Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/52F288D057AB11EE862AC0444AD9E6FC.roa
File: 52F288D057AB11EE862AC0444AD9E6FC.roa (raw, json)
Hash identifier: XNg215agLjrdFSC9UwLjNbU3hG+Zs7GwHVzff4mxsfY=
Subject key identifier: 17:30:11:10:76:3B:58:2E:FD:D7:55:60:79:50:43:4C:5F:65:F3:AA
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0D76
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/52F288D057AB11EE862AC0444AD9E6FC.roa
Signing time: Wed 20 Sep 2023 11:46:24 +0000
ROA not before: Wed 20 Sep 2023 11:46:20 +0000
ROA not after: Mon 23 Sep 2024 11:46:20 +0000
asID: 60068
IP address blocks: 196.251.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Sep 2023 11:38:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 20 11:46:20 2023 GMT
Not After : Sep 23 11:46:20 2024 GMT
Subject: CN=650adb90-574c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:11:3f:c7:0e:68:d7:6a:e0:82:e9:12:b5:f5:
19:15:4d:be:02:8e:8c:80:36:b6:2d:5b:5b:ac:77:
dc:76:63:a9:cf:44:4d:86:fd:93:76:2f:b6:c7:65:
ef:24:e2:73:5d:bc:c6:28:53:4b:f8:00:7a:dc:29:
42:d7:15:99:20:c1:7f:22:35:73:31:8b:a7:34:d2:
be:14:21:44:14:b4:a9:54:a9:a4:08:1b:6f:56:45:
4f:65:de:99:84:3c:43:36:24:78:3a:65:df:e5:ff:
9f:56:b9:3f:f6:f5:92:72:04:a1:dc:1b:12:81:fc:
95:2b:e8:4b:2a:84:40:d0:13:21:53:25:bc:6c:84:
03:52:7d:80:f8:22:15:63:9c:f3:e5:26:10:73:12:
d1:51:13:dd:fe:21:de:e0:24:10:53:2c:75:f8:03:
71:54:ce:02:9f:32:15:eb:84:c3:34:5f:95:6e:54:
e2:99:b1:f9:e2:07:fc:e3:a5:9c:ee:ea:ae:64:40:
69:55:6d:82:13:61:37:c4:38:b5:d7:06:1c:42:62:
9e:0c:6b:d9:b7:ea:2b:dc:82:d6:a6:ff:60:a2:1c:
d8:e5:b2:b4:67:90:d1:ff:67:74:1a:df:e4:9a:47:
a0:cb:f8:60:59:38:ac:30:f5:cb:7e:e0:f0:dc:81:
96:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:30:11:10:76:3B:58:2E:FD:D7:55:60:79:50:43:4C:5F:65:F3:AA
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/52F288D057AB11EE862AC0444AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.251.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:fd:ce:98:42:88:91:10:ab:61:17:b1:67:37:5f:42:98:b2:
68:9b:6c:9f:53:5a:70:ca:f5:ab:9f:15:4b:94:38:a1:b1:31:
65:73:b9:02:83:20:45:6d:62:9a:9f:98:11:53:39:72:0d:7f:
85:db:5b:66:29:56:ae:c5:84:df:3a:ed:3b:ab:44:22:da:27:
9b:62:33:d3:52:fb:88:a4:a2:cc:08:a9:75:ed:54:bf:1d:9e:
93:9a:df:93:06:f7:16:e2:99:02:51:ed:f0:3f:4f:aa:93:92:
14:37:09:66:57:ef:1b:13:61:a9:30:91:88:96:88:91:1b:c0:
f6:b0:e4:ed:64:ab:8e:65:8a:a5:6f:fa:7b:18:f2:59:a2:95:
24:8e:42:d9:dd:bd:db:49:e2:0c:9a:2b:2d:88:24:9b:d5:3b:
fa:7b:c3:9a:35:ce:ba:e0:37:52:46:32:9d:63:c7:ff:f2:bb:
ce:a7:f6:c8:ee:44:4a:51:3d:ef:da:1e:fe:3b:11:5f:cb:7c:
85:f3:7e:53:c1:25:78:ba:e0:72:7c:fe:f2:ca:4f:02:82:08:
df:f9:c3:6a:7f:15:46:94:b6:6d:0d:00:7e:c9:d3:9e:c2:70:
ea:6f:d3:3e:d4:93:c3:12:52:b9:19:03:05:a3:19:6a:1b:85:
8d:e1:df:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org