:19:dc:d9:95:c3:db:24:22:c8:1b:f5:99:97:dc:ea:72:b0:
b6:78:09:54:bd:17:f4:8b:89:1b:34:11:22:59:7b:53:be:3b:
19:c8:af:da:ea:6f:0b:b0:98:45:8b:d4:37:78:06:66:09:90:
17:bd:6c:bd:5f:36:3d:14:ed:fb:24:b0:6f:a0:b9:14:8f:73:
c4:4c:9a:61:0f:46:c4:17:8a:c1:04:f6:03:75:79:c1:74:d8:
29:08:20:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 22 12:33:42 2023 by rpki-client on console-fra.rpki-client.org