Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3D67251214E811EE9685ED5F4AD9E6FC.roa
File: 3D67251214E811EE9685ED5F4AD9E6FC.roa (raw, json)
Hash identifier: UOxrgIwsCt2+wmvdepjspKpZ67BDueJCscmvVfp2IpU=
Subject key identifier: 50:82:06:69:E7:60:4A:6C:E9:AB:C9:9B:11:1E:12:25:2E:11:7B:06
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0C2E
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3D67251214E811EE9685ED5F4AD9E6FC.roa
Signing time: Tue 27 Jun 2023 12:43:39 +0000
ROA not before: Tue 27 Jun 2023 12:43:34 +0000
ROA not after: Sat 28 Jun 2025 12:43:34 +0000
asID: 205220
IP address blocks: 196.251.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Aug 2023 06:55:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3118 (0xc2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 27 12:43:34 2023 GMT
Not After : Jun 28 12:43:34 2025 GMT
Subject: CN=649ad97b-e729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ef:b1:b6:3d:ed:46:6a:37:19:51:8a:a9:da:
f7:3f:2d:84:04:80:c6:3c:df:4e:8f:fa:8b:68:f0:
a1:9c:7c:94:c5:09:10:b7:db:90:05:8a:b3:08:36:
ea:6d:02:a6:f1:29:5d:ba:70:b5:4c:9d:bc:4c:bc:
cd:b8:28:d0:31:28:21:d6:99:cb:d0:0c:61:4b:a5:
58:68:b9:d5:70:94:f7:9e:3d:16:92:7f:da:ec:be:
e5:5c:7c:bd:62:49:96:cf:c5:3e:99:ff:ee:31:8a:
f2:27:39:b9:f7:63:76:70:13:b2:d9:d0:8a:36:fe:
17:18:83:dc:81:c1:08:c5:27:52:bb:a1:31:51:6d:
22:c5:90:14:da:8f:a0:b8:dd:87:c4:df:20:80:d8:
30:b3:d7:da:38:a3:c4:de:6d:ec:74:18:8d:74:6e:
3d:70:43:f2:98:2c:a6:80:06:5f:9c:3b:97:15:40:
13:2d:2c:42:86:03:d3:38:a6:b8:a8:17:3c:4c:da:
db:d8:89:9b:c5:41:c2:f1:2d:ba:89:8a:1d:43:78:
9e:28:8a:4b:ef:d2:58:8b:0b:e2:67:aa:e0:c8:a2:
82:bd:56:b1:e9:ca:fe:d2:62:bc:f5:88:67:c0:a2:
63:fd:bd:3f:0b:67:1f:07:68:7d:62:f5:ff:6e:82:
68:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:82:06:69:E7:60:4A:6C:E9:AB:C9:9B:11:1E:12:25:2E:11:7B:06
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3D67251214E811EE9685ED5F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.251.0/24
Signature Algorithm: sha256WithRSAEncryption
17:6f:f8:46:66:56:01:61:14:56:4f:8d:58:db:2d:7b:dc:e2:
93:e0:9e:eb:14:56:b0:6d:36:bf:44:42:ad:e5:57:be:8b:0c:
17:4d:a3:02:4b:a8:6d:c7:b9:8d:06:be:07:b1:6a:39:ad:e5:
f3:6e:4b:e8:e2:f7:04:14:60:bc:a7:bc:80:4c:ac:db:4d:51:
a2:0b:d4:e3:52:45:45:53:70:8f:ca:8f:0a:16:a8:6f:a4:cf:
64:83:b8:dd:46:7a:a3:f8:7a:7e:45:c4:86:7e:97:38:0d:84:
b6:0c:4f:ea:c1:a2:11:f0:4a:b7:2e:ad:24:0d:6b:d0:8c:03:
85:99:47:80:95:4c:16:c8:8d:a0:37:d0:c3:4c:7b:bb:3a:89:
f7:4d:eb:95:d1:17:9d:de:ef:0f:ee:6b:ba:67:03:79:8e:be:
59:52:dd:d3:9d:b0:c8:c0:33:83:db:72:5c:f3:a7:a0:15:9e:
02:2f:f7:10:d8:65:4d:f2:88:27:41:cd:e4:2b:fa:41:e9:84:
91:ef:b7:95:e9:30:6d:ec:b9:86:08:2e:10:07:06:05:fb:e2:
69:ee:59:d9:a4:a9:ff:95:3e:06:88:81:f8:00:bb:c5:5d:63:
f1:6d:2f:f8:9d:3b:7a:e8:97:48:48:de:81:a1:45:21:6d:3f:
f1:fc:25:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:23 2024 by rpki-client on console-ams.rpki-client.org