Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/0A4FB7EA90FF11EABEA8BA70F8AEA228.roa
File: 0A4FB7EA90FF11EABEA8BA70F8AEA228.roa (raw, json)
Hash identifier: BXytWo+pXqgOE8fOe5sSARIDzpO2CpNyF7nJZPwjKYY=
Subject key identifier: 15:83:E6:A6:5A:7F:2D:53:77:DC:8C:75:9C:87:5D:EF:46:C9:57:60
Certificate issuer: /CN=F36F6034AF/serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
Certificate serial: 0E
Authority key identifier: C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/0A4FB7EA90FF11EABEA8BA70F8AEA228.roa
Signing time: Fri 08 May 2020 07:39:25 +0000
ROA not before: Sat 09 May 2020 07:39:21 +0000
ROA not after: Fri 31 May 2030 07:39:21 +0000
asID: 37518
IP address blocks: 196.198.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F6034AF/serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
Validity
Not Before: May 9 07:39:21 2020 GMT
Not After : May 31 07:39:21 2030 GMT
Subject: CN=5eb50cad-e90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b7:c7:d4:d2:c5:16:10:53:75:ea:4f:a0:f8:
56:45:61:9f:6c:19:15:c0:d9:69:12:43:c4:a7:6e:
c3:2d:85:90:4d:e5:d8:52:12:24:81:14:34:d0:58:
36:c1:f6:ea:eb:1b:b7:18:1e:20:db:e4:9a:8a:b8:
57:af:4d:97:af:f1:d0:40:00:5e:79:bc:6d:35:1b:
12:97:83:47:bf:15:1c:99:ea:c0:6b:04:59:4a:0a:
fa:c6:28:da:07:45:03:c6:0b:95:3c:64:a5:aa:a1:
01:36:20:73:ef:0f:ca:4e:cf:78:cf:d0:bf:e0:f2:
66:9d:49:6f:d9:3a:c7:5a:29:94:7f:ae:e3:f4:a8:
6c:47:a5:7f:95:b3:b3:2d:ea:5b:37:b8:dc:b4:0e:
19:64:f8:54:14:c4:8b:e2:45:8a:a2:99:1d:2e:5f:
9f:f6:09:01:2c:69:28:28:c1:a8:0f:ee:59:47:78:
61:ef:8e:44:cd:8c:a9:44:97:c7:08:72:c1:19:4b:
8d:ad:a0:22:d3:20:d9:e1:7b:63:98:5e:56:9d:e9:
5e:82:8a:f2:2a:cc:d9:9b:7b:08:38:87:a6:9e:fd:
1d:76:79:5d:9e:8a:53:cf:4f:e4:5a:78:68:fc:e7:
47:9f:d8:5f:be:79:dc:ea:af:a9:45:29:9b:7d:0e:
05:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:83:E6:A6:5A:7F:2D:53:77:DC:8C:75:9C:87:5D:EF:46:C9:57:60
X509v3 Authority Key Identifier:
keyid:C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/0A4FB7EA90FF11EABEA8BA70F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.198.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1f:9e:d9:3c:2e:fd:9a:3f:f2:65:9d:ab:17:1d:d8:e5:f7:d8:
a3:50:25:c2:54:de:98:c3:04:99:97:48:37:18:ea:6c:fc:6c:
78:40:7d:74:fb:82:3f:76:73:d6:4c:49:8c:45:66:0a:e0:dd:
d4:9f:0d:4c:51:5c:ca:98:d1:86:99:34:36:2a:39:69:b5:5b:
c9:97:02:32:f9:fb:fd:1e:b4:ac:33:9e:e4:a2:53:a6:da:1e:
4a:e5:c0:d6:e5:23:d9:6a:8b:a9:b3:a6:bf:d3:63:ab:86:d3:
3a:b7:4a:73:fb:ea:60:40:b0:f6:d6:be:45:51:12:2e:50:69:
64:ce:e6:e6:cc:ca:df:f8:c9:fb:b9:8a:02:91:30:6b:7b:d8:
9c:d5:28:cd:4b:a0:aa:b2:72:2a:cc:e7:fd:45:69:b4:8f:e5:
7f:d7:47:5c:2d:d2:ce:c1:e1:b4:66:b8:89:57:25:51:ae:f9:
d6:c7:0e:be:cd:5d:a4:dc:57:48:b4:8d:d2:bd:85:88:1a:2d:
71:10:99:16:1e:10:dd:eb:85:3a:f2:76:64:ff:2a:04:20:ba:
26:19:a6:90:7a:df:7e:6a:07:fd:58:7f:c9:6b:16:23:2a:e2:
cd:9f:5e:0e:c8:c0:bc:b6:66:3e:0c:a2:14:dc:17:0d:25:4c:
98:27:df:80
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIBDjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZG
NjAzNEFGMTEwLwYDVQQFEyhDNzAyNzk5RUE0QkQ1REJBM0VEM0QwNjlBNzE5MUI5
NDFCNUE3NzlBMB4XDTIwMDUwOTA3MzkyMVoXDTMwMDUzMTA3MzkyMVowGDEWMBQG
A1UEAxMNNWViNTBjYWQtZTkwYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALm3x9TSxRYQU3XqT6D4VkVhn2wZFcDZaRJDxKduwy2FkE3l2FISJIEUNNBY
NsH26usbtxgeINvkmoq4V69Nl6/x0EAAXnm8bTUbEpeDR78VHJnqwGsEWUoK+sYo
2gdFA8YLlTxkpaqhATYgc+8Pyk7PeM/Qv+DyZp1Jb9k6x1oplH+u4/SobEelf5Wz
sy3qWze43LQOGWT4VBTEi+JFiqKZHS5fn/YJASxpKCjBqA/uWUd4Ye+ORM2MqUSX
xwhywRlLja2gItMg2eF7Y5heVp3pXoKK8irM2Zt7CDiHpp79HXZ5XZ6KU89P5Fp4
aPznR5/YX7553OqvqUUpm30OBS0CAwEAAaOCAqQwggKgMB0GA1UdDgQWBBQVg+am
Wn8tU3fcjHWch13vRslXYDAfBgNVHSMEGDAWgBTHAnmepL1duj7T0GmnGRuUG1p3
mjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RjYwMzQvRDkxNjc1OEE5MEZDMTFFQTlEODEzMDZFRjhBRUEyMjgveHdKNW5x
UzlYYm8tMDlCcHB4a2JsQnRhZDVvLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMveHdKNW5xUzlYYm8tMDlCcHB4a2JsQnRhZDVvLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjYwMzQvRDkxNjc1OEE5MEZDMTFFQTlEODEzMDZFRjhB
RUEyMjgvMEE0RkI3RUE5MEZGMTFFQUJFQThCQTcwRjhBRUEyMjgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAMTGMA0GCSqGSIb3DQEBCwUA
A4IBAQAfntk8Lv2aP/JlnasXHdjl99ijUCXCVN6YwwSZl0g3GOps/Gx4QH10+4I/
dnPWTEmMRWYK4N3Unw1MUVzKmNGGmTQ2KjlptVvJlwIy+fv9HrSsM57kolOm2h5K
5cDW5SPZaoups6a/02OrhtM6t0pz++pgQLD21r5FURIuUGlkzubmzMrf+Mn7uYoC
kTBre9ic1SjNS6CqsnIqzOf9RWm0j+V/10dcLdLOweG0ZriJVyVRrvnWxw6+zV2k
3FdItI3SvYWIGi1xEJkWHhDd64U68nZk/yoEILomGaaQet9+agf9WH/JaxYjKuLN
n14OyMC8tmY+DKIU3BcNJUyYJ9+A
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org