Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/F2C3361AE8B211EDBC7C42814AD9E6FC.roa
File: F2C3361AE8B211EDBC7C42814AD9E6FC.roa (raw, json)
Hash identifier: lGl9WQgK8g5rQxoaK9HGRKkser7K1JG/T/XGfZDTrq8=
Subject key identifier: AF:EC:71:31:85:00:0C:6E:6E:A6:B7:4B:B4:46:92:DB:D9:DF:B6:75
Certificate issuer: /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial: 02CD
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/F2C3361AE8B211EDBC7C42814AD9E6FC.roa
Signing time: Tue 02 May 2023 06:31:19 +0000
ROA not before: Tue 02 May 2023 06:31:16 +0000
ROA not after: Wed 02 Aug 2023 06:31:16 +0000
asID: 327814
IP address blocks: 196.44.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 717 (0x2cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Validity
Not Before: May 2 06:31:16 2023 GMT
Not After : Aug 2 06:31:16 2023 GMT
Subject: CN=6450ae37-2fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:95:e7:fa:f6:47:16:ea:fd:10:5c:9f:bd:a9:
eb:70:2b:4d:07:f8:f7:8d:fb:32:f1:e5:fb:14:30:
39:78:41:95:07:70:0e:e8:1a:98:20:9b:2e:ae:ec:
ae:04:60:f6:2b:d0:64:7f:3e:d3:7d:7f:31:c0:80:
6c:61:2f:aa:26:a2:f7:03:48:1e:72:bc:97:36:21:
ad:6c:f1:b1:4b:af:9f:40:65:cf:eb:d1:54:ec:c2:
a1:dc:57:6a:cf:16:55:eb:7f:60:47:0f:35:60:1e:
0b:82:e9:b0:0f:a2:14:0b:5f:d2:68:de:91:d2:85:
2a:71:88:23:f6:37:d1:c1:a7:8f:2d:b8:74:33:0d:
61:86:ad:45:a9:96:4b:7d:2a:47:fb:e8:5c:a9:58:
0b:ca:55:20:72:4e:30:8a:fb:f7:e5:07:ca:4d:7f:
91:4b:c3:92:25:58:d5:0b:63:03:6f:65:9c:38:04:
0c:38:c9:83:5e:8e:e6:73:42:4d:78:61:f2:da:da:
c9:d3:29:c3:3d:fd:eb:e0:c9:1a:b6:15:25:b1:f2:
76:bd:3a:22:b4:f9:89:18:57:7d:e1:ce:33:5e:e2:
0f:8d:08:63:b8:6d:83:80:87:da:5a:c8:d3:fc:5e:
ba:30:32:ce:ab:b1:03:12:fb:8e:94:af:1e:5e:b0:
c2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EC:71:31:85:00:0C:6E:6E:A6:B7:4B:B4:46:92:DB:D9:DF:B6:75
X509v3 Authority Key Identifier:
keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/F2C3361AE8B211EDBC7C42814AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.44.127.0/24
Signature Algorithm: sha256WithRSAEncryption
29:d4:e2:e6:bd:0d:6f:0d:b6:c4:05:07:f7:b6:b1:69:4b:1a:
27:3f:31:45:f0:f6:07:93:0e:62:f1:2d:5e:29:a8:d2:fd:59:
2a:08:5b:31:73:47:2f:27:73:e6:0a:59:32:21:6a:ac:9e:ca:
51:03:39:eb:8c:b0:6e:97:4c:f9:9e:47:13:57:1b:fd:a9:a7:
bb:76:22:30:8a:97:a4:19:6a:60:ce:ac:f8:c7:b8:b9:1e:41:
65:7b:e1:2a:c4:25:5f:d7:0d:60:5f:ce:4c:08:46:c0:c0:df:
63:70:31:6c:41:60:d4:a6:c4:fb:35:48:a5:ff:de:92:7b:70:
16:2c:a7:0d:77:a8:1c:4b:4f:34:6c:46:b0:0b:3c:54:2d:18:
72:2b:55:87:09:f5:0e:65:7d:09:ab:2d:3b:f8:0c:9b:fb:47:
55:df:ba:c5:44:ee:cf:55:92:4f:50:c9:ad:e6:ef:e4:56:b7:
2d:72:ef:31:03:ff:b8:77:f8:4d:0a:19:40:a7:ee:f1:3f:e5:
1e:6c:a8:04:79:0d:45:62:93:41:91:89:ba:aa:bb:cb:72:8e:
19:fc:52:7c:56:04:50:1d:31:85:ca:a7:9d:a8:f5:b2:ec:5b:
e1:eb:6f:88:46:f7:2b:a7:b3:4e:49:9f:00:f2:4a:08:20:80:
79:34:8a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org