Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F39FED3AB36E11EEA8ABE7C0775412E6.roa
File: F39FED3AB36E11EEA8ABE7C0775412E6.roa (raw, json)
Hash identifier: be1gZcnVdmrgTy4V7B59Vl6jTWmBUs28qr56Zh52RtQ=
Subject key identifier: 02:82:B5:6E:A2:2D:61:EC:46:BB:8A:98:87:B0:66:A3:AB:F3:B9:84
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0EE9
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F39FED3AB36E11EEA8ABE7C0775412E6.roa
Signing time: Mon 15 Jan 2024 06:26:01 +0000
ROA not before: Mon 15 Jan 2024 06:25:58 +0000
ROA not after: Thu 15 Jan 2026 06:25:58 +0000
asID: 834
IP address blocks: 196.251.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jan 2024 18:40:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3817 (0xee9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 15 06:25:58 2024 GMT
Not After : Jan 15 06:25:58 2026 GMT
Subject: CN=65a4cff9-8e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d8:5e:76:8a:bb:ee:ea:d0:59:26:f3:04:75:
a7:ac:15:53:99:a9:76:97:c5:82:04:60:aa:43:da:
0e:b1:3f:e5:ff:00:3e:4b:c2:65:d8:f5:d6:4a:ac:
28:1f:a2:80:1a:8d:41:0c:fe:f5:4a:7e:fe:05:98:
bc:7b:e0:f3:06:22:bd:9b:24:cb:47:40:a5:5e:2a:
4a:6c:90:9a:c7:b9:33:0a:8b:b5:29:3c:2c:da:65:
57:4b:be:15:00:47:54:54:b4:a2:a2:dc:d5:3e:b8:
2e:51:b8:cc:6a:86:16:99:84:35:28:2f:7c:14:03:
7a:b0:ad:62:3f:fa:85:48:70:de:10:76:e9:c3:6e:
20:d9:11:91:fc:ea:0a:fd:65:38:63:4a:d6:3e:d2:
27:fe:9f:26:08:80:0b:6f:d8:cd:8c:2b:6e:1f:bf:
1b:e3:92:05:75:55:05:55:52:79:b6:84:81:e4:dc:
23:d1:f2:03:fe:dc:8f:97:4c:04:b3:61:68:43:bb:
b8:4a:48:a1:4f:0d:5d:65:37:2a:17:fa:aa:76:80:
46:ba:1a:3b:25:53:7b:10:87:7e:66:53:70:24:04:
9b:85:b8:4c:40:6b:7f:f7:b6:23:1f:2e:95:6b:ae:
23:9a:fd:99:5d:24:5f:ea:d2:a6:23:d6:db:31:18:
59:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:82:B5:6E:A2:2D:61:EC:46:BB:8A:98:87:B0:66:A3:AB:F3:B9:84
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F39FED3AB36E11EEA8ABE7C0775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.249.0/24
Signature Algorithm: sha256WithRSAEncryption
76:4a:bd:98:ce:a5:c5:11:c4:50:42:66:5f:84:35:55:15:ec:
7d:67:06:35:68:53:d7:fe:74:2e:f1:56:14:a6:17:a8:71:6c:
a7:f5:21:af:58:a7:c4:ac:5c:ba:a9:21:7d:d9:2c:85:61:d1:
10:0d:d7:7f:c2:f3:ab:81:fb:53:4b:c0:76:58:07:a4:4a:df:
10:30:d3:1b:b8:be:d9:04:66:47:da:82:16:61:8b:0e:c6:7d:
cb:b7:e6:8b:f8:c3:25:d1:fb:4f:2e:f6:41:9d:ef:93:fb:0b:
be:64:55:37:68:91:bb:a1:70:8e:03:c9:0e:ce:fd:a0:6e:ab:
04:59:7c:0d:1f:3f:de:09:f5:23:be:bd:53:89:14:00:60:04:
4f:b5:1f:c1:03:53:2f:e4:d2:a5:52:cb:7b:95:20:ed:92:9d:
98:e8:28:d4:2b:2d:ec:a3:b1:eb:21:3f:d3:01:a7:ca:72:85:
d4:87:63:ef:dd:81:0f:b3:cd:09:cd:f6:2c:c4:b3:04:f7:46:
ee:de:1c:e9:7e:b2:ad:ae:b3:8a:35:a9:f7:ac:91:59:c0:34:
c1:80:67:c4:3a:70:da:26:1c:10:11:e5:22:88:f3:ab:a3:e2:
18:e9:ea:7d:0a:c7:c7:26:25:a2:5a:8f:cc:88:e8:d9:02:1e:
42:eb:4b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 20 00:02:57 2024 by rpki-client on console-fra.rpki-client.org