Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/907E562CA56611EDBAA311E8F1222468.roa
File: 907E562CA56611EDBAA311E8F1222468.roa (raw, json)
Hash identifier: qtkKjCA7usw1hBghqX3r7VSRliyP3jk12Vnh1AQu+A0=
Subject key identifier: 39:8E:50:72:32:FF:E6:02:6D:64:49:C0:BF:91:46:B7:F7:E0:4D:F0
Certificate issuer: /CN=F36F8F4FAF/serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Certificate serial: 01F8
Authority key identifier: DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/907E562CA56611EDBAA311E8F1222468.roa
Signing time: Sun 05 Feb 2023 15:05:45 +0000
ROA not before: Sun 05 Feb 2023 15:05:41 +0000
ROA not after: Wed 05 Feb 2025 15:05:41 +0000
asID: 21003
IP address blocks: 41.208.64.0/18 maxlen: 18
Validation: Failed, certificate revoked on Thu 17 Aug 2023 16:39:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 504 (0x1f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F8F4FAF/serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Validity
Not Before: Feb 5 15:05:41 2023 GMT
Not After : Feb 5 15:05:41 2025 GMT
Subject: CN=63dfc5c9-d7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:33:ab:78:83:0f:f3:45:26:f8:c7:47:18:5e:
af:a6:6f:87:4f:bf:21:62:ff:9c:b6:9a:72:70:5c:
b9:09:f7:50:c9:31:13:aa:be:51:db:8d:e5:bc:d5:
c5:1d:1b:dc:9b:2a:68:ab:97:2b:f7:a4:48:29:15:
9a:b2:a2:d6:c8:54:e6:24:7d:5d:32:5b:c7:0a:0e:
10:89:a2:f5:10:51:da:22:5c:43:94:62:2a:22:b4:
48:e5:db:f6:a4:27:51:41:fa:74:8f:69:2d:30:29:
84:a1:24:6e:5d:d3:cb:38:ec:64:9a:ae:11:ea:62:
7d:bb:dd:0f:4b:4a:f0:cd:40:c9:cf:e0:d8:ae:d3:
f4:5f:53:18:e9:37:02:1d:dd:f8:3b:ad:12:1e:45:
70:6d:87:c6:0e:61:0d:8f:4e:58:99:c9:fd:4f:00:
7d:37:e0:fc:67:cc:68:f0:71:11:30:ad:ef:1a:d7:
6b:10:18:b0:78:c6:13:8c:89:62:6d:34:50:5d:ff:
fb:42:62:05:7e:0f:01:ee:0b:da:f6:24:62:ec:af:
15:b4:2d:df:41:9d:7e:b8:3d:e3:2d:22:ba:b1:c7:
2b:2a:68:ae:84:d7:af:0f:da:73:26:25:ee:b2:14:
c5:b9:fb:0d:60:5e:c4:b1:9f:6b:ab:1d:73:bc:78:
23:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8E:50:72:32:FF:E6:02:6D:64:49:C0:BF:91:46:B7:F7:E0:4D:F0
X509v3 Authority Key Identifier:
keyid:DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/907E562CA56611EDBAA311E8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.208.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b2:a9:7f:05:58:d2:c6:05:d4:df:8a:36:e2:ff:2f:78:3a:7b:
d7:01:2b:74:70:ae:b6:91:51:6f:b2:72:6c:cd:f8:b4:de:c2:
62:75:92:e4:42:b6:21:97:16:a1:cd:fc:e1:77:6d:89:0f:11:
9b:0d:17:51:4b:ae:ee:54:42:e2:93:c1:14:c8:45:5d:47:16:
12:0a:19:ea:4a:01:93:19:c9:3f:d8:3f:b2:e7:bc:95:52:13:
22:05:60:93:4a:6f:0f:5d:15:e2:20:11:b0:32:35:cd:1b:37:
c4:e0:47:6a:2f:38:65:7e:33:a7:12:57:4f:78:41:7c:de:88:
aa:74:59:4a:ff:85:ad:1c:50:55:5c:d1:b5:cd:65:9d:ae:e3:
45:56:f9:d3:bc:28:5c:57:08:36:42:a5:61:89:23:6e:4d:8f:
27:70:51:ef:60:9f:ae:ac:27:19:ce:66:fd:09:0e:a2:c4:7d:
e2:5c:66:02:bd:29:3c:af:b5:a8:f3:1b:1d:ba:af:73:03:dd:
4a:73:56:c7:44:a6:52:b1:65:d0:f9:e5:f4:db:fe:6b:57:4e:
39:a5:c4:eb:b3:ab:e3:12:94:99:71:34:08:47:b5:60:fc:9c:
62:c5:0d:1a:3e:d1:e3:24:ad:34:c0:e3:d6:6d:23:9f:2b:78:
63:85:bf:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org