Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/B697E5C6BD9911ED925B19F1F1222468.roa
File: B697E5C6BD9911ED925B19F1F1222468.roa (raw, json)
Hash identifier: XZu/kmL+WXz7uabqPow70nW87146DN12Ibq6TxasleA=
Subject key identifier: 5C:F6:CE:1D:80:3E:D1:5B:69:80:34:00:67:AC:4E:FA:46:32:34:46
Certificate issuer: /CN=F36E1028AF/serialNumber=7ECE78AE81BF4072B1DC4F6FB7E6CB9166252B34
Certificate serial: 014F
Authority key identifier: 7E:CE:78:AE:81:BF:40:72:B1:DC:4F:6F:B7:E6:CB:91:66:25:2B:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/fs54roG_QHKx3E9vt-bLkWYlKzQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/B697E5C6BD9911ED925B19F1F1222468.roa
Signing time: Wed 08 Mar 2023 10:12:22 +0000
ROA not before: Wed 22 Mar 2023 10:12:16 +0000
ROA not after: Mon 22 Mar 2027 10:12:16 +0000
asID: 7155
IP address blocks: 196.200.240.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 08 Mar 2023 10:16:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335 (0x14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E1028AF/serialNumber=7ECE78AE81BF4072B1DC4F6FB7E6CB9166252B34
Validity
Not Before: Mar 22 10:12:16 2023 GMT
Not After : Mar 22 10:12:16 2027 GMT
Subject: CN=64085f86-5f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:ab:18:de:cb:ad:d7:f4:5d:78:51:35:6e:
9e:75:8b:60:3d:17:b7:6d:ba:ff:16:3f:e0:7e:54:
cb:a8:5c:dd:7e:a6:40:b4:ab:c2:76:a3:54:b3:85:
55:c8:d4:ae:cc:e7:b9:10:4d:ad:37:16:a3:46:ef:
f6:71:aa:44:8e:5f:a7:44:82:a1:96:eb:32:f8:f2:
8b:12:99:ca:93:43:a5:68:2d:30:8d:9f:8f:4d:27:
e1:49:b5:9a:17:69:1e:87:95:ce:ff:c2:45:43:00:
ec:c0:6a:68:9d:40:97:3d:a2:1e:8f:07:da:d6:de:
a0:32:5d:76:09:be:c9:9f:59:37:f2:42:09:f7:f7:
f1:06:4a:eb:22:a6:88:d0:8d:6d:43:ef:16:3d:2d:
91:b8:88:14:2f:0b:ba:93:5e:2e:06:58:a6:5e:bc:
46:d1:60:04:a8:f4:8d:e4:1b:f8:a9:8b:5a:89:00:
b8:94:1a:21:aa:e2:62:55:96:04:54:57:2a:a0:ab:
df:7c:85:b2:77:06:fd:7d:a8:53:1c:d2:18:7d:d1:
d0:0c:60:6b:73:2b:65:3f:79:fd:af:1e:0a:6e:8d:
3f:6c:24:84:e4:5e:70:33:df:74:8e:b2:02:45:21:
63:52:98:21:c5:8c:56:f5:55:61:b7:75:ea:b1:90:
6c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F6:CE:1D:80:3E:D1:5B:69:80:34:00:67:AC:4E:FA:46:32:34:46
X509v3 Authority Key Identifier:
keyid:7E:CE:78:AE:81:BF:40:72:B1:DC:4F:6F:B7:E6:CB:91:66:25:2B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fs54roG_QHKx3E9vt-bLkWYlKzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/B697E5C6BD9911ED925B19F1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.200.240.0/21
Signature Algorithm: sha256WithRSAEncryption
89:1f:ee:4c:5c:20:8e:c1:6a:10:9b:e4:84:52:a0:99:ce:e9:
db:5a:8c:4e:a5:9a:d7:36:81:58:d3:71:65:98:b9:22:17:ce:
13:70:83:6c:5d:39:6c:14:2f:70:a1:aa:05:64:75:9a:08:a1:
98:b8:9d:a2:84:0b:12:95:08:a6:b3:5f:50:c4:fe:d9:2a:b2:
28:49:00:91:c1:d9:9e:05:d7:0f:7a:84:bb:26:24:76:34:bb:
96:bf:45:2a:cf:7c:ab:33:2b:51:ec:4c:d9:76:40:17:d7:d6:
f5:f5:45:ff:ef:3c:5e:31:09:51:b8:03:b3:76:33:42:2d:77:
d4:b7:6b:60:66:3d:0d:21:d5:da:6a:9b:f7:99:5c:a7:dd:ce:
32:e9:ea:82:ee:87:39:09:35:ca:f1:d2:ff:7f:3c:75:de:99:
48:19:6d:92:dc:28:d3:dd:df:47:04:bd:21:b6:2c:28:69:e9:
f4:53:a9:3c:a2:76:8d:84:9c:a4:b7:40:95:f1:c3:82:7e:7b:
dd:e1:2c:d9:88:ba:d0:5a:f5:6e:f2:82:30:37:bf:07:e9:8b:
62:7f:f0:6d:8c:69:3c:01:6b:c3:44:57:3c:17:dc:da:ce:4d:
e0:63:7d:59:29:74:83:6a:40:56:4f:2f:8f:ab:b7:ca:26:3a:
31:30:35:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org