Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/C01EC778678411EEA16DF03C4AD9E6FC.roa
File: C01EC778678411EEA16DF03C4AD9E6FC.roa (raw, json)
Hash identifier: ThJgwbsFzE39X2t3XLuVPvmZKBNpk5gRl2iDXmPL1P0=
Subject key identifier: 24:08:76:EC:C0:C3:08:00:85:F6:E5:65:9A:9A:1B:D8:0A:DB:CF:B5
Certificate issuer: /CN=F36DA96DRI/serialNumber=9F5D0694A379EB23FAB408A9D4BBD508E1AA3922
Certificate serial: 06
Authority key identifier: 9F:5D:06:94:A3:79:EB:23:FA:B4:08:A9:D4:BB:D5:08:E1:AA:39:22
Authority info access: rsync://rpki.afrinic.net/repository/ripe/n10GlKN56yP6tAip1LvVCOGqOSI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/C01EC778678411EEA16DF03C4AD9E6FC.roa
Signing time: Tue 10 Oct 2023 15:50:35 +0000
ROA not before: Tue 10 Oct 2023 15:50:32 +0000
ROA not after: Thu 10 Oct 2024 15:50:32 +0000
asID: 328619
IP address blocks: 195.234.120.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Oct 2023 17:41:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DA96DRI/serialNumber=9F5D0694A379EB23FAB408A9D4BBD508E1AA3922
Validity
Not Before: Oct 10 15:50:32 2023 GMT
Not After : Oct 10 15:50:32 2024 GMT
Subject: CN=652572cb-8f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3b:73:51:6e:76:ca:7c:f3:e9:f9:51:90:8e:
6c:ed:e5:6f:b3:0a:d3:67:84:5e:db:61:5a:2a:14:
a4:87:98:68:e4:5d:71:a8:4b:e7:a7:70:6d:76:a1:
fb:80:10:02:f6:d5:e9:e9:cb:50:36:d9:cf:25:f3:
7b:6b:ee:ba:7b:9a:26:3c:d8:5f:70:2a:9b:bc:a6:
94:98:2f:72:88:8a:41:5c:3c:3b:99:b0:5e:45:b0:
b6:06:24:16:71:d8:ff:71:54:c9:09:8c:8a:11:4a:
65:20:5d:f2:1c:fe:77:ea:43:1e:21:dc:b8:c3:06:
b2:bc:d3:9b:bc:a4:83:cd:1d:d2:46:66:18:33:af:
d6:bb:4c:07:19:92:2b:fa:cf:51:3b:73:78:8c:c2:
06:6d:06:72:1a:f9:b6:a1:d4:b7:ae:08:97:b8:b8:
65:ab:e2:64:2b:ae:e0:30:36:bc:db:a6:31:45:d0:
ff:87:8f:ca:af:a1:d1:41:33:fb:4b:d0:c2:e6:51:
e4:a4:c5:a6:42:e1:db:a1:9e:4a:97:c2:67:1b:c7:
28:65:c6:5f:ff:49:6b:4f:dc:25:5c:41:35:67:01:
b3:60:66:52:08:7f:24:4b:64:00:b2:5c:b7:c3:9f:
f1:a2:e3:30:2c:fe:14:c2:dd:34:80:6b:5a:da:0e:
c7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:08:76:EC:C0:C3:08:00:85:F6:E5:65:9A:9A:1B:D8:0A:DB:CF:B5
X509v3 Authority Key Identifier:
keyid:9F:5D:06:94:A3:79:EB:23:FA:B4:08:A9:D4:BB:D5:08:E1:AA:39:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/n10GlKN56yP6tAip1LvVCOGqOSI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/C01EC778678411EEA16DF03C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
195.234.120.0/22
Signature Algorithm: sha256WithRSAEncryption
12:ad:6e:d7:7b:e1:ba:47:e6:69:f2:0c:94:d5:95:af:7a:b9:
41:2e:26:9d:70:00:7d:84:45:61:40:a4:5a:eb:ec:bd:df:d7:
4c:45:c3:c3:34:47:b2:34:12:be:a1:cb:7a:72:6b:10:6b:16:
be:5f:41:93:a4:80:45:28:73:78:a2:12:42:50:31:e2:26:7c:
cf:e7:36:78:48:06:ed:02:da:0a:12:93:b6:a0:46:0c:fd:39:
62:da:f2:c4:34:2d:3f:d8:d0:cb:a0:3a:f4:76:4a:3f:4e:6b:
69:d3:25:15:6a:29:c5:ff:60:15:c1:7d:c2:97:4c:15:a9:42:
70:45:0c:e7:0f:65:45:1e:de:74:39:9d:23:f3:7f:0c:ab:66:
59:cb:0b:c7:1a:7c:d9:ec:47:26:08:6b:c5:a8:de:12:53:ba:
b8:11:b9:39:ee:fc:13:e7:c5:58:1f:51:57:8e:3c:24:de:9f:
2f:82:1d:13:bb:e2:d1:35:de:6d:92:70:d6:29:cf:0d:3a:83:
51:5d:5f:c8:32:79:8a:8e:d6:0f:5c:16:93:bd:f1:c3:0e:31:
ce:bb:b3:62:03:9a:11:a7:24:75:b1:91:7b:19:02:88:92:f9:
46:64:53:6a:8f:81:32:a3:2c:8f:c7:5c:ce:c2:43:90:d5:3c:
f9:d4:6c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org