Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/8EE76CB0A5A011EDAEE56289F1222468.roa
File: 8EE76CB0A5A011EDAEE56289F1222468.roa (raw, json)
Hash identifier: 4mspH4PqXOW7jvbTzfLILC/MMAVW4ak7IuDfNJqfVR8=
Subject key identifier: 45:2A:CD:B7:A9:D0:E7:D8:33:53:1E:8A:89:68:F6:59:04:3A:0A:F2
Certificate issuer: /CN=F36F8F4FAF/serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Certificate serial: 01FC
Authority key identifier: DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/8EE76CB0A5A011EDAEE56289F1222468.roa
Signing time: Sun 05 Feb 2023 22:00:53 +0000
ROA not before: Mon 06 Feb 2023 22:00:49 +0000
ROA not after: Thu 06 Feb 2025 22:00:49 +0000
asID: 21003
IP address blocks: 41.208.64.0/18 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Aug 2023 16:36:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 508 (0x1fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F8F4FAF/serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Validity
Not Before: Feb 6 22:00:49 2023 GMT
Not After : Feb 6 22:00:49 2025 GMT
Subject: CN=63e02715-9f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:86:36:f3:7a:03:1c:7c:9c:5c:5d:85:07:46:
c8:ba:87:ac:d8:8a:b2:b8:29:51:f4:82:f0:13:7e:
59:22:46:3d:ff:c9:30:0a:fd:61:6f:31:8b:8e:75:
23:8e:0c:21:af:51:f3:05:78:d8:57:77:89:8f:63:
d7:03:5a:d9:42:b9:80:ec:4f:5f:fb:4b:bb:c9:56:
33:97:5c:32:b2:17:4b:89:d1:86:28:0d:ae:e0:7c:
a8:e9:61:77:83:1e:9d:69:fe:63:df:09:59:d3:52:
91:30:48:20:70:28:c9:c7:b8:b9:25:97:0e:a7:b2:
fa:79:79:db:8f:e2:2a:04:e2:31:c2:92:79:72:2d:
89:a5:98:9d:57:df:3c:ff:b3:f2:52:52:a3:ce:9f:
15:98:7d:3b:d5:31:48:44:eb:62:e5:21:d7:da:66:
1c:3a:df:6f:b9:26:4f:21:ec:12:2f:1e:44:0e:1e:
cc:ce:d1:b5:e3:f9:81:db:2c:be:3c:c7:ae:19:f0:
af:12:20:6a:48:7c:f4:42:25:57:d2:2b:1b:03:65:
b5:69:cc:b4:d0:dd:48:f8:41:4d:8a:f9:53:cf:a8:
47:51:98:6f:6a:e4:83:9b:31:17:23:48:d9:02:64:
c5:95:43:9b:47:a9:12:3e:e9:6e:c0:fd:7d:22:56:
28:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2A:CD:B7:A9:D0:E7:D8:33:53:1E:8A:89:68:F6:59:04:3A:0A:F2
X509v3 Authority Key Identifier:
keyid:DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/8EE76CB0A5A011EDAEE56289F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.208.64.0/18
Signature Algorithm: sha256WithRSAEncryption
63:6c:fd:9f:d3:86:c5:45:29:fc:2c:3a:f2:b9:19:b7:e7:73:
16:5f:60:a7:f7:cd:74:d7:49:0d:29:70:97:42:99:df:55:62:
b6:f0:30:fc:c4:b6:7c:0e:d6:14:63:df:bc:18:bc:a4:d4:3e:
c0:5c:aa:06:58:c4:93:ee:86:d6:f4:b1:ba:28:8c:31:c8:32:
15:2b:b4:aa:47:fc:e6:67:92:f2:e1:b9:bf:c8:b6:e4:fe:7f:
01:92:13:d8:b6:cf:c2:8a:26:6f:4b:96:1f:c6:e7:c0:b8:42:
58:83:f7:15:55:1d:43:c2:ad:85:e9:96:92:bd:40:0f:44:73:
7d:f6:fc:a6:c1:68:b7:00:78:92:98:00:fd:a4:b8:c2:b8:25:
55:cd:aa:ff:83:12:ca:57:01:cc:c5:8d:5a:a1:60:28:ef:f6:
d6:a1:a2:26:4a:f1:81:ac:95:32:3e:0d:e2:ca:5b:a8:24:d2:
62:92:f3:2f:38:c5:3f:65:a6:f5:1c:2f:25:ee:e3:15:e1:79:
28:9f:b4:90:d2:8a:45:34:6c:e0:22:a5:09:50:d9:76:0a:c9:
ce:15:d1:00:0f:47:4e:82:e0:98:1d:f9:c3:c6:32:61:8f:82:
e8:24:db:f3:5d:fa:31:7d:f9:a4:ed:43:f7:5c:96:8f:51:9a:
c7:30:f4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org