Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/8F820538535111EC94738201D8A014CE.roa
File: 8F820538535111EC94738201D8A014CE.roa (raw, json)
Hash identifier: KzZbZfp9BQLH+mpLGP+QyR/lgI4DKHHwZfiFyYWbUBo=
Subject key identifier: FD:D3:44:44:6B:A3:3E:DC:6D:4D:21:E2:38:D3:39:60:FD:35:98:5B
Certificate issuer: /CN=F36FBCCDAF/serialNumber=BB3A354B2EB45A0797371332C21FC833DB22D9B1
Certificate serial: 02
Authority key identifier: BB:3A:35:4B:2E:B4:5A:07:97:37:13:32:C2:1F:C8:33:DB:22:D9:B1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/uzo1Sy60WgeXNxMywh_IM9si2bE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/8F820538535111EC94738201D8A014CE.roa
Signing time: Thu 02 Dec 2021 09:23:51 +0000
ROA not before: Thu 02 Dec 2021 09:23:46 +0000
ROA not after: Thu 31 Dec 2026 09:23:46 +0000
asID: 37209
IP address blocks: 2c0f:f880::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 28 May 2024 08:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FBCCDAF/serialNumber=BB3A354B2EB45A0797371332C21FC833DB22D9B1
Validity
Not Before: Dec 2 09:23:46 2021 GMT
Not After : Dec 31 09:23:46 2026 GMT
Subject: CN=61a890a7-c573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b3:ef:79:4a:e2:57:4f:16:d1:ad:6e:a0:1a:
c0:10:bd:54:69:6e:20:e6:dd:11:b4:c8:6a:bf:a5:
71:6e:c3:cc:3a:9d:fc:1b:fb:66:cc:ce:42:e7:bf:
a0:45:a9:cc:61:e9:64:4f:ae:cf:d3:96:0d:ce:db:
03:15:6a:9e:4f:bf:97:5d:85:1b:c8:25:e3:25:09:
b5:9f:af:ae:99:35:59:8b:92:b4:75:37:b9:1d:38:
e1:91:16:c7:c6:cf:22:23:55:fa:95:2b:99:a8:4e:
ad:aa:d5:e7:25:08:46:2e:36:57:27:9f:b0:12:4d:
95:9a:a7:90:3a:db:9d:29:67:86:fd:c1:54:a1:db:
13:80:66:e8:07:0d:68:34:13:7a:79:2f:fa:3e:df:
9a:87:a4:f9:6c:a0:ab:cd:e9:52:38:22:d6:87:a5:
d7:9a:02:33:d4:8c:08:02:a1:af:ea:84:94:91:5c:
ca:8a:34:a0:77:b0:b1:ed:8b:7b:6e:00:4d:9b:78:
62:08:4d:45:bf:be:44:8b:4d:f2:f4:2d:ca:f6:34:
f8:36:dc:5f:56:ac:b9:f9:81:c7:5d:bf:72:2f:c1:
be:2f:68:ab:4c:c7:84:b0:1c:53:1d:92:e0:1e:44:
a6:5a:38:e2:e0:8a:cb:ba:bc:f4:a6:4b:f3:e9:7e:
4d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D3:44:44:6B:A3:3E:DC:6D:4D:21:E2:38:D3:39:60:FD:35:98:5B
X509v3 Authority Key Identifier:
keyid:BB:3A:35:4B:2E:B4:5A:07:97:37:13:32:C2:1F:C8:33:DB:22:D9:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/uzo1Sy60WgeXNxMywh_IM9si2bE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/8F820538535111EC94738201D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f880::/32
Signature Algorithm: sha256WithRSAEncryption
63:f7:dd:4b:d7:20:2d:e3:21:87:63:6d:59:7d:53:1c:1c:80:
c0:63:64:c7:13:d7:77:dd:11:6c:40:01:68:82:a9:e9:07:bd:
57:1d:16:18:70:cb:82:a6:a5:e4:aa:25:7a:3f:91:32:33:b2:
45:ed:75:a5:84:d9:7c:08:d4:e2:7d:91:7b:e1:a1:9b:03:2a:
55:03:4e:6c:4a:72:80:57:53:28:16:11:e5:2b:71:c2:77:cc:
5f:9f:da:4b:ad:0c:dc:de:af:e2:4d:bb:77:a2:43:52:88:5d:
89:95:64:5f:d9:cc:88:c2:8c:23:2d:b8:eb:fa:f2:ed:fd:93:
64:6f:e7:1e:c8:7e:a8:79:26:93:b1:ba:1c:eb:51:41:e9:0c:
39:09:7f:ee:ce:31:91:93:49:59:c7:f8:f5:3c:1e:5d:3b:d3:
67:d2:e0:c1:c6:ef:e4:a9:13:a8:2a:2c:f8:25:df:ae:06:2f:
95:af:96:e5:5d:b8:84:b5:c9:9e:27:17:e9:83:52:a2:92:90:
96:d1:f5:bb:f7:07:00:e3:e5:af:8e:54:49:32:5b:bc:84:b9:
a6:cf:54:6e:cb:e2:09:f6:c9:99:fb:c6:3b:5a:02:4c:2c:01:
d4:f3:a5:5a:2e:80:71:20:f2:9e:3c:32:78:54:1b:36:38:1a:
3b:67:7d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-ams.rpki-client.org