Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4638EA36B6FA11EE91D353B8775412E6.roa
File: 4638EA36B6FA11EE91D353B8775412E6.roa (raw, json)
Hash identifier: b7C6KzmmcY02QR90fxXbhabwxW4C+S7d+1Z97wRp36U=
Subject key identifier: 56:B4:61:7B:17:25:BB:44:7F:7C:74:5F:59:FF:A8:23:D5:F6:6A:22
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0F13
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4638EA36B6FA11EE91D353B8775412E6.roa
Signing time: Fri 19 Jan 2024 18:40:53 +0000
ROA not before: Fri 19 Jan 2024 18:40:50 +0000
ROA not after: Tue 20 Jan 2026 18:40:50 +0000
asID: 395899
IP address blocks: 196.251.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 07:55:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3859 (0xf13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 19 18:40:50 2024 GMT
Not After : Jan 20 18:40:50 2026 GMT
Subject: CN=65aac235-84e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b5:e2:0f:01:78:49:f7:73:26:b2:15:20:bd:
35:9e:85:35:b4:9e:63:9d:7c:df:aa:53:d0:92:67:
4b:5c:ed:2a:5a:9f:e2:45:e7:2c:3c:59:be:47:ee:
6b:9d:db:a7:b8:73:ae:6f:5c:97:b7:67:f7:e1:91:
59:34:62:37:15:d6:cc:57:d0:0c:5c:ef:68:44:cf:
57:d1:f7:ec:cb:91:78:16:00:76:ec:d0:01:3d:eb:
52:95:ff:19:a4:c9:8b:64:e0:9f:19:7d:f3:3f:0d:
fa:1e:fd:a9:95:53:d5:2f:14:3d:e8:2d:80:fd:54:
98:62:5a:df:2f:04:75:f0:7e:ef:b6:ec:3f:99:59:
0c:f5:1d:2c:b3:f1:d1:01:89:0d:26:47:98:c8:51:
85:73:c3:b9:f5:48:2b:f7:04:06:27:f4:4c:a1:fe:
af:0b:af:90:46:19:7c:41:22:d7:13:64:30:4f:0d:
1f:e8:be:98:46:68:44:40:72:7b:37:b6:50:64:32:
43:43:90:20:33:51:55:ec:45:d4:07:c4:5c:52:77:
31:3d:af:5a:fe:bd:6f:e2:f8:8c:8e:c7:19:ba:0f:
db:60:56:89:96:7b:f6:dd:32:7f:a9:5e:e1:80:dc:
f9:93:e6:7d:be:2a:d9:17:fb:72:bc:ea:90:c0:3f:
90:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B4:61:7B:17:25:BB:44:7F:7C:74:5F:59:FF:A8:23:D5:F6:6A:22
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4638EA36B6FA11EE91D353B8775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.249.0/24
Signature Algorithm: sha256WithRSAEncryption
54:ac:5b:1a:f6:8d:e3:a0:58:5b:2c:04:1b:a3:83:af:ca:81:
28:6b:03:ed:28:08:b9:43:75:15:50:14:d8:84:35:bc:a2:9f:
b3:93:c0:28:3f:40:5f:07:6f:b7:d0:1d:39:aa:3c:79:8d:28:
d4:c3:d4:9c:ef:ad:42:2a:64:7c:b8:28:27:de:40:55:49:3f:
0e:b7:b9:80:aa:0e:92:e0:39:7b:56:b9:6a:7e:d1:6b:2b:72:
76:1f:52:c9:a7:31:07:96:54:bb:53:e9:c2:1a:43:b0:a1:0f:
55:54:4d:90:4f:e3:9a:8e:b3:41:02:5d:7a:e4:c2:b0:c4:bb:
95:39:79:1c:ca:ff:8c:a4:14:1b:09:6d:bf:15:4a:26:0d:7b:
3f:3e:b7:96:6f:a9:48:f4:d5:f4:8c:87:b5:61:7c:76:f2:a7:
80:b0:a4:f2:87:ea:d4:1f:96:09:e9:b9:32:bf:37:0c:44:c4:
14:3d:e3:c0:c9:6b:b1:9e:c7:ab:f3:e2:a7:c6:9c:72:af:ab:
84:34:88:99:b5:bd:1a:16:38:04:9c:42:71:9e:b2:d0:cd:74:
ca:c6:7e:db:49:33:65:f0:93:94:62:0b:8e:e6:5e:f0:45:f8:
a5:53:83:a5:79:f7:04:e1:23:03:1a:ff:49:55:66:85:c8:ee:
85:fb:31:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 11:52:06 2024 by rpki-client on console-fra.rpki-client.org