Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/C4113EA008F411EDA171269AF1222468.roa
File: C4113EA008F411EDA171269AF1222468.roa (raw, json)
Hash identifier: t1GYKh4wwg9096uWpmY+INM62twBXysrmbp3e5putJ4=
Subject key identifier: C0:FF:61:FC:38:DE:5D:5C:87:FC:63:50:31:A0:40:6F:D4:C1:52:EC
Certificate issuer: /CN=F36F854AAF/serialNumber=36892679B2E0C85F556D947DF2191619BA2ABFE6
Certificate serial: 02
Authority key identifier: 36:89:26:79:B2:E0:C8:5F:55:6D:94:7D:F2:19:16:19:BA:2A:BF:E6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NokmebLgyF9VbZR98hkWGboqv-Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/C4113EA008F411EDA171269AF1222468.roa
Signing time: Thu 21 Jul 2022 12:58:07 +0000
ROA not before: Thu 21 Jul 2022 12:58:03 +0000
ROA not after: Sun 20 Jul 2025 12:58:03 +0000
asID: 37028
IP address blocks: 41.183.0.0/16 maxlen: 16
196.10.112.0/22 maxlen: 22
196.10.116.0/23 maxlen: 23
196.11.125.0/24 maxlen: 24
196.11.126.0/23 maxlen: 23
196.11.128.0/22 maxlen: 22
196.11.132.0/23 maxlen: 23
196.11.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Aug 2022 07:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F854AAF/serialNumber=36892679B2E0C85F556D947DF2191619BA2ABFE6
Validity
Not Before: Jul 21 12:58:03 2022 GMT
Not After : Jul 20 12:58:03 2025 GMT
Subject: CN=62d94d5f-3250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:de:49:00:85:92:c6:9e:67:96:52:da:6e:07:
d4:3b:04:1b:f5:71:a9:9a:26:f5:c0:02:64:4a:9a:
c4:00:1b:c6:ad:8a:ad:0a:11:20:ef:58:9a:62:e3:
db:4e:35:c1:65:f4:f8:74:a0:9b:df:0a:c0:8c:9d:
ad:26:9c:01:61:3b:89:ca:d3:1e:20:b8:44:fb:fb:
81:5f:e2:3c:b3:87:3f:94:a0:9e:8e:fb:9d:55:bf:
16:2c:d0:0b:c9:1b:fe:5b:1f:18:01:7c:53:9c:d0:
56:7b:89:7b:18:fe:17:aa:b7:5a:69:20:14:fa:99:
89:48:c6:24:4b:98:67:ea:4a:ce:cc:bb:7d:4f:19:
fc:3e:93:ff:f5:96:cc:27:73:4e:05:8c:11:54:01:
14:77:ee:22:4e:ae:ab:01:00:ed:3a:5e:54:a8:b3:
cf:bf:57:d3:3f:81:c4:09:1c:09:c5:f6:03:73:8d:
05:7e:fc:a4:95:34:60:d3:5d:5f:1a:88:85:c1:2c:
86:bc:7b:61:9f:f3:d3:cc:04:f1:2d:6d:8a:8b:82:
4b:62:07:41:41:88:d6:7d:1e:76:de:34:fa:e5:13:
31:da:99:33:ee:90:a8:0d:4e:92:76:10:01:3a:29:
b0:4e:38:b8:a5:7d:54:b7:ab:43:2a:41:f6:1f:8a:
b6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FF:61:FC:38:DE:5D:5C:87:FC:63:50:31:A0:40:6F:D4:C1:52:EC
X509v3 Authority Key Identifier:
keyid:36:89:26:79:B2:E0:C8:5F:55:6D:94:7D:F2:19:16:19:BA:2A:BF:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NokmebLgyF9VbZR98hkWGboqv-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/C4113EA008F411EDA171269AF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.183.0.0/16
196.10.112.0-196.10.117.255
196.11.125.0-196.11.134.255
Signature Algorithm: sha256WithRSAEncryption
24:b1:54:13:bd:34:3f:8b:12:b7:7b:bd:81:06:c2:24:19:37:
3b:13:65:ed:61:ca:25:b8:ff:2f:7a:50:53:b7:a3:93:fb:b5:
8e:4c:f5:93:ac:22:1c:36:df:a9:25:cf:d8:ab:1d:2a:5a:1d:
1e:f1:21:79:ec:d9:46:1e:0f:85:9d:db:ab:8c:fc:f0:e7:ed:
9b:cf:4c:ad:a3:46:88:3e:69:21:96:fd:85:3a:c2:80:d4:fd:
d9:6c:68:86:53:94:e6:e1:fa:f1:45:b7:45:ba:ce:75:79:0c:
c8:65:7e:5f:65:4a:f7:2a:8c:0d:fd:9c:41:17:64:b7:13:17:
96:94:c3:3a:2f:f2:81:2e:c9:00:14:6c:1e:72:c7:25:8d:27:
4a:73:d2:f6:e5:fe:41:32:15:15:26:95:21:88:42:4f:37:34:
8f:e0:35:b4:5c:0d:e6:cb:ab:1c:3d:ac:f6:4d:2d:ab:bc:f7:
79:7f:ee:f3:a8:98:26:1b:56:a5:f5:27:89:9f:b9:0c:46:3a:
97:de:70:69:e1:ca:9e:73:11:04:50:bc:43:0b:87:3f:8c:6d:
a0:7b:4a:f0:db:26:87:33:96:e6:6d:e7:2a:20:14:96:d6:3a:
0a:26:35:f4:7e:b1:56:38:a1:7f:84:61:ab:07:77:71:15:55:
45:b1:92:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org