Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE001/84ED8AA074B611EF988AF3B6762E951A/3835EFFC74EF11EF86C4A397762E951A.roa
File: 3835EFFC74EF11EF86C4A397762E951A.roa (raw, json)
Hash identifier: G3TtvelElY2t6MwgyjTah4UdvgxxlwJaMR2sfONw7VU=
Subject key identifier: 66:5E:4F:7A:65:9B:69:D4:90:0E:DC:AF:7C:E1:B0:6C:AE:D3:98:75
Certificate issuer: /CN=F36FE001AF/serialNumber=3FB5BE3DDDAE614BE9D1E62E809836E2302E7118
Certificate serial: 0C
Authority key identifier: 3F:B5:BE:3D:DD:AE:61:4B:E9:D1:E6:2E:80:98:36:E2:30:2E:71:18
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/P7W-Pd2uYUvp0eYugJg24jAucRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FE001/84ED8AA074B611EF988AF3B6762E951A/3835EFFC74EF11EF86C4A397762E951A.roa
Signing time: Tue 17 Sep 2024 12:20:26 +0000
ROA not before: Tue 17 Sep 2024 12:20:22 +0000
ROA not after: Sat 30 Sep 2028 12:20:22 +0000
asID: 37344
IP address blocks: 196.43.199.0/24 maxlen: 32
Validation: Failed, certificate revoked on Tue 22 Oct 2024 07:29:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FE001AF/serialNumber=3FB5BE3DDDAE614BE9D1E62E809836E2302E7118
Validity
Not Before: Sep 17 12:20:22 2024 GMT
Not After : Sep 30 12:20:22 2028 GMT
Subject: CN=66e9740a-6d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bc:df:8b:52:33:d1:65:33:8d:82:df:7a:9f:
26:a8:0a:d1:2f:82:1f:e5:21:22:15:45:97:9e:58:
03:14:22:56:44:cd:37:1e:2d:cc:b6:a6:99:d1:e7:
82:c2:d5:eb:72:dc:13:58:b6:78:b8:56:54:11:29:
f4:29:89:8d:d3:49:86:f3:b6:04:d2:6a:8d:5c:04:
45:76:bb:2e:75:9b:bf:31:df:16:41:15:90:f1:ac:
e3:0e:1c:23:b3:fe:bb:17:d4:ca:00:e5:1d:8c:8c:
09:75:1b:36:7a:c7:5b:2f:d4:7b:e2:b5:0e:02:9f:
30:d1:c9:0e:a2:80:4b:d1:21:c1:92:33:8d:d4:db:
8b:bb:4d:c2:26:6e:fd:1b:7d:53:16:91:0c:d7:f9:
09:9f:0f:2f:39:4d:c9:50:02:d5:f8:82:e4:9c:8b:
82:4f:67:3d:10:af:5d:31:f4:df:71:14:58:33:22:
5e:34:80:62:17:95:2e:cc:19:ac:a7:28:be:0d:21:
ea:63:b4:26:28:3a:49:2d:1f:58:cf:e1:c2:41:67:
be:ac:85:7a:18:b0:65:35:13:f4:6f:f0:3b:b2:0a:
eb:e4:b9:55:1b:fc:11:f2:2d:44:00:66:fb:f7:6c:
a2:8e:43:a6:96:67:a8:26:45:53:d0:f9:b8:24:f5:
f6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5E:4F:7A:65:9B:69:D4:90:0E:DC:AF:7C:E1:B0:6C:AE:D3:98:75
X509v3 Authority Key Identifier:
keyid:3F:B5:BE:3D:DD:AE:61:4B:E9:D1:E6:2E:80:98:36:E2:30:2E:71:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE001/84ED8AA074B611EF988AF3B6762E951A/P7W-Pd2uYUvp0eYugJg24jAucRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P7W-Pd2uYUvp0eYugJg24jAucRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE001/84ED8AA074B611EF988AF3B6762E951A/3835EFFC74EF11EF86C4A397762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.43.199.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:8d:30:a5:29:60:1b:43:42:03:fb:42:f5:7e:2d:4a:56:d3:
09:4d:0a:f0:7d:7b:fc:6a:6b:cf:7e:ea:c4:8b:54:27:b3:49:
0e:db:23:5a:04:74:78:21:91:e2:2a:bc:08:6b:e1:b7:fa:8e:
0d:f7:fb:8d:74:93:48:d0:04:c3:17:8b:1f:b3:d7:35:30:d0:
fb:a9:86:94:0d:9d:29:24:54:43:94:59:48:22:d3:12:4d:29:
14:b9:d4:f9:4c:6d:bf:d0:59:45:ef:0d:66:d4:95:a9:de:ac:
34:30:87:18:60:2b:10:eb:e4:e8:5e:12:47:b5:10:bd:5d:71:
db:71:6d:c9:f0:ad:9c:19:8a:a4:c8:85:cd:89:a2:a1:24:22:
8b:ce:3f:21:cf:e5:f1:8a:d9:ce:00:a5:0c:90:ac:50:77:21:
0c:70:0d:e7:4c:b5:71:30:ee:8a:dd:ab:f0:a0:03:88:81:96:
c9:95:e1:b5:99:24:67:25:27:85:4a:a0:59:d7:d6:ea:c2:b6:
e0:7d:0f:1f:2d:b2:e9:3f:a3:b1:f4:c6:76:6a:71:fe:d1:b1:
95:f9:04:f1:59:a2:07:8d:4c:ce:d3:3c:bf:db:2f:ee:9b:18:
5b:89:7e:fd:4e:64:d6:bf:6d:48:ff:0c:4d:59:44:b8:a9:30:
86:12:4e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 10:09:29 2024 by rpki-client on console-fra.rpki-client.org