Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/542643E21C2011EFAF4030487DDC24C2.roa
File: 542643E21C2011EFAF4030487DDC24C2.roa (raw, json)
Hash identifier: OdFuGxaoeHt/3EZeZnbSDebgTieZ/EpnQjX8DQ61UGU=
Subject key identifier: 1B:67:8D:04:C5:41:39:CA:D8:A9:8B:1E:2D:B9:B8:8E:0A:7A:2B:38
Certificate issuer: /CN=F36F8F86AF/serialNumber=B1BA3D7C7D8ECD511FDA4BF0EC29F6A99B2C31BB
Certificate serial: 0B
Authority key identifier: B1:BA:3D:7C:7D:8E:CD:51:1F:DA:4B:F0:EC:29:F6:A9:9B:2C:31:BB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/542643E21C2011EFAF4030487DDC24C2.roa
Signing time: Mon 27 May 2024 11:57:45 +0000
ROA not before: Mon 27 May 2024 11:57:42 +0000
ROA not after: Thu 27 May 2027 11:57:42 +0000
asID: 37381
IP address blocks: 197.159.192.0/19 maxlen: 32
Validation: Failed, certificate revoked on Mon 21 Oct 2024 13:17:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F8F86AF/serialNumber=B1BA3D7C7D8ECD511FDA4BF0EC29F6A99B2C31BB
Validity
Not Before: May 27 11:57:42 2024 GMT
Not After : May 27 11:57:42 2027 GMT
Subject: CN=66547539-3971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:61:e4:11:9e:0b:e4:38:b8:f8:a5:e7:a7:3b:
96:99:28:3b:da:6e:19:72:48:33:69:95:95:de:db:
a7:bf:c0:ec:96:aa:5d:2d:e4:34:5f:47:eb:a5:49:
bd:c8:58:e4:74:25:22:32:ea:e6:69:e3:e0:0a:7a:
8f:df:d3:72:2f:ae:0b:3e:0a:25:4e:1b:1b:86:5d:
29:41:f1:e0:47:bf:e0:7e:5b:09:07:20:89:c0:ec:
10:66:c9:60:00:47:94:60:ed:c5:be:6e:83:3c:db:
79:44:ba:b7:bc:65:17:e0:9a:a6:3b:dc:83:ec:ed:
ca:df:02:2b:ea:64:5d:86:a3:bf:bc:19:f3:62:74:
2f:32:2c:2d:0c:98:b4:14:82:18:c8:93:68:5f:9d:
6c:24:4e:cd:41:c9:e1:b6:83:a4:a8:11:f0:93:e7:
61:5a:51:08:47:33:ea:b3:9d:73:6f:27:d0:93:13:
10:96:70:4d:40:9f:ec:9c:7b:cc:c1:54:7a:40:8f:
c2:ea:7b:ef:c3:fa:f9:ee:64:2d:5d:f8:a5:e2:72:
7a:bf:30:0a:76:06:d8:e4:5d:ce:ae:49:e9:a6:ef:
84:bc:5e:e4:59:8d:50:78:d6:da:56:5b:a4:3a:92:
6f:e6:7a:db:a8:8a:33:4a:c3:ed:12:6c:1d:7a:c9:
be:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:67:8D:04:C5:41:39:CA:D8:A9:8B:1E:2D:B9:B8:8E:0A:7A:2B:38
X509v3 Authority Key Identifier:
keyid:B1:BA:3D:7C:7D:8E:CD:51:1F:DA:4B:F0:EC:29:F6:A9:9B:2C:31:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/542643E21C2011EFAF4030487DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.159.192.0/19
Signature Algorithm: sha256WithRSAEncryption
41:d6:d4:67:a4:ae:98:23:be:44:12:4e:d4:a8:c0:a0:d3:e9:
db:d0:51:41:0b:da:66:ee:82:8e:4a:fe:38:0c:f5:da:0f:ef:
08:5d:74:a3:2a:ff:76:03:fb:b5:81:1d:ed:e6:9e:0b:f0:c7:
c6:4f:da:ef:e0:8a:e3:ec:93:6a:6b:3d:ed:bf:53:fd:cb:01:
f2:36:3d:2e:85:e4:b6:23:18:b1:c8:46:67:d2:73:05:83:91:
cd:d3:33:fc:91:f8:d9:53:21:9f:e7:3c:0b:cf:ae:cc:df:8f:
1c:69:05:a9:04:ae:dc:bc:49:15:92:6f:7b:f4:02:3d:e8:23:
25:01:43:d2:82:bb:ba:84:a4:43:27:f5:78:3d:22:88:43:b1:
22:72:25:ac:2b:12:a2:f2:a4:84:15:f3:d4:c2:d8:1c:59:6d:
cb:16:4f:52:a2:ce:d8:f0:d3:7f:f0:82:28:a3:bd:58:58:ca:
8b:75:93:34:5e:a1:d3:4b:2f:2f:21:60:c5:e3:0b:d8:d3:24:
42:ae:25:fb:c3:3e:49:61:dd:c0:5c:a1:55:b1:c6:9b:0e:18:
7f:6c:ff:93:67:09:2d:93:90:ee:3f:d2:61:1f:df:f5:f3:cf:
66:14:fa:dc:d1:cd:3e:3f:b9:5b:c8:f2:4d:23:d9:b5:66:81:
f1:e8:aa:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 15:40:33 2024 by rpki-client on console-fra.rpki-client.org