Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/E5B3EAFEA66911ED93B3E4C3F1222468.roa
File: E5B3EAFEA66911ED93B3E4C3F1222468.roa (raw, json)
Hash identifier: hpinFxUZ59HH3asGnD1McbdFaZV/LvEG1W2qZpJyeD0=
Subject key identifier: 79:E5:95:67:86:A4:6A:A0:88:F5:A7:45:A9:AE:F0:37:42:09:24:44
Certificate issuer: /CN=F36F8F4FAF/serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Certificate serial: 0205
Authority key identifier: DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/E5B3EAFEA66911ED93B3E4C3F1222468.roa
Signing time: Mon 06 Feb 2023 22:02:08 +0000
ROA not before: Tue 07 Feb 2023 22:02:04 +0000
ROA not after: Fri 07 Feb 2025 22:02:04 +0000
asID: 21003
IP address blocks: 41.208.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Aug 2023 16:36:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 517 (0x205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F8F4FAF/serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Validity
Not Before: Feb 7 22:02:04 2023 GMT
Not After : Feb 7 22:02:04 2025 GMT
Subject: CN=63e178df-d225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:52:7b:9d:24:9d:b7:17:0a:b4:c9:aa:4b:da:
89:f1:e6:91:35:1b:2f:d1:49:16:28:ff:21:04:45:
9d:e2:a7:33:9f:0b:9b:2c:97:79:00:c3:5f:88:b9:
2b:21:c7:8e:41:da:13:de:2b:ac:62:d4:11:9e:65:
5b:2d:50:cd:3d:ae:9f:41:4d:20:4a:ea:0e:27:6c:
3a:72:e1:82:90:7d:1c:ac:7d:63:fe:82:4f:e6:1a:
f9:2d:20:30:20:b7:56:f2:80:91:cf:0d:cd:30:00:
bb:72:aa:2a:59:34:40:c0:f4:05:25:b2:40:9c:39:
ff:55:82:3a:76:3b:b5:17:ce:26:b1:94:bd:70:10:
c1:35:42:8d:33:88:4b:4e:f7:d8:2b:a8:98:3e:1c:
b7:c1:b5:71:a6:4c:d1:d0:68:af:d4:be:c0:c6:c7:
b2:b0:1f:63:c7:c9:b5:41:3a:ce:a9:35:50:02:12:
98:e5:30:72:cc:0b:10:c9:1c:8d:7a:87:38:26:fa:
d3:0d:7e:0f:c6:ac:1e:00:33:27:d6:be:4c:2a:35:
d8:0a:e0:42:0f:62:e2:4b:11:b9:93:34:e0:b2:47:
a6:7f:2e:4d:42:43:9a:d1:64:cc:69:44:65:26:73:
a6:b6:36:b9:88:c6:87:12:37:44:97:ee:01:05:44:
c7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E5:95:67:86:A4:6A:A0:88:F5:A7:45:A9:AE:F0:37:42:09:24:44
X509v3 Authority Key Identifier:
keyid:DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/E5B3EAFEA66911ED93B3E4C3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.208.68.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:0e:ed:7a:af:94:d7:57:ab:23:c7:43:29:8b:b6:36:9a:e0:
3c:93:da:35:44:38:5d:d4:c7:7e:1f:2d:0c:96:b2:c8:64:0b:
69:60:a7:e4:13:1c:07:4e:dc:46:cc:f6:58:53:a0:9a:19:e8:
c8:ff:b3:df:19:82:51:7b:94:07:b3:a0:0e:08:53:8a:7e:c8:
7b:fa:2b:fd:b6:ce:e9:d4:0f:27:61:59:35:42:97:fe:8d:63:
24:a7:60:99:d6:df:83:e0:80:f3:87:dd:15:b4:b5:90:3c:59:
86:0f:01:3e:b0:4f:a1:8c:f5:88:46:c2:36:4b:d6:cf:a1:5b:
d6:06:da:a0:74:ea:10:c6:2d:63:63:8d:c5:e1:ec:72:64:bd:
44:fb:b8:23:85:d2:67:99:d6:ad:69:67:63:9e:96:b7:15:43:
c8:56:6e:a6:1f:a6:10:fc:a1:ad:19:e4:a7:ed:33:34:f4:9f:
9b:0a:23:af:d4:36:2a:ca:fe:26:e0:f0:65:22:38:8c:74:91:
90:d1:1d:72:3e:3a:4a:22:2a:64:17:37:b6:df:c5:50:31:a0:
33:db:78:9a:dd:5e:23:49:b7:5f:ef:7a:bf:85:3d:da:e2:6b:
20:d7:08:62:fd:00:92:cc:e3:8b:67:de:87:aa:97:1e:89:d4:
dc:78:05:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org