Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/661EBC48F41511ED934AFC534AD9E6FC.roa
File: 661EBC48F41511ED934AFC534AD9E6FC.roa (raw, json)
Hash identifier: QgjemQ/fpWvlp423L0xj5JtRmJ8VAF2bXHyE2zrfT4Q=
Subject key identifier: 1D:A2:E2:41:E2:AA:04:84:26:C9:3D:24:BC:13:59:C2:72:09:5D:BF
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0B77
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/661EBC48F41511ED934AFC534AD9E6FC.roa
Signing time: Tue 16 May 2023 18:13:46 +0000
ROA not before: Tue 16 May 2023 18:13:42 +0000
ROA not after: Sat 17 May 2025 18:13:42 +0000
asID: 29802
IP address blocks: 196.251.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Jun 2023 07:36:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2935 (0xb77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 16 18:13:42 2023 GMT
Not After : May 17 18:13:42 2025 GMT
Subject: CN=6463c7da-eadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:eb:a8:f3:ba:39:80:ad:f4:6c:ce:f6:38:e3:
30:78:d7:58:75:cb:63:84:30:87:bc:17:52:64:ce:
53:48:1a:26:bd:d2:3d:9e:0a:5e:bd:cd:2f:f8:40:
d1:c5:ad:75:e5:43:46:eb:4b:0e:9c:d7:de:61:0a:
1f:d6:cf:dd:e0:fa:5c:f8:2f:0b:e2:ed:5d:f3:87:
22:3c:4d:24:a9:79:ee:77:90:de:1d:3e:a5:db:ec:
50:76:4d:87:d6:ee:ad:1b:87:5f:51:b9:e7:1d:10:
58:e9:9b:f7:03:4f:a9:94:01:73:e4:f8:b6:b4:0b:
c9:24:d3:82:fc:69:e3:74:b9:46:5d:0b:ab:8b:4c:
43:77:4a:0d:e5:ae:62:63:85:e2:be:2d:8d:f6:fe:
47:b1:32:28:61:9a:34:ed:7c:af:14:47:09:f8:e4:
63:7c:83:cc:1d:01:95:8a:12:7c:4e:20:32:7a:4a:
13:15:52:da:08:50:83:24:a2:d2:e4:e6:05:b1:d3:
9a:22:11:b2:0a:2f:7b:ac:f9:eb:b6:f4:50:1c:60:
8f:91:8b:96:8a:39:bd:3c:f6:3e:05:c2:dc:44:54:
17:66:61:34:d5:01:29:8e:c4:52:7e:ec:59:9c:71:
6d:1e:60:40:fe:4a:20:1e:a4:dc:08:64:91:47:6a:
1e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A2:E2:41:E2:AA:04:84:26:C9:3D:24:BC:13:59:C2:72:09:5D:BF
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/661EBC48F41511ED934AFC534AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.249.0/24
Signature Algorithm: sha256WithRSAEncryption
29:d6:c8:20:d8:f3:bc:2c:35:dc:18:15:5d:39:0d:e8:d5:a4:
be:13:7b:1b:9b:b3:66:bd:5f:98:f1:87:e2:3b:8e:77:ad:42:
0b:77:74:23:a7:b5:a7:7f:f4:26:40:b2:91:f5:a4:5b:3c:ff:
af:f0:0a:85:a4:f1:95:70:62:eb:4f:17:e6:5a:6c:db:aa:30:
c2:90:d0:b7:0c:5e:0d:a3:8a:c0:72:14:f4:69:c4:d2:d6:ae:
b0:7c:fd:3d:1c:ec:db:7c:1d:75:41:bc:82:fd:a2:d8:f7:f7:
8c:4c:e7:7c:d3:eb:6b:09:b4:dd:d4:b1:89:4d:43:5e:1b:f5:
a1:3e:e9:4c:b4:0a:26:aa:ee:15:cd:2a:f8:25:b0:d7:fc:0f:
79:2b:a4:ab:91:95:72:bc:5e:9a:83:b0:31:c4:d3:20:fa:99:
13:dd:71:15:ad:54:93:d9:bb:35:95:08:df:39:6c:96:fd:ac:
54:62:6b:68:d5:e9:7c:3b:8b:d8:33:5a:c3:f4:51:31:41:2c:
bf:24:db:d2:fe:f5:9b:44:66:3f:c3:e8:fc:58:51:85:98:8f:
39:75:d3:00:dc:d7:a5:65:06:e6:4a:55:9d:11:ce:9f:df:36:
42:62:c7:81:72:94:c8:b5:59:f4:df:f2:5a:7c:b8:8d:53:c4:
de:64:25:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-ams.rpki-client.org