Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F68F4/51DF5004C67311EE84C75AA5775412E6/2939E8DAC67811EEAC4EA0AC775412E6.roa
File: 2939E8DAC67811EEAC4EA0AC775412E6.roa (raw, json)
Hash identifier: AzFV9B91wjKT2a8GIS3/xTHD4YZsNjKnsGtZZ/TwWsY=
Subject key identifier: F0:69:62:9E:69:9D:7E:17:EA:1C:80:B7:C0:9E:E5:A9:3C:DA:B6:74
Certificate issuer: /CN=F36F68F4AF/serialNumber=627A43BB0DF3C6F5E6287ABFEA17A75DB7B2B303
Certificate serial: 02
Authority key identifier: 62:7A:43:BB:0D:F3:C6:F5:E6:28:7A:BF:EA:17:A7:5D:B7:B2:B3:03
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YnpDuw3zxvXmKHq_6henXbeyswM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/51DF5004C67311EE84C75AA5775412E6/2939E8DAC67811EEAC4EA0AC775412E6.roa
Signing time: Thu 08 Feb 2024 11:49:49 +0000
ROA not before: Thu 08 Feb 2024 11:49:45 +0000
ROA not after: Fri 07 Feb 2025 11:49:45 +0000
asID: 37557
IP address blocks: 197.231.152.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 08 Feb 2024 18:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F68F4AF/serialNumber=627A43BB0DF3C6F5E6287ABFEA17A75DB7B2B303
Validity
Not Before: Feb 8 11:49:45 2024 GMT
Not After : Feb 7 11:49:45 2025 GMT
Subject: CN=65c4bfdc-3d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:34:26:08:2a:cf:51:70:f9:d4:1f:f4:6c:38:
d3:cf:bc:26:af:94:78:0c:fa:73:0d:8f:eb:c1:0f:
c2:a8:62:eb:f1:f5:3d:e7:0b:8b:1d:a2:c4:02:a9:
f7:f9:fd:2d:ac:33:e0:75:7d:e8:46:fd:0f:f1:8f:
eb:21:70:3a:ce:90:3e:8d:91:e0:aa:a7:ae:d1:ee:
23:29:2b:de:0d:f3:0d:6c:82:f4:68:57:9a:fb:17:
3b:37:a8:91:a2:04:5b:d5:f1:81:a6:5b:76:a1:95:
0b:98:1a:13:7a:75:cc:01:85:a8:02:77:fe:e9:02:
a0:7b:5c:1f:40:db:32:31:23:d1:a1:78:a8:35:94:
fd:9a:41:5d:0b:56:d2:9a:6d:d4:d7:db:fb:2f:da:
19:f1:dc:5c:2d:54:ca:78:bf:8b:ec:47:06:5e:43:
5f:b2:66:44:cb:28:a5:ed:1b:10:90:f6:da:6e:22:
1e:bb:47:bc:83:db:fb:b2:87:c6:2b:26:85:1e:d5:
ec:8b:63:85:dd:47:e9:97:c4:15:a4:0f:27:96:45:
b5:35:a8:e6:56:92:f6:1e:e3:07:ef:20:d8:bd:19:
eb:1e:85:2d:74:d5:47:25:67:58:01:e6:d6:79:5b:
5d:c9:f7:25:9f:d1:a7:a6:1f:d5:a0:41:a6:88:37:
4b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:69:62:9E:69:9D:7E:17:EA:1C:80:B7:C0:9E:E5:A9:3C:DA:B6:74
X509v3 Authority Key Identifier:
keyid:62:7A:43:BB:0D:F3:C6:F5:E6:28:7A:BF:EA:17:A7:5D:B7:B2:B3:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/51DF5004C67311EE84C75AA5775412E6/YnpDuw3zxvXmKHq_6henXbeyswM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YnpDuw3zxvXmKHq_6henXbeyswM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/51DF5004C67311EE84C75AA5775412E6/2939E8DAC67811EEAC4EA0AC775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.231.152.0/21
Signature Algorithm: sha256WithRSAEncryption
a5:62:4a:ea:f6:3c:14:0c:09:41:73:96:4a:d9:a6:9b:27:7d:
22:0b:eb:0a:a8:ec:fa:53:06:37:2b:91:09:30:f3:cc:6a:c7:
ec:31:27:41:e8:21:0a:03:05:4d:e8:5b:b1:08:21:4b:a5:12:
08:f1:db:a8:40:69:cc:8d:82:5b:a8:5b:c9:88:ff:bb:23:c8:
66:fe:5f:08:89:0f:20:b1:96:28:d7:7c:c0:d4:f6:ab:d6:88:
74:03:9a:fd:d9:26:c6:41:61:c6:11:ae:80:8d:a3:4e:80:a2:
d9:c3:6c:74:22:84:c6:11:db:07:58:6a:4c:cd:7a:de:ec:ae:
d6:8a:7a:ab:d8:4e:a2:e1:46:6e:16:25:c1:1c:f6:ad:5d:0b:
41:b5:0b:d4:4b:1f:64:24:4b:d9:20:bf:4a:5d:cd:49:da:e6:
ba:0d:06:61:90:70:3c:d1:ca:e3:3e:d2:b2:07:0e:08:d7:30:
08:b9:27:85:39:74:c3:93:88:f0:03:ce:4b:02:e5:38:f8:2b:
b5:9f:3b:f9:c6:36:40:55:81:02:a3:f1:1f:e9:ed:8d:b1:e4:
1e:1a:c3:22:ad:7d:8a:c7:74:ef:a7:23:28:14:11:bd:a7:41:
0e:da:c1:ae:4b:45:f6:16:b2:35:e6:2a:8f:96:6e:1b:b9:28:
15:08:89:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org