Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F8B1092C44CD11EEA8A237244AD9E6FC.roa
File: F8B1092C44CD11EEA8A237244AD9E6FC.roa (raw, json)
Hash identifier: w2MEbTnvPFijX5h//RviAmlwzlHw94//xxc3CxDV/jc=
Subject key identifier: 73:1F:82:62:F5:CB:76:89:F3:29:BC:C7:B3:34:17:0C:29:E7:7F:C6
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0CE7
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F8B1092C44CD11EEA8A237244AD9E6FC.roa
Signing time: Sun 27 Aug 2023 11:36:33 +0000
ROA not before: Sun 27 Aug 2023 11:36:29 +0000
ROA not after: Sat 30 Aug 2025 11:36:29 +0000
asID: 834
IP address blocks: 196.251.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3303 (0xce7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 27 11:36:29 2023 GMT
Not After : Aug 30 11:36:29 2025 GMT
Subject: CN=64eb3541-c6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3b:80:cd:24:04:5a:db:9a:19:6f:94:45:2a:
95:c7:53:8b:85:fc:3d:5c:4b:ea:0f:29:f5:5f:04:
01:47:40:ee:ba:44:7c:78:2b:22:1a:95:e9:21:f8:
b5:c8:44:56:29:48:4c:1c:f8:b1:dc:b5:82:02:cb:
2f:4e:76:6d:a8:79:06:6c:ef:56:37:89:2c:3c:27:
4b:ef:ef:93:fb:4a:68:f0:a9:34:3b:1b:4a:1f:bc:
bb:8a:68:35:c5:b3:b2:e5:c3:67:2d:ee:5e:0d:1c:
d7:f8:d4:39:71:e0:d8:ce:2d:7b:d1:06:51:41:85:
7f:79:6c:46:f0:dc:36:de:1b:5f:36:52:19:ee:5f:
99:29:64:36:98:4e:75:db:dd:10:20:23:e8:92:44:
ba:35:13:22:b8:66:1e:69:d7:03:b0:5c:f0:c9:d4:
ed:17:29:60:60:4e:a6:86:cb:50:ec:95:3b:f0:ba:
09:e4:e5:39:bd:07:f5:d1:ba:9b:ca:0d:48:f7:01:
41:f2:3d:43:35:d1:75:92:d7:e6:c5:6e:f6:53:70:
38:50:6a:c5:cb:3b:8c:03:8f:04:1f:ba:7b:34:c9:
69:8f:0d:7c:f9:3a:91:25:14:1c:da:eb:54:02:d0:
e6:af:8c:48:83:77:20:99:b6:12:63:c3:bd:10:95:
de:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1F:82:62:F5:CB:76:89:F3:29:BC:C7:B3:34:17:0C:29:E7:7F:C6
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F8B1092C44CD11EEA8A237244AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.251.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:fc:90:e7:cc:71:e8:8a:8e:cb:3f:8c:5c:7f:04:0b:8c:29:
55:70:93:b3:3d:8d:0e:b7:69:44:b6:02:83:13:c5:30:70:df:
bc:09:36:1f:30:d2:ac:54:17:58:98:4b:ab:8f:f6:42:e2:c5:
b1:ca:16:f0:33:ec:e6:44:2d:56:36:1d:2a:9b:5c:de:db:97:
af:d1:3a:1a:ce:79:31:d3:c5:9e:e4:e4:c9:1b:93:3d:6d:e0:
2e:d3:59:7b:2c:06:1a:5e:64:a5:fe:77:98:1e:d7:70:15:e7:
2a:69:37:e3:b7:b4:66:de:ec:4e:50:94:8e:e9:e7:71:71:62:
e5:fb:d4:b8:c8:38:59:cf:fc:0d:cf:86:d9:46:a2:d8:d5:9f:
99:91:3c:2e:4e:08:56:96:1b:a8:69:d7:91:ba:7a:d9:40:8c:
b0:54:28:38:9d:e5:1e:55:2e:4b:08:e3:a3:35:bb:c2:d4:1e:
7a:07:3f:5a:c9:37:0f:86:d0:4f:4b:f4:bd:f1:e6:c0:03:48:
38:d0:84:b0:a3:1a:1f:7a:e5:13:5d:e2:9b:a8:c7:27:ef:cc:
35:cc:f9:55:02:65:35:38:54:02:34:97:7c:75:0f:5e:0d:a9:
15:5e:f8:46:3c:dc:5a:7e:ac:d8:23:0f:1c:df:9a:9b:17:4e:
b0:1f:f4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 20 12:29:00 2023 by rpki-client on console-ams.rpki-client.org