Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE001/84ED8AA074B611EF988AF3B6762E951A/5D91265E74B811EFB9C56243762E951A.roa
File: 5D91265E74B811EFB9C56243762E951A.roa (raw, json)
Hash identifier: lYzZ94yAeLNe3JOodGAornhShcty8Hr64LD0saNsrFo=
Subject key identifier: 85:33:52:E4:47:70:04:20:ED:E8:C9:7B:0A:F1:F1:C3:DD:87:9E:83
Certificate issuer: /CN=F36FE001AF/serialNumber=3FB5BE3DDDAE614BE9D1E62E809836E2302E7118
Certificate serial: 04
Authority key identifier: 3F:B5:BE:3D:DD:AE:61:4B:E9:D1:E6:2E:80:98:36:E2:30:2E:71:18
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/P7W-Pd2uYUvp0eYugJg24jAucRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FE001/84ED8AA074B611EF988AF3B6762E951A/5D91265E74B811EFB9C56243762E951A.roa
Signing time: Tue 17 Sep 2024 05:47:46 +0000
ROA not before: Tue 17 Sep 2024 05:47:43 +0000
ROA not after: Sat 30 Sep 2034 05:47:43 +0000
asID: 30844
IP address blocks: 196.43.199.0/24 maxlen: 32
2001:43f8:9e0::/48 maxlen: 128
Validation: Failed, certificate revoked on Tue 17 Sep 2024 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FE001AF/serialNumber=3FB5BE3DDDAE614BE9D1E62E809836E2302E7118
Validity
Not Before: Sep 17 05:47:43 2024 GMT
Not After : Sep 30 05:47:43 2034 GMT
Subject: CN=66e91802-7276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c4:46:0e:e7:68:0c:52:36:5b:f6:01:c9:07:
0b:9b:16:15:ca:79:12:c1:a4:cd:af:dc:9c:32:68:
6f:7c:86:b7:09:0b:6a:54:d8:d9:20:0d:71:36:af:
3b:6d:1b:ee:d8:fd:99:b3:5a:71:1b:09:c7:7e:7d:
64:d4:4d:5a:50:5c:97:db:be:75:f8:e8:29:0b:4f:
cc:2a:9c:8c:62:28:f0:13:b3:31:c6:c8:62:7f:e4:
43:55:ee:02:b8:b0:36:ca:37:15:bd:fd:96:62:c2:
9e:d1:a7:33:40:86:9d:2a:7d:31:ef:65:01:32:b4:
33:cf:04:f6:24:00:b7:7a:9a:3d:22:4f:f2:64:80:
9c:4c:e7:8c:44:a4:a8:f1:de:0d:ab:5d:1d:31:31:
59:8d:14:18:93:db:a9:1e:87:a5:63:7c:d7:a3:87:
fe:0e:33:21:9e:fa:af:86:51:e5:b2:56:39:c9:9c:
c4:6b:5f:a5:ed:13:fd:80:43:de:45:2b:cf:99:72:
95:17:c5:be:6f:9c:47:8b:c7:2c:15:2c:c2:7c:16:
93:c6:65:94:f2:ea:49:42:77:06:4e:3c:a2:44:a1:
0a:00:ad:55:e4:a9:33:45:46:eb:0c:b1:d9:6d:86:
e8:ee:73:0e:f5:0c:6b:ef:f2:2b:64:e7:e1:3e:44:
96:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:33:52:E4:47:70:04:20:ED:E8:C9:7B:0A:F1:F1:C3:DD:87:9E:83
X509v3 Authority Key Identifier:
keyid:3F:B5:BE:3D:DD:AE:61:4B:E9:D1:E6:2E:80:98:36:E2:30:2E:71:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE001/84ED8AA074B611EF988AF3B6762E951A/P7W-Pd2uYUvp0eYugJg24jAucRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P7W-Pd2uYUvp0eYugJg24jAucRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE001/84ED8AA074B611EF988AF3B6762E951A/5D91265E74B811EFB9C56243762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.43.199.0/24
IPv6:
2001:43f8:9e0::/48
Signature Algorithm: sha256WithRSAEncryption
5c:af:30:98:b0:b7:c4:b7:1d:a1:b2:45:4b:b7:f1:db:29:12:
97:2b:2b:b8:5a:12:e1:93:15:93:88:57:11:60:73:a8:4a:8f:
9f:cb:ce:3a:21:05:d2:11:1f:0a:5f:f4:99:9b:2c:06:ae:a2:
1c:ca:73:98:a5:17:05:66:88:f8:55:4e:3d:a6:28:2f:b7:d9:
e8:35:9c:6d:43:4b:3d:96:e9:03:b1:1b:35:93:68:e5:d5:24:
87:e5:87:9c:68:c9:e4:2d:cf:29:8d:19:cc:c6:a3:b5:4d:08:
89:8b:2c:c5:dd:65:67:fb:26:f1:26:8f:ad:dc:dc:4e:a7:9f:
22:2d:ab:f6:01:7e:15:c3:92:f4:c2:f3:a1:98:17:03:68:dd:
7b:ad:42:9f:b6:24:9b:d9:78:15:03:4a:f0:dd:b6:fb:0a:cf:
bc:c3:31:80:ee:d6:de:46:c8:d0:5e:23:02:93:25:9c:56:aa:
9d:d1:af:af:a4:e6:65:d8:3b:75:40:7d:08:fb:3a:47:33:66:
be:cd:12:f2:ec:2d:d7:78:7f:a0:2d:69:2e:87:16:81:4f:3e:
18:d3:c7:76:44:ea:56:89:ff:f2:f0:64:4b:c5:e3:df:fd:4a:
a8:d1:4d:29:b2:1c:79:b9:ef:b2:b7:bb:25:f9:5c:e0:69:32:
7c:10:ba:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 09:41:16 2024 by rpki-client on console-fra.rpki-client.org