Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/977E2A8EF9FC11EDB520214F4AD9E6FC.roa
File: 977E2A8EF9FC11EDB520214F4AD9E6FC.roa (raw, json)
Hash identifier: 6L4vJamx7I5Y5fgTeyUi+s28PB2agw5sD3bl+j0D0go=
Subject key identifier: EE:35:73:FB:06:BA:D1:8A:91:4C:2A:03:9F:74:AD:A5:2D:E3:E5:ED
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0B9D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/977E2A8EF9FC11EDB520214F4AD9E6FC.roa
Signing time: Wed 24 May 2023 06:31:19 +0000
ROA not before: Wed 24 May 2023 06:31:15 +0000
ROA not after: Fri 23 May 2025 06:31:15 +0000
asID: 61317
IP address blocks: 196.251.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2973 (0xb9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 24 06:31:15 2023 GMT
Not After : May 23 06:31:15 2025 GMT
Subject: CN=646daf37-b317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cb:cd:08:b2:77:bd:83:9d:2a:9f:25:98:be:
f1:77:5a:df:97:f1:c6:8c:23:d3:eb:63:ac:18:84:
32:a8:2d:ac:be:5d:4d:00:bf:30:a0:21:f6:3e:be:
42:58:a4:60:db:80:6c:e8:cd:0b:74:e4:cc:e6:6f:
00:5b:58:ff:98:60:c2:8d:56:6b:28:39:54:f7:df:
7f:db:cd:e8:1f:ce:1c:06:8f:19:e4:3f:5b:e4:19:
aa:86:45:a9:54:55:7f:9f:44:11:8c:59:1e:3a:c8:
26:a3:b8:10:9f:86:77:6d:9d:35:f8:35:33:fe:74:
1c:cc:09:d3:af:75:eb:01:7a:2c:3b:4c:9f:b1:27:
dc:03:ab:fd:ad:86:48:cc:92:b6:1c:1a:9f:9d:c7:
a0:9f:c1:db:eb:87:dc:01:aa:30:0f:e9:9c:b3:c6:
cf:61:32:7e:64:90:3e:ba:64:84:77:11:f1:9e:89:
01:13:9b:07:6a:00:50:3a:8a:f0:66:b1:bc:c4:7c:
61:43:b8:41:da:03:1f:83:61:b8:d3:66:e4:ac:de:
ad:42:f6:78:98:5f:0c:38:39:68:f9:ce:78:2b:cd:
58:58:16:65:8c:3f:c6:aa:fb:2d:66:93:f2:e0:2a:
e7:57:8d:e1:b5:02:4a:f7:20:24:92:37:2d:7f:fc:
cc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:35:73:FB:06:BA:D1:8A:91:4C:2A:03:9F:74:AD:A5:2D:E3:E5:ED
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/977E2A8EF9FC11EDB520214F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.251.0/24
Signature Algorithm: sha256WithRSAEncryption
04:7d:49:ec:be:59:5d:05:b0:10:84:b9:90:2c:14:b0:f0:ad:
ff:f8:96:35:8a:89:8e:be:cf:e8:aa:73:75:d9:da:d0:da:91:
7f:2c:c6:b1:f1:2e:75:81:ef:e8:7e:48:63:52:33:11:4c:95:
f7:e9:2a:78:8f:7c:cf:e7:73:7c:ef:d6:41:a4:1f:fe:3f:a4:
06:82:87:2e:5a:af:4a:d7:86:82:a0:d2:b4:46:3e:6b:0f:1a:
e2:ba:f6:6c:a5:f9:ec:03:0b:13:9f:cb:10:d3:ca:8a:02:9a:
90:cd:85:60:14:97:b8:96:63:64:48:bd:6b:78:31:6e:c7:08:
0b:01:a9:a3:c4:32:83:49:8b:dc:f0:c1:df:69:a0:92:76:5b:
a4:2d:3e:92:99:6e:03:48:58:c2:2c:1b:ab:62:8a:ee:65:8e:
bc:0a:49:57:e8:f7:f5:88:aa:60:19:eb:6f:af:1e:39:9d:1e:
b0:b3:1f:b7:d1:21:de:d4:15:64:df:59:e1:72:02:08:d8:24:
14:2e:27:5f:d1:10:a5:46:c4:d7:21:67:68:64:10:4c:ea:55:
0d:82:7d:e7:03:a4:93:1b:3b:a5:eb:ad:ae:e8:cf:ef:5f:b9:
65:4c:cf:e4:f8:bb:da:eb:30:a6:a9:3a:1c:83:0f:4d:a6:5e:
64:d2:57:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org