Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/329DF56EDDA011ECAF8D749CF1222468.roa
File: 329DF56EDDA011ECAF8D749CF1222468.roa (raw, json)
Hash identifier: o9h1jdX4cYnWkc19SQY1GcuaTcOchm7LS/RAMB1XbIo=
Subject key identifier: E9:06:EF:DD:12:C9:D9:C7:FF:1E:87:2C:06:4E:2C:98:1B:AD:11:2D
Certificate issuer: /CN=F36F2B14AF/serialNumber=90E899936DF9E68B9A7505BFBE63B8AFA0A77AE9
Certificate serial: 028E
Authority key identifier: 90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/329DF56EDDA011ECAF8D749CF1222468.roa
Signing time: Fri 27 May 2022 09:34:26 +0000
ROA not before: Fri 27 May 2022 09:34:21 +0000
ROA not after: Fri 23 May 2025 09:34:21 +0000
asID: 37239
IP address blocks: 41.76.200.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Nov 2023 10:55:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 654 (0x28e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F2B14AF/serialNumber=90E899936DF9E68B9A7505BFBE63B8AFA0A77AE9
Validity
Not Before: May 27 09:34:21 2022 GMT
Not After : May 23 09:34:21 2025 GMT
Subject: CN=62909b21-2c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ce:96:66:77:af:88:3c:9a:da:ca:37:77:ec:
5f:9e:ee:91:c4:13:c9:fb:23:12:3a:5c:1a:58:61:
11:ff:72:bf:e2:4d:ac:7a:74:5c:a5:de:80:47:7e:
a0:b0:59:fd:2b:d9:d7:4e:6c:63:ea:fd:00:c4:20:
73:c9:47:0e:5f:7d:ed:3d:7c:85:c7:5c:af:7d:93:
60:ca:9f:85:f6:a0:b5:bc:8b:49:0d:2d:b0:8d:45:
68:ec:ef:e2:b9:d6:98:9b:a9:19:4a:56:50:09:64:
da:f5:49:d4:23:12:4f:75:21:c5:68:7a:ec:c5:b3:
a7:0c:37:a9:8c:53:df:89:e7:bb:4d:3d:ae:48:83:
ff:bc:cc:89:08:65:8a:c3:78:14:17:da:44:83:2e:
c0:4f:54:20:c1:4e:a1:36:8f:b3:38:8f:a3:70:83:
45:54:ec:26:13:31:3f:ca:d3:38:7d:b1:09:63:be:
c9:ad:41:f1:19:e9:09:37:fa:e2:14:df:3d:ba:0b:
bf:29:37:5b:ee:04:9d:4d:24:7b:8e:68:b3:5b:b0:
03:7a:48:d6:b5:92:e2:e5:91:45:ad:af:c7:f8:13:
5b:f4:06:4e:bd:92:9b:cf:03:5a:d5:13:7c:5a:81:
2d:de:7a:b3:f8:25:ef:ab:99:7a:7a:bb:2f:ee:4c:
2c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:06:EF:DD:12:C9:D9:C7:FF:1E:87:2C:06:4E:2C:98:1B:AD:11:2D
X509v3 Authority Key Identifier:
keyid:90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/329DF56EDDA011ECAF8D749CF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.76.200.0/21
Signature Algorithm: sha256WithRSAEncryption
15:fe:86:71:0d:86:a9:ac:33:d6:96:40:cf:fe:b5:a1:e8:79:
cb:b3:45:c3:ec:00:4b:f2:9f:98:50:c8:87:10:15:78:d8:e3:
15:be:3c:3d:95:21:2b:0f:cd:e0:1e:34:20:27:cf:94:28:b8:
cf:2c:9d:c1:6d:5b:02:63:3c:19:d5:e7:34:e9:8f:31:61:f1:
77:67:18:8f:fe:04:4e:4e:09:6e:ac:98:9f:74:a4:32:6a:8e:
61:d9:22:10:5e:ee:85:c1:69:5b:39:f1:d2:07:1a:94:50:fa:
54:f1:94:c3:43:f2:58:71:88:86:4c:84:db:ac:3c:54:78:f6:
ea:5e:f1:44:0d:79:a5:cc:8c:8c:30:74:62:5a:32:37:11:57:
db:e6:c4:80:26:9b:45:7d:f0:40:8b:49:56:a7:74:d1:e2:da:
a3:c5:31:61:ab:d1:d0:e7:69:dc:f6:8d:1a:c0:91:36:c4:77:
fa:24:d8:80:18:0b:76:08:dd:43:6e:fc:d2:88:31:d3:c6:c0:
b3:65:ed:1f:4d:79:d9:a5:57:b9:b9:c2:b3:3d:5a:32:39:23:
26:34:8b:e1:9d:b3:71:4b:5a:00:36:0d:ec:44:eb:7c:ec:3d:
d8:8b:1e:01:a6:cb:2f:e3:ea:19:31:e9:28:e4:d0:37:0f:79:
46:98:a2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org