Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE42D/DD92018241DA11EE8310FE374AD9E6FC/BAE3EAA441DC11EEB281993D4AD9E6FC.roa
File: BAE3EAA441DC11EEB281993D4AD9E6FC.roa (raw, json)
Hash identifier: 4lCx8xILLa5ZgZw6zDuWYRZBGQOFeymrujSxM1NHA8k=
Subject key identifier: AF:79:D4:27:A3:06:10:E0:00:78:E9:EF:A4:36:80:D4:EB:2C:9E:D9
Certificate issuer: /CN=F36DE42DAF/serialNumber=5A659972FEFD8131888ECA98B8F433266CD0E176
Certificate serial: 02
Authority key identifier: 5A:65:99:72:FE:FD:81:31:88:8E:CA:98:B8:F4:33:26:6C:D0:E1:76
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WmWZcv79gTGIjsqYuPQzJmzQ4XY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/DD92018241DA11EE8310FE374AD9E6FC/BAE3EAA441DC11EEB281993D4AD9E6FC.roa
Signing time: Wed 23 Aug 2023 17:44:38 +0000
ROA not before: Wed 23 Aug 2023 17:44:34 +0000
ROA not after: Tue 23 Aug 2033 17:44:34 +0000
asID: 29614
IP address blocks: 41.155.0.0/17 maxlen: 17
41.155.0.0/20 maxlen: 20
41.155.24.0/21 maxlen: 21
41.155.32.0/19 maxlen: 19
41.155.120.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 23 Aug 2023 18:16:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DE42DAF/serialNumber=5A659972FEFD8131888ECA98B8F433266CD0E176
Validity
Not Before: Aug 23 17:44:34 2023 GMT
Not After : Aug 23 17:44:34 2033 GMT
Subject: CN=64e64586-dbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:73:8c:93:c3:ed:75:ce:97:e6:97:0f:5d:bd:
34:ce:53:c8:55:cf:a1:f0:83:f0:63:88:0f:3d:89:
3f:9c:f2:d9:69:2e:b4:9d:aa:93:36:fa:e4:78:d1:
0f:5e:9c:c3:db:87:8c:7c:3c:ba:2d:d2:ff:73:2a:
7e:e4:a5:b4:97:11:a6:86:55:40:e3:b4:3e:c6:2a:
8f:8c:2f:96:cf:2d:64:72:8a:27:da:77:df:a2:c4:
5f:08:bb:cd:3a:e1:11:e0:27:44:3f:71:a1:e7:33:
d1:74:47:6d:aa:24:d4:73:3d:70:e9:a0:bc:e1:06:
52:06:03:27:0b:93:05:c1:74:24:5b:40:90:36:7f:
af:19:b6:21:bd:aa:c6:4c:7b:52:11:92:78:38:32:
11:b2:7c:ca:22:72:0f:6e:60:e5:f1:71:33:55:d6:
ed:ee:76:08:86:74:66:a6:c7:3c:eb:5b:6d:2a:68:
05:00:a9:71:ea:d6:3f:85:29:c9:93:6e:02:72:e0:
a2:27:19:73:71:38:77:52:d4:c7:c3:75:6b:12:a0:
97:1c:d1:7f:73:a4:5e:02:41:14:e6:15:95:2c:20:
0a:90:c4:5d:47:a8:20:16:b3:d9:51:41:b9:0d:a8:
39:40:5d:4a:8c:88:26:60:1c:3f:5f:87:68:c4:fd:
28:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:79:D4:27:A3:06:10:E0:00:78:E9:EF:A4:36:80:D4:EB:2C:9E:D9
X509v3 Authority Key Identifier:
keyid:5A:65:99:72:FE:FD:81:31:88:8E:CA:98:B8:F4:33:26:6C:D0:E1:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/DD92018241DA11EE8310FE374AD9E6FC/WmWZcv79gTGIjsqYuPQzJmzQ4XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WmWZcv79gTGIjsqYuPQzJmzQ4XY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/DD92018241DA11EE8310FE374AD9E6FC/BAE3EAA441DC11EEB281993D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.155.0.0/17
Signature Algorithm: sha256WithRSAEncryption
a2:f2:14:36:9a:dd:1e:aa:b0:24:88:c7:11:79:cb:a7:94:8f:
44:7c:95:6a:a0:6a:6f:df:ae:03:2b:7f:52:2f:53:f3:35:cd:
bb:4a:a8:3b:6d:02:8a:84:c0:fe:ef:e2:3e:b9:c7:24:2f:99:
93:b9:42:93:a1:3b:58:22:b3:8e:b5:0f:a6:09:31:2d:ff:16:
05:65:f4:ea:b8:1e:d2:cc:03:d7:55:5c:c1:37:60:ae:b0:54:
09:d9:3b:ee:89:e7:0c:28:1d:f3:5e:0f:c6:ce:36:73:4d:77:
f8:f7:ed:04:71:5c:c9:7a:e5:9a:9b:b8:06:dd:a7:8a:70:11:
0f:71:95:e6:b2:f9:4f:66:d4:c0:b8:0f:94:e6:3b:48:fe:b6:
7f:90:c4:c8:63:56:f9:b8:99:89:53:fe:7f:1f:7b:7c:9b:d9:
54:5d:ed:a8:5f:68:87:c0:60:fb:de:ef:56:cf:01:99:38:5c:
76:46:05:c4:f0:89:fd:28:d4:4d:f7:16:18:e0:6e:6d:0c:ba:
32:c3:ef:b6:fe:b8:17:fb:00:b6:15:92:6e:f1:c9:10:ef:ce:
17:c3:51:88:96:24:84:c3:ed:a4:46:d0:f1:87:57:5b:f9:7c:
a0:f7:96:1b:15:22:49:15:21:da:96:9a:6d:3f:a1:5d:8d:48:
dc:d4:ac:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org