Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/B89F28E00AA411EEB53A91484AD9E6FC.roa
File: B89F28E00AA411EEB53A91484AD9E6FC.roa (raw, json)
Hash identifier: sJtMKQqI31D423yuHmSKeNmIfZx9YVKj9K7Wm5ZKgog=
Subject key identifier: 00:2A:18:3D:78:85:51:10:16:88:95:FA:BF:C2:37:9A:9F:66:F1:5E
Certificate issuer: /CN=F36C7A8FAF/serialNumber=E99E81FC8FE487C2F84DC9AFADC1FCDBB4029AF9
Certificate serial: 02
Authority key identifier: E9:9E:81:FC:8F:E4:87:C2:F8:4D:C9:AF:AD:C1:FC:DB:B4:02:9A:F9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/6Z6B_I_kh8L4TcmvrcH827QCmvk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/B89F28E00AA411EEB53A91484AD9E6FC.roa
Signing time: Wed 14 Jun 2023 11:15:08 +0000
ROA not before: Wed 14 Jun 2023 11:15:03 +0000
ROA not after: Sat 13 Jun 2026 11:15:03 +0000
asID: 36959
IP address blocks: 41.215.176.0/20 maxlen: 20
41.222.16.0/21 maxlen: 21
196.12.12.0/22 maxlen: 22
197.220.0.0/19 maxlen: 19
2c0f:feb8::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 14 Jun 2023 11:54:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C7A8FAF/serialNumber=E99E81FC8FE487C2F84DC9AFADC1FCDBB4029AF9
Validity
Not Before: Jun 14 11:15:03 2023 GMT
Not After : Jun 13 11:15:03 2026 GMT
Subject: CN=6489a13c-b21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:20:b4:88:55:12:b2:19:69:ec:c4:8e:d0:4c:
36:96:93:ba:06:34:89:bc:dd:bb:5f:f3:64:5b:b5:
e0:83:cd:25:8e:fb:94:01:2b:34:46:d2:d3:02:7a:
fc:6a:b4:46:c3:0a:89:eb:da:be:3b:b8:b2:77:f8:
b4:7e:39:bf:c4:4e:55:3f:ef:c6:59:bf:a1:72:6c:
8c:c8:64:4c:56:19:58:cf:ff:11:8c:ed:fd:59:b8:
de:b0:20:da:32:f1:34:29:72:06:22:14:66:89:2a:
79:30:d4:54:9b:fc:18:3b:b8:a3:45:b4:7b:ac:4f:
d5:4f:6d:a6:d7:d5:34:d9:a5:13:f5:85:56:f4:43:
33:f2:d8:94:66:39:c8:49:e6:13:62:af:32:16:80:
1c:e4:1f:b0:c6:ba:86:20:d4:a1:5d:c6:6b:e6:73:
13:c8:ae:d8:6f:81:f9:59:41:35:d3:29:6e:9a:1c:
07:55:81:5f:2c:2a:56:a0:07:89:68:f5:5d:51:a3:
6a:ae:e8:8c:38:7c:73:bb:e3:1c:a4:79:5d:ce:0b:
da:c5:b9:cb:5d:03:2a:fd:cb:39:d1:9f:e7:34:a2:
cb:36:38:8a:59:3c:75:da:6f:cb:f7:d4:1e:bb:31:
56:01:71:8c:b7:8f:0a:0f:26:7c:4d:06:28:03:65:
b9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2A:18:3D:78:85:51:10:16:88:95:FA:BF:C2:37:9A:9F:66:F1:5E
X509v3 Authority Key Identifier:
keyid:E9:9E:81:FC:8F:E4:87:C2:F8:4D:C9:AF:AD:C1:FC:DB:B4:02:9A:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6Z6B_I_kh8L4TcmvrcH827QCmvk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/B89F28E00AA411EEB53A91484AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.215.176.0/20
41.222.16.0/21
196.12.12.0/22
197.220.0.0/19
IPv6:
2c0f:feb8::/32
Signature Algorithm: sha256WithRSAEncryption
8a:b0:7d:cf:cd:f2:70:37:03:0f:b4:7d:1b:55:2a:6d:f3:87:
f8:fc:1d:29:0f:e5:16:bc:cf:74:3f:69:b6:bd:c8:bb:9d:fc:
8d:3c:08:82:10:b5:1d:9f:29:30:d8:e8:56:93:69:4a:69:7d:
4b:8d:47:41:e5:55:dc:2c:68:f0:ae:50:e7:b9:04:b2:d6:19:
10:6c:39:23:da:98:b6:c3:af:dc:15:b0:dd:3e:06:07:c8:f0:
5e:5c:23:cf:44:31:1d:86:a4:40:a2:12:1d:85:7d:56:84:d5:
8e:61:c9:b2:62:fd:ce:e6:fa:3d:fe:1b:8b:93:94:dd:1f:09:
f9:c6:db:2a:63:85:04:d8:60:dd:55:19:25:a1:fa:d8:7b:91:
65:cf:10:81:b8:e7:c6:43:2c:0a:7e:ec:62:81:18:25:2f:ea:
58:b7:b0:82:40:71:08:5f:22:ff:66:7a:aa:7b:f7:19:d4:90:
22:ae:5b:38:70:28:b1:ff:c6:82:2b:c1:dc:48:e5:94:63:a0:
ac:28:c2:b0:8d:cb:74:d9:97:4c:b3:95:7b:2c:47:76:0d:02:
33:cf:2f:08:84:b5:6c:b0:21:de:5a:c2:31:54:ed:fb:a7:e7:
15:ba:2b:08:9a:8e:29:93:a1:af:8d:38:d1:ca:d2:c5:64:2a:
58:eb:00:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org