Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FEB81286E7FC11ECBD856EDBF1222468.roa
File: FEB81286E7FC11ECBD856EDBF1222468.roa (raw, json)
Hash identifier: /DvhT3Q/oHnK8mCWYh/FQ4kTtqDGR+hzJ+99AL8X4Yg=
Subject key identifier: 86:E3:82:DC:76:0C:60:0C:19:FD:04:88:70:18:A1:17:9F:01:8E:4C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 068E
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FEB81286E7FC11ECBD856EDBF1222468.roa
Signing time: Thu 09 Jun 2022 14:03:53 +0000
ROA not before: Thu 09 Jun 2022 14:03:50 +0000
ROA not after: Sun 09 Jun 2024 14:03:50 +0000
asID: 40676
IP address blocks: 196.251.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1678 (0x68e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 9 14:03:50 2022 GMT
Not After : Jun 9 14:03:50 2024 GMT
Subject: CN=62a1fdc9-3c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:64:dd:2f:50:15:45:c0:3a:e5:09:60:5c:e4:
3f:90:b6:f9:01:89:82:f6:fb:e3:3f:15:50:38:f5:
b4:dc:fe:13:93:07:f2:96:6c:fc:67:6d:f6:8c:e8:
46:46:6f:22:d7:57:4e:08:29:e8:8d:83:b0:87:bb:
d9:55:b9:c0:96:4a:66:ce:61:1c:4e:b1:84:5d:c7:
91:fe:0c:75:44:fb:03:81:7b:70:5b:54:0d:24:21:
71:b7:9e:ac:86:8d:67:0e:24:00:ca:ed:62:e7:b0:
a0:dc:5c:ec:7a:9a:a8:b1:c3:f1:0e:57:56:d6:69:
3a:84:10:3f:bf:37:4a:b4:4e:ca:c2:05:3e:8c:e2:
5e:e5:60:bf:37:cd:f3:ad:62:c7:5f:06:c4:c3:ce:
2f:f9:f1:9a:6d:9c:39:77:b8:bd:10:4d:bc:a0:8d:
4a:ce:31:b2:23:04:e2:4e:44:9b:ef:63:6d:44:ef:
1b:a7:8b:49:bf:20:77:db:bb:f0:32:23:cf:10:18:
25:b5:6b:e9:67:f7:65:74:0d:ee:97:c3:41:36:89:
3a:29:22:28:9a:d8:cd:ea:b8:e5:bd:79:db:98:f4:
d6:60:18:1e:ae:2e:9f:eb:c8:bd:93:7a:c3:cf:93:
a6:e8:24:54:91:fa:f7:d3:6b:06:02:0f:90:29:03:
cb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E3:82:DC:76:0C:60:0C:19:FD:04:88:70:18:A1:17:9F:01:8E:4C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FEB81286E7FC11ECBD856EDBF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.249.0/24
Signature Algorithm: sha256WithRSAEncryption
62:cc:94:5e:da:7c:be:c7:06:f9:ae:8e:62:c4:71:23:c6:de:
3b:d0:48:90:b6:6d:d1:05:86:21:18:a1:cd:89:3a:42:ae:ec:
3b:b0:cb:e3:54:80:09:db:a6:bf:2f:1e:60:35:31:24:48:eb:
09:99:22:09:38:a2:d4:35:31:16:a3:0a:f7:a8:52:f2:29:ae:
d1:45:52:e4:30:39:69:0d:93:dc:72:c4:4f:b4:6e:2b:73:8f:
94:bc:bb:0f:d1:a9:73:52:4d:21:4f:02:b7:0b:15:58:69:15:
6d:8e:47:ba:22:95:e7:87:0f:6c:c8:93:dc:da:e4:a3:a8:e3:
bb:69:d8:79:74:68:74:34:06:c2:4b:41:a4:22:8f:19:48:67:
a9:fc:0b:65:73:a8:ca:e8:5a:ff:c6:a2:1c:ca:96:49:6d:b2:
7a:45:bd:85:59:2b:6d:c7:e4:25:6f:e4:b4:86:e6:ce:05:7e:
7f:fc:af:47:7f:5f:71:05:fc:67:0c:29:de:4a:96:3c:b3:28:
0e:05:d9:a5:12:c6:f9:a0:a2:58:ef:b7:30:10:75:91:86:0d:
30:1e:8f:ca:d0:d0:ba:b5:3e:52:d9:51:07:30:cb:da:c7:db:
72:a4:fc:a5:5d:0c:c1:5c:00:66:9e:e8:c3:be:24:20:59:b9:
9a:2f:ec:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org