Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/21833E8C542D11EF8C368745762E951A.roa
File: 21833E8C542D11EF8C368745762E951A.roa (raw, json)
Hash identifier: zerpPvk1IsX7XS3YlbiNofNfoY3kWQdIwA/AwvhoC6g=
Subject key identifier: E4:46:40:6E:82:98:77:D9:A6:AC:5E:11:06:0D:E8:BD:6D:30:58:BA
Certificate issuer: /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial: 04D3
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/21833E8C542D11EF8C368745762E951A.roa
Signing time: Tue 06 Aug 2024 19:50:29 +0000
ROA not before: Tue 06 Aug 2024 19:50:25 +0000
ROA not after: Wed 06 Nov 2024 19:50:25 +0000
asID: 43260
IP address blocks: 196.44.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 10:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1235 (0x4d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Validity
Not Before: Aug 6 19:50:25 2024 GMT
Not After : Nov 6 19:50:25 2024 GMT
Subject: CN=66b27e84-2ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9e:e0:18:d6:49:2d:b4:83:b9:92:82:cf:86:
6e:3a:5a:f4:3c:b9:58:fc:62:cd:60:3d:cb:d1:8e:
29:df:8a:92:bf:13:bc:bf:18:f5:15:5a:89:46:d0:
8a:43:2d:90:09:69:8d:38:43:aa:dd:5b:27:8d:a1:
0e:7e:3b:1d:b4:87:f7:89:cf:ab:f4:26:17:ef:36:
48:37:61:1b:2a:bf:b0:75:1b:91:61:26:89:8d:70:
04:38:4e:3a:6b:59:5a:95:c9:08:64:8f:0c:41:a3:
6f:11:dd:1f:16:c7:41:2f:3c:5e:20:0b:03:21:be:
20:61:8b:13:1d:cd:1c:73:f2:33:db:af:6d:ac:c8:
c8:84:57:aa:dc:2d:ae:47:73:ee:02:d7:be:44:27:
27:3e:3f:83:73:24:82:f3:81:05:8e:25:62:b8:ea:
df:a1:07:fb:3c:29:92:2b:24:9a:ac:0b:57:6c:68:
a8:5b:44:9d:9d:ea:be:53:ed:ea:56:ef:d8:ea:43:
31:d5:52:4f:8c:a1:48:64:c5:a1:87:46:1f:e9:91:
fc:bd:f8:ba:db:d9:31:1b:8e:f5:38:8d:71:ff:a5:
67:91:ce:af:9e:11:bf:2d:ac:46:5e:a3:62:1c:df:
bb:95:67:f6:fc:9f:5e:18:fb:09:62:bd:b9:f6:c2:
0a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:46:40:6E:82:98:77:D9:A6:AC:5E:11:06:0D:E8:BD:6D:30:58:BA
X509v3 Authority Key Identifier:
keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/21833E8C542D11EF8C368745762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.44.117.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:b2:10:a4:2d:8d:36:b0:00:38:05:11:49:29:85:5f:ed:00:
0a:97:de:53:52:d9:67:67:23:b5:10:a4:b1:80:79:cb:4a:28:
23:ac:c0:3f:66:e5:1a:e4:4e:1c:9c:a9:cb:5b:31:de:bf:a6:
4d:5a:3a:44:52:c9:3f:88:4f:7d:3a:bd:8b:95:3b:17:a5:5d:
40:8c:6b:c9:3a:24:46:5a:2f:09:5a:6c:4a:9a:bf:5b:73:45:
d9:4c:a9:b8:15:7f:46:f7:65:1a:88:e5:f4:9e:57:4d:df:bd:
f3:5e:5e:d5:db:f2:a5:f3:df:ed:52:7e:31:1c:8e:ae:46:38:
f9:9f:d2:35:30:48:1b:a3:9b:02:bb:13:9d:2c:40:60:55:f3:
40:4c:1b:27:2c:76:60:38:fb:ff:15:61:6b:c7:b7:32:56:02:
f9:65:34:8a:aa:90:fe:d0:c3:4d:cb:46:d8:08:8c:ee:e7:25:
bf:f8:ed:19:39:b1:3b:50:09:b1:b4:ce:81:05:80:5b:17:2c:
e1:48:f9:13:8b:b6:72:16:e7:c6:d2:af:87:f2:35:6d:61:97:
65:2d:e6:5f:bc:11:ff:83:d2:8f:2a:0f:e4:54:b0:21:7d:b4:
34:a4:c1:cb:c0:51:0d:9a:1f:61:3f:4d:77:51:2a:d0:cc:b4:
4b:85:92:82
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBNMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjA2MjhBRjExMC8GA1UEBRMoODYwNUQ3NTk5QTA0MDJGNzBFQzJGMjU4RDZDMTZC
RDJFNEU4RDFGRTAeFw0yNDA4MDYxOTUwMjVaFw0yNDExMDYxOTUwMjVaMBgxFjAU
BgNVBAMTDTY2YjI3ZTg0LTJjZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7nuAY1kkttIO5koLPhm46WvQ8uVj8Ys1gPcvRjinfipK/E7y/GPUVWolG
0IpDLZAJaY04Q6rdWyeNoQ5+Ox20h/eJz6v0JhfvNkg3YRsqv7B1G5FhJomNcAQ4
TjprWVqVyQhkjwxBo28R3R8Wx0EvPF4gCwMhviBhixMdzRxz8jPbr22syMiEV6rc
La5Hc+4C175EJyc+P4NzJILzgQWOJWK46t+hB/s8KZIrJJqsC1dsaKhbRJ2d6r5T
7epW79jqQzHVUk+MoUhkxaGHRh/pkfy9+Lrb2TEbjvU4jXH/pWeRzq+eEb8trEZe
o2Ic37uVZ/b8n14Y+wlivbn2wgqxAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU5EZA
boKYd9mmrF4RBg3ovW0wWLowHwYDVR0jBBgwFoAUhgXXWZoEAvcOwvJY1sFr0uTo
0f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYwNjI4L0YwQ0NCRTdDRkJBMDExRUJBQjc4NkM0OUQ4QTAxNENFL2hnWFhX
Wm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hnWFhXWm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkYwNjI4L0YwQ0NCRTdDRkJBMDExRUJBQjc4NkM0OUQ4
QTAxNENFLzIxODMzRThDNTQyRDExRUY4QzM2ODc0NTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADELHUwDQYJKoZIhvcNAQEL
BQADggEBAB2yEKQtjTawADgFEUkphV/tAAqX3lNS2WdnI7UQpLGAectKKCOswD9m
5RrkThycqctbMd6/pk1aOkRSyT+IT306vYuVOxelXUCMa8k6JEZaLwlabEqav1tz
RdlMqbgVf0b3ZRqI5fSeV03fvfNeXtXb8qXz3+1SfjEcjq5GOPmf0jUwSBujmwK7
E50sQGBV80BMGycsdmA4+/8VYWvHtzJWAvllNIqqkP7Qw03LRtgIjO7nJb/47Rk5
sTtQCbG0zoEFgFsXLOFI+ROLtnIW58bSr4fyNW1hl2Ut5l+8Ef+D0o8qD+RUsCF9
tDSkwcvAUQ2aH2E/TXdRKtDMtEuFkoI=
-----END CERTIFICATE-----
Generated at Tue Oct 8 13:32:51 2024 by rpki-client on console-fra.rpki-client.org