Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/7744BB04CA3311E99920586BF8AEA228.roa
File: 7744BB04CA3311E99920586BF8AEA228.roa (raw, json)
Hash identifier: fA3rQVFWboFZRnxDtrnXhxTO8ixuDlJZRvqNRNH2IH0=
Subject key identifier: F6:E4:F4:78:B4:56:57:6A:CA:4F:4F:1B:C9:35:F5:92:13:91:09:D7
Certificate issuer: /CN=F36F51F8AF/serialNumber=4DEFB41D3B42CCFD73B1A04477C0E825C74D6C6E
Certificate serial: 0199
Authority key identifier: 4D:EF:B4:1D:3B:42:CC:FD:73:B1:A0:44:77:C0:E8:25:C7:4D:6C:6E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/7744BB04CA3311E99920586BF8AEA228.roa
Signing time: Thu 29 Aug 2019 08:03:21 +0000
ROA not before: Thu 29 Aug 2019 08:03:16 +0000
ROA not after: Wed 29 Aug 2029 08:03:16 +0000
asID: 37281
IP address blocks: 41.75.64.0/20 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Feb 2024 10:23:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409 (0x199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F51F8AF/serialNumber=4DEFB41D3B42CCFD73B1A04477C0E825C74D6C6E
Validity
Not Before: Aug 29 08:03:16 2019 GMT
Not After : Aug 29 08:03:16 2029 GMT
Subject: CN=5d6786c9-4f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c1:d8:8e:24:0c:a7:50:bb:25:50:cc:bd:0f:
48:32:00:07:24:0d:44:df:d5:12:04:a6:0b:ab:2e:
38:91:8a:86:57:c9:53:3a:fb:b3:67:6c:c7:fd:57:
bc:11:2e:ef:6c:9e:8c:97:da:1b:4d:4c:ef:e3:21:
c0:93:33:a4:a6:af:5a:dd:a7:f7:11:1a:1b:12:58:
04:fb:1e:25:b2:5e:b9:82:01:55:70:62:6c:07:00:
1b:c8:13:6d:e6:e0:ac:39:61:ec:84:67:57:d0:27:
bf:e1:00:e6:d3:2a:73:f3:69:cd:77:ef:7a:1e:1a:
78:5a:eb:8a:6d:07:5b:29:9d:f1:9c:cb:f5:78:4e:
a3:75:3b:eb:ee:5d:24:6f:24:46:cc:4b:68:d3:6b:
09:97:13:01:29:f9:98:8b:bb:75:eb:47:95:75:a8:
87:d2:c1:bc:a9:73:64:a8:f9:4e:6f:4a:57:35:34:
86:3d:3a:94:9e:20:fc:d5:76:2b:f4:ef:f6:ca:da:
aa:e8:18:f5:c5:86:69:cd:15:7e:83:4b:c8:ea:6e:
7b:64:21:7e:c8:37:37:1a:91:42:38:9a:bf:ac:ba:
f3:13:38:7d:3f:9b:77:b7:14:44:c8:a3:84:c4:b6:
1a:1d:5f:8b:35:50:66:45:92:4f:05:cf:e7:50:04:
2d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E4:F4:78:B4:56:57:6A:CA:4F:4F:1B:C9:35:F5:92:13:91:09:D7
X509v3 Authority Key Identifier:
keyid:4D:EF:B4:1D:3B:42:CC:FD:73:B1:A0:44:77:C0:E8:25:C7:4D:6C:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/7744BB04CA3311E99920586BF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.75.64.0/20
Signature Algorithm: sha256WithRSAEncryption
47:11:8d:62:1e:36:4d:1f:ed:80:f2:b0:c2:df:3c:e1:9e:c1:
19:b2:c3:50:78:40:67:a7:ab:ef:36:59:f8:c5:20:19:cf:b4:
f3:b7:b1:10:28:e7:e7:ae:bb:51:2f:fa:81:f5:27:bd:d7:47:
f7:1e:c5:cd:33:c2:9b:f6:4d:2b:41:84:11:7e:dd:90:58:0c:
e5:4a:1a:62:c8:bb:21:a6:0a:c2:79:9d:4d:5b:ce:f9:3c:8b:
a1:20:4c:43:ff:45:07:bf:5e:48:27:a8:28:33:97:78:d7:2c:
0e:d9:d0:cf:49:7e:19:7e:56:b6:a9:8f:4c:8f:c6:04:3b:81:
74:97:42:e9:78:97:0f:39:ef:bf:19:d3:0d:cf:5a:c3:88:e9:
96:a0:08:93:c1:15:7f:14:65:8c:17:27:7c:d2:aa:7d:2e:44:
b7:1b:ca:ac:d2:71:20:2e:30:7a:96:51:ab:02:b3:5d:a2:b1:
50:9e:ca:e2:b7:ec:33:45:9a:48:3c:91:09:65:64:b1:2a:b7:
b2:69:61:c0:8a:d9:3b:5c:99:3a:50:d2:71:ec:d6:e5:54:7a:
d5:2b:ae:3c:9d:a6:c4:d3:cf:98:e7:e0:9b:b0:ad:a4:f7:0f:
a6:24:da:97:3d:ad:3a:46:e3:f6:01:80:c6:68:7a:f1:cf:a8:
68:98:b7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 21 13:27:34 2024 by rpki-client on console-ams.rpki-client.org