Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/427CE3E6EE7011EDAEFDBF0D4AD9E6FC.roa
File: 427CE3E6EE7011EDAEFDBF0D4AD9E6FC.roa (raw, json)
Hash identifier: 4ACfi0GTqkEnKnlXpZ5H6uzdeTiPplDfWmrR4R/dEzs=
Subject key identifier: B0:6A:67:79:BC:F7:FF:4E:09:1D:BC:DD:50:7D:37:59:F2:61:A2:B2
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0B60
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/427CE3E6EE7011EDAEFDBF0D4AD9E6FC.roa
Signing time: Tue 09 May 2023 13:49:04 +0000
ROA not before: Tue 09 May 2023 13:49:00 +0000
ROA not after: Thu 08 May 2025 13:49:00 +0000
asID: 834
IP address blocks: 196.251.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Jun 2023 07:35:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2912 (0xb60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 9 13:49:00 2023 GMT
Not After : May 8 13:49:00 2025 GMT
Subject: CN=645a4f50-3e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:83:04:5c:50:0b:97:63:9d:53:42:85:1f:20:
a2:c6:3b:71:7e:a7:99:3f:d1:8d:d5:65:58:79:a1:
7a:3d:cd:b5:c9:d5:66:a0:fd:1a:c3:b3:3c:cc:27:
51:d2:0b:a0:aa:69:a7:06:32:4d:a0:f7:75:56:5f:
72:16:58:b2:eb:b0:d5:3a:e8:23:27:fe:3c:4e:fa:
c6:68:f1:c3:56:c4:65:e9:62:6a:ec:26:ba:c1:8a:
91:06:fc:34:94:e5:ea:3e:18:39:1d:84:d7:dc:91:
3f:a8:f8:26:9f:d6:7d:fc:65:b0:a4:20:28:29:73:
39:e3:81:8e:52:7c:0b:54:55:00:64:43:17:29:57:
8b:8b:91:fa:ee:f0:f3:d1:bc:9d:cf:f4:c3:b8:1f:
1c:c5:7b:6e:45:e1:a3:1d:7f:21:dc:e2:dc:a5:0a:
a6:8e:bc:2f:ee:7e:cd:1f:9c:92:7e:d7:52:b2:64:
67:18:25:2c:33:3e:f1:1d:2c:22:f6:89:e3:3f:fb:
91:e6:8a:6f:96:12:d2:d5:87:66:ff:d4:1e:2d:e1:
83:18:de:11:99:aa:1a:19:6c:6e:8b:82:55:84:0c:
ef:ae:5a:f3:ce:20:de:a6:1f:50:4f:c8:55:1b:e7:
2a:53:8a:03:89:dc:c7:16:fa:43:82:09:6c:85:ee:
50:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6A:67:79:BC:F7:FF:4E:09:1D:BC:DD:50:7D:37:59:F2:61:A2:B2
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/427CE3E6EE7011EDAEFDBF0D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.249.0/24
Signature Algorithm: sha256WithRSAEncryption
91:36:48:87:a8:8d:65:a5:91:7a:29:a5:9a:57:04:5b:78:3a:
48:b2:cd:ca:b9:06:99:42:e6:82:9b:c9:77:ed:13:c5:86:17:
14:79:a3:64:08:13:e5:6a:43:b6:9b:2f:2d:a2:42:03:81:c5:
d2:67:84:af:ac:7a:c5:f1:af:41:b8:5b:fa:92:12:87:2b:70:
0d:27:22:ab:97:96:a9:ef:77:1f:51:9b:9b:74:a5:de:0e:fe:
01:a0:1c:0b:3f:c6:e1:30:1a:08:e2:02:b5:62:82:1b:35:93:
77:0f:c6:22:d6:a4:c6:a9:79:e4:40:93:83:69:30:e6:69:0a:
6d:e5:86:d6:d6:e4:02:27:65:30:4e:ba:3a:df:01:bd:ca:6e:
60:73:c2:35:9b:f8:64:2e:84:d6:1e:c6:00:b9:3d:4f:91:f5:
7e:9e:3e:4e:a2:ca:d0:bb:6a:3b:8c:e9:d2:a3:3f:22:82:ab:
13:c2:10:88:3a:37:e2:4d:1e:1e:07:fa:e5:38:ad:01:0b:2d:
ce:9d:c3:cc:ba:55:55:4a:a1:60:d4:39:ac:d0:d6:ba:36:3c:
9e:8d:0c:90:c4:39:da:1e:91:73:75:4b:0e:69:f0:11:cb:0c:
88:03:5b:67:74:ff:d4:64:f0:10:14:60:c3:5c:80:97:81:25:
3f:25:c8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:23 2024 by rpki-client on console-ams.rpki-client.org