Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/5A44233C08D811ED9EE5BFC1F1222468.roa
File: 5A44233C08D811ED9EE5BFC1F1222468.roa (raw, json)
Hash identifier: O/lduRjYMq/XtNIlb6jNjVwnkVul4Pkp9c2BUTihBrU=
Subject key identifier: AB:99:08:86:0A:48:67:CF:7F:2F:F7:44:08:E1:B7:D4:38:D6:AA:95
Certificate issuer: /CN=F36E1028AF/serialNumber=7ECE78AE81BF4072B1DC4F6FB7E6CB9166252B34
Certificate serial: 5F
Authority key identifier: 7E:CE:78:AE:81:BF:40:72:B1:DC:4F:6F:B7:E6:CB:91:66:25:2B:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/fs54roG_QHKx3E9vt-bLkWYlKzQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/5A44233C08D811ED9EE5BFC1F1222468.roa
Signing time: Thu 21 Jul 2022 09:34:44 +0000
ROA not before: Fri 22 Jul 2022 09:34:40 +0000
ROA not after: Wed 22 Jul 2026 09:34:40 +0000
asID: 29286
IP address blocks: 196.200.240.0/21 maxlen: 21
196.200.248.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 07 Jun 2023 16:51:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E1028AF/serialNumber=7ECE78AE81BF4072B1DC4F6FB7E6CB9166252B34
Validity
Not Before: Jul 22 09:34:40 2022 GMT
Not After : Jul 22 09:34:40 2026 GMT
Subject: CN=62d91db4-4694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1e:11:87:fd:82:74:75:ee:e5:a0:43:3e:d8:
ab:50:7b:70:e2:0d:39:4a:2a:f6:01:03:0a:4f:c4:
b1:40:ff:f5:d3:4b:fb:09:01:25:82:06:87:6c:85:
91:3e:fb:40:d9:2f:cd:3c:dd:a5:c3:c2:88:ba:65:
7d:69:c7:a9:b3:02:77:d5:da:63:5c:15:d1:18:b3:
db:9e:a8:fb:d5:97:b3:c8:f7:f0:43:19:3e:96:79:
e0:c3:16:96:f9:09:16:42:15:d3:34:82:be:aa:83:
a0:2f:6d:b0:66:a7:15:62:31:48:e4:c4:dd:f5:2f:
09:0c:81:c7:5d:c9:24:b3:f7:12:fd:6b:9a:13:27:
e2:a6:b8:26:b7:df:fd:51:5d:55:49:88:49:37:03:
7c:40:61:96:f9:b5:6c:9e:64:be:87:a1:a7:3e:cc:
86:38:0a:78:50:75:bf:9f:58:1f:6c:51:57:60:ba:
57:e3:6f:84:d5:04:8d:18:7c:69:9e:54:74:c6:3f:
3e:73:14:21:42:df:4b:ac:23:95:54:e8:83:69:63:
f0:5c:8e:5a:7f:57:29:ba:36:4e:27:1a:02:81:11:
3b:5e:72:77:48:af:3b:90:b7:67:1a:ef:d3:44:b5:
f0:67:c6:2d:2f:f3:4f:dd:39:e0:4a:82:a8:be:7e:
80:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:99:08:86:0A:48:67:CF:7F:2F:F7:44:08:E1:B7:D4:38:D6:AA:95
X509v3 Authority Key Identifier:
keyid:7E:CE:78:AE:81:BF:40:72:B1:DC:4F:6F:B7:E6:CB:91:66:25:2B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fs54roG_QHKx3E9vt-bLkWYlKzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/5A44233C08D811ED9EE5BFC1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.200.240.0-196.200.251.255
Signature Algorithm: sha256WithRSAEncryption
44:ca:3d:59:d0:3c:3d:6e:f9:e3:45:83:91:91:d4:13:33:50:
db:40:72:d7:bb:78:f2:67:1a:ea:c5:1b:4a:1c:64:29:5b:1a:
2e:72:7c:dd:5b:71:cd:b7:09:4c:ff:94:f7:1d:b6:65:fd:0d:
b8:f0:f7:af:82:31:d6:16:6c:18:d7:c0:04:28:07:c9:73:8f:
f3:d7:83:99:09:ea:d8:d0:1f:d1:bb:ef:7f:08:e3:b2:3f:cb:
ea:93:47:b1:4f:da:7b:5f:98:bc:e0:8c:5a:a2:79:a8:d9:f4:
4a:69:35:86:7b:37:81:7f:3a:34:6a:98:7e:fb:64:7d:c2:19:
c6:fe:e0:d5:7b:37:da:27:33:89:d6:7f:ed:9a:a4:8c:a8:46:
b6:0e:49:b2:0e:10:50:ba:68:67:d4:dd:e0:7f:bc:b7:95:66:
90:3a:8b:64:86:d1:53:02:08:36:56:4e:ca:d4:c6:e2:8b:1a:
01:56:65:7f:6b:89:71:fa:ba:c0:a2:c4:37:4b:32:42:7e:5a:
ab:da:2c:b0:0a:e6:61:24:6e:38:d5:a8:00:bc:1f:9f:bc:58:
89:2f:dd:fb:f1:3d:b1:06:1a:0b:03:92:c1:96:c1:61:b2:1b:
62:94:0e:e0:ac:9c:6a:2f:ea:2b:b0:21:42:0b:ea:c6:fa:9d:
dc:36:39:31
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIBXzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzZF
MTAyOEFGMTEwLwYDVQQFEyg3RUNFNzhBRTgxQkY0MDcyQjFEQzRGNkZCN0U2Q0I5
MTY2MjUyQjM0MB4XDTIyMDcyMjA5MzQ0MFoXDTI2MDcyMjA5MzQ0MFowGDEWMBQG
A1UEAwwNNjJkOTFkYjQtNDY5NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMIeEYf9gnR17uWgQz7Yq1B7cOINOUoq9gEDCk/EsUD/9dNL+wkBJYIGh2yF
kT77QNkvzTzdpcPCiLplfWnHqbMCd9XaY1wV0Riz256o+9WXs8j38EMZPpZ54MMW
lvkJFkIV0zSCvqqDoC9tsGanFWIxSOTE3fUvCQyBx13JJLP3Ev1rmhMn4qa4Jrff
/VFdVUmISTcDfEBhlvm1bJ5kvoehpz7MhjgKeFB1v59YH2xRV2C6V+NvhNUEjRh8
aZ5UdMY/PnMUIULfS6wjlVTog2lj8FyOWn9XKbo2TicaAoERO15yd0ivO5C3Zxrv
00S18GfGLS/zT9054EqCqL5+gDkCAwEAAaOCAq0wggKpMB0GA1UdDgQWBBSrmQiG
Ckhnz38v90QI4bfUONaqlTAfBgNVHSMEGDAWgBR+zniugb9AcrHcT2+35suRZiUr
NDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RTEwMjgvMTBENTlEQkNDOEE0MTFFQ0I1RTIzMTk5RjEyMjI0NjgvZnM1NHJv
R19RSEt4M0U5dnQtYkxrV1lsS3pRLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvZnM1NHJvR19RSEt4M0U5dnQtYkxrV1lsS3pRLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTEwMjgvMTBENTlEQkNDOEE0MTFFQ0I1RTIzMTk5RjEy
MjI0NjgvNUE0NDIzM0MwOEQ4MTFFRDlFRTVCRkMxRjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQExMjwAwQCxMj4MA0GCSqG
SIb3DQEBCwUAA4IBAQBEyj1Z0Dw9bvnjRYORkdQTM1DbQHLXu3jyZxrqxRtKHGQp
WxoucnzdW3HNtwlM/5T3HbZl/Q248PevgjHWFmwY18AEKAfJc4/z14OZCerY0B/R
u+9/COOyP8vqk0exT9p7X5i84Ixaonmo2fRKaTWGezeBfzo0aph++2R9whnG/uDV
ezfaJzOJ1n/tmqSMqEa2DkmyDhBQumhn1N3gf7y3lWaQOotkhtFTAgg2Vk7K1Mbi
ixoBVmV/a4lx+rrAosQ3SzJCflqr2iywCuZhJG441agAvB+fvFiJL9378T2xBhoL
A5LBlsFhshtilA7grJxqL+orsCFCC+rG+p3cNjkx
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org