Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F55DB85A288611EEB5002F0E4AD9E6FC.roa
File: F55DB85A288611EEB5002F0E4AD9E6FC.roa (raw, json)
Hash identifier: y8Y7EUOef1Xff17Re2Oq3a9dnyNmOQF9YR1dZJl6GCQ=
Subject key identifier: 05:CE:D2:20:5C:07:C5:8E:DF:40:27:77:4E:18:ED:23:7E:77:F4:0B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0C92
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F55DB85A288611EEB5002F0E4AD9E6FC.roa
Signing time: Sat 22 Jul 2023 11:57:40 +0000
ROA not before: Sat 22 Jul 2023 11:57:37 +0000
ROA not after: Sat 26 Jul 2025 11:57:37 +0000
asID: 834
IP address blocks: 196.251.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3218 (0xc92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 22 11:57:37 2023 GMT
Not After : Jul 26 11:57:37 2025 GMT
Subject: CN=64bbc434-1a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:39:ef:4a:b4:aa:66:6d:20:e4:03:06:58:22:
fe:de:e9:92:1c:ec:32:4a:01:09:ae:0a:99:e8:98:
a4:08:61:5f:22:bc:77:38:ab:b7:aa:f4:4f:1a:20:
57:cc:6f:91:7a:23:3c:3f:b0:13:49:8b:19:86:14:
6c:1e:62:98:01:68:34:2f:ed:76:1d:98:68:32:68:
09:62:96:51:5a:54:44:e6:48:7c:0c:ef:12:31:11:
04:c9:15:8f:5b:04:c3:97:3d:74:dd:db:a2:26:ad:
a4:56:c6:23:9d:85:f6:cd:8d:80:37:68:cf:c1:32:
56:58:89:d9:44:d4:a1:d8:c0:78:f6:61:e8:ab:90:
1e:c1:c7:94:c5:dd:fc:29:ca:b4:ab:6d:5b:ea:ba:
24:02:68:28:e8:bf:4c:b5:a8:0e:a6:2c:5e:32:7f:
66:56:2f:82:99:cb:8f:77:30:83:5c:15:04:65:f8:
43:be:07:bf:32:81:13:7c:61:97:fc:d7:99:b1:ae:
67:85:b9:be:a5:97:3b:4c:3c:67:85:08:e5:e4:24:
9b:a5:f1:9f:84:a3:6f:98:a0:8c:8c:be:b8:f8:41:
80:3f:86:4f:61:58:b1:e1:7d:12:65:69:69:36:c2:
71:68:52:88:65:0f:a0:ce:a6:5a:46:06:84:7a:ea:
3b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CE:D2:20:5C:07:C5:8E:DF:40:27:77:4E:18:ED:23:7E:77:F4:0B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F55DB85A288611EEB5002F0E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.249.0/24
Signature Algorithm: sha256WithRSAEncryption
33:19:a4:3b:3a:0b:b9:1d:ad:45:b9:82:ce:ad:db:9c:c0:76:
1e:49:d3:64:45:f1:66:bd:35:64:76:6e:d9:27:9c:dd:9c:4d:
f1:7a:19:70:ba:ab:3b:d8:aa:85:71:09:f2:f0:1c:f4:ba:66:
4c:2a:7a:ed:ec:63:9a:1e:37:c4:97:5b:3a:24:d8:99:39:ad:
c5:0a:bd:5a:eb:d3:d0:e6:77:ea:7b:d5:e8:6f:ab:a9:1b:56:
59:84:c9:87:e1:33:45:da:76:63:13:3a:44:06:0e:15:e3:13:
ac:9a:7c:95:c4:ee:f1:1b:aa:37:6c:60:d8:72:14:e8:0c:d1:
68:2c:3c:9e:d4:37:30:a3:d1:6c:23:0f:73:18:d5:12:92:71:
95:4e:59:14:cd:40:10:0c:6b:84:5a:b9:7a:e4:ef:d7:c6:8d:
99:cd:a5:1d:98:0d:16:43:84:31:90:8e:70:91:83:51:4e:fe:
04:f6:13:cc:a6:a9:12:17:83:61:4c:fb:91:3f:57:fd:bc:a8:
79:c6:a0:f8:15:5a:c8:cd:58:36:d6:46:d3:60:00:9c:f2:0b:
cd:e0:db:02:1d:48:7f:0b:71:dd:53:fe:0d:ff:17:2b:04:8f:
d9:cb:18:f2:97:98:ea:55:40:58:94:5f:bc:a4:7e:5f:05:c7:
3c:55:91:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 16 09:49:05 2023 by rpki-client on console-ams.rpki-client.org