Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/4316FCE6C4DB11EE980CB473775412E6.roa
File: 4316FCE6C4DB11EE980CB473775412E6.roa (raw, json)
Hash identifier: LbFy1Fr/X6B5jyutyAosrt21pTCTL5lDm6KTYkZ9TtQ=
Subject key identifier: 3F:B2:35:3E:4F:03:DF:91:33:E9:3F:D6:D6:99:86:1B:9F:0E:F0:2B
Certificate issuer: /CN=F36F387AAF/serialNumber=248CA48587693FF1CD5D8366224ACA0D2B97CA3B
Certificate serial: 02
Authority key identifier: 24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/4316FCE6C4DB11EE980CB473775412E6.roa
Signing time: Tue 06 Feb 2024 10:34:10 +0000
ROA not before: Tue 06 Feb 2024 10:34:06 +0000
ROA not after: Fri 28 Feb 2025 10:34:06 +0000
asID: 37410
IP address blocks: 41.57.80.0/20 maxlen: 20
Validation: Failed, certificate revoked on Thu 08 Feb 2024 18:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F387AAF
Validity
Not Before: Feb 6 10:34:06 2024 GMT
Not After : Feb 28 10:34:06 2025 GMT
Subject: CN=65c20b22-754d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5a:22:71:b0:dc:07:99:da:ea:1f:85:cb:b7:
66:2b:3a:db:d7:a0:16:32:c8:1b:59:ab:6d:53:22:
81:6e:8c:8e:e2:4a:51:89:05:d7:75:e6:dd:6c:f2:
58:e0:97:44:92:1f:34:bd:ba:45:8c:a8:51:a1:db:
85:10:a0:98:ea:b3:93:5b:05:76:13:65:a2:ec:c4:
78:61:de:b1:cb:11:f3:de:f6:26:06:6d:c9:e3:ee:
e5:a7:78:89:7d:db:cd:68:bc:23:7c:a2:18:d1:f4:
56:bf:7c:51:35:f9:48:0e:06:08:b7:2c:90:6f:86:
88:df:38:8d:26:a4:5d:ec:6e:6f:ef:b4:33:f5:d9:
e4:2e:9f:82:ca:8e:65:37:9b:dc:4b:f1:6f:80:87:
9c:e7:60:72:c4:25:66:8d:03:de:d2:44:77:59:32:
de:ca:95:1c:fe:1d:c9:1c:45:44:f0:3b:43:19:99:
da:5f:40:d3:5a:bd:46:ee:eb:83:90:84:dc:52:eb:
a4:70:22:73:fd:7a:71:38:d5:01:92:87:47:d1:87:
70:79:9f:35:de:8e:9b:6c:59:79:af:55:b5:0b:62:
9a:4c:6f:9b:96:c7:bf:eb:14:e0:8c:0f:0c:fa:25:
65:51:51:03:5a:79:62:00:78:ed:c6:f0:f4:03:ae:
22:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B2:35:3E:4F:03:DF:91:33:E9:3F:D6:D6:99:86:1B:9F:0E:F0:2B
X509v3 Authority Key Identifier:
keyid:24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/4316FCE6C4DB11EE980CB473775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.57.80.0/20
Signature Algorithm: sha256WithRSAEncryption
74:5a:b7:24:42:d4:28:20:50:74:14:39:48:2e:02:40:5d:97:
72:c9:bc:d6:bb:a1:c8:6c:ef:36:b3:53:aa:41:3d:bb:73:5e:
09:e6:c0:6c:aa:27:ab:cb:63:cb:79:a9:55:31:91:83:32:56:
c4:e4:c9:25:4a:02:6a:51:69:f5:38:02:c7:fa:47:43:49:89:
5f:c7:67:c6:bb:a8:8d:5c:d5:86:7d:59:66:52:25:31:82:79:
5e:78:e3:e3:92:93:2f:e1:d2:59:92:3d:a4:96:48:f2:6c:a4:
12:4a:e1:e9:b7:4c:b0:9d:9d:c1:ae:1f:d6:c0:70:bb:53:15:
81:9b:fb:e2:c8:5f:36:04:41:b1:4a:e8:7a:ba:35:fd:ad:3f:
ce:8b:bd:43:90:d4:82:f3:da:41:0e:4b:49:5c:e8:8c:3a:b3:
8b:0b:85:0b:db:cb:01:5a:88:b3:bb:fa:52:d2:bd:a8:65:ff:
16:e8:2e:e6:da:b2:9e:d7:b3:d7:cc:c1:3c:d8:a0:24:c9:9d:
c9:99:68:b7:3c:95:1f:7e:14:e4:74:ef:99:44:ab:d6:c3:6f:
dd:eb:51:0a:07:dc:48:ce:4b:d3:4d:db:64:b2:1f:f4:9a:a1:
96:2f:83:85:33:e5:76:2a:e8:e6:34:75:7b:51:a3:42:0d:95:
7d:99:66:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:45:49 2025 by rpki-client