Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE001/84ED8AA074B611EF988AF3B6762E951A/63EF1A5674EF11EF9E32B397762E951A.roa
File: 63EF1A5674EF11EF9E32B397762E951A.roa (raw, json)
Hash identifier: kLo9ABHBSfrpNDr9oOjatqkorA8FgmiRjRNuwIsx13k=
Subject key identifier: D7:EA:9F:10:66:AF:17:C2:6E:1E:B5:51:F1:F8:54:1E:68:B4:D6:A1
Certificate issuer: /CN=F36FE001AF/serialNumber=3FB5BE3DDDAE614BE9D1E62E809836E2302E7118
Certificate serial: 0E
Authority key identifier: 3F:B5:BE:3D:DD:AE:61:4B:E9:D1:E6:2E:80:98:36:E2:30:2E:71:18
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/P7W-Pd2uYUvp0eYugJg24jAucRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FE001/84ED8AA074B611EF988AF3B6762E951A/63EF1A5674EF11EF9E32B397762E951A.roa
Signing time: Tue 17 Sep 2024 12:21:39 +0000
ROA not before: Tue 17 Sep 2024 12:21:36 +0000
ROA not after: Sat 30 Sep 2028 12:21:36 +0000
asID: 37344
IP address blocks: 2001:43f8:9e0::/48 maxlen: 128
Validation: Failed, certificate revoked on Tue 22 Oct 2024 07:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FE001AF/serialNumber=3FB5BE3DDDAE614BE9D1E62E809836E2302E7118
Validity
Not Before: Sep 17 12:21:36 2024 GMT
Not After : Sep 30 12:21:36 2028 GMT
Subject: CN=66e97453-12e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:80:4d:ef:15:41:b9:f1:c2:bc:28:13:8f:70:
77:5c:d2:25:5c:19:c9:35:55:b7:0a:76:bc:62:d9:
eb:16:cd:65:2e:a6:d9:7a:87:cf:78:d3:1c:53:55:
c7:b4:83:32:0d:4f:c7:58:44:0a:74:13:ed:79:fb:
f3:dc:fd:1b:07:f0:fa:c3:d5:cd:28:32:89:43:61:
e5:ff:15:35:03:43:96:d8:74:59:84:85:b4:e1:a7:
1c:5b:30:a8:cd:d8:7e:01:32:93:03:66:fc:e9:8c:
fe:10:21:58:f1:21:dc:d8:e9:b7:38:78:31:32:63:
e3:d4:f4:69:b9:47:67:dd:e1:bd:4e:1d:17:e6:16:
df:48:57:38:89:4f:d4:ea:94:45:a5:79:49:86:3f:
37:20:21:13:b6:dc:08:ec:f0:e8:a8:74:25:94:fb:
f9:a9:c8:f3:fb:34:bb:7b:c7:82:5a:5a:76:57:0d:
0c:24:f0:a0:c8:ec:b5:86:d6:e8:af:99:fa:b4:18:
9d:81:70:c2:4b:17:eb:a3:fa:64:d6:5d:96:b1:84:
46:ff:dd:11:a8:d2:59:7c:cb:e3:72:6a:d5:3b:81:
2a:4f:17:fe:3d:78:3c:bb:7c:20:53:04:e4:04:47:
a3:df:35:56:37:01:f5:27:59:df:d2:ee:b2:4b:2d:
5e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EA:9F:10:66:AF:17:C2:6E:1E:B5:51:F1:F8:54:1E:68:B4:D6:A1
X509v3 Authority Key Identifier:
keyid:3F:B5:BE:3D:DD:AE:61:4B:E9:D1:E6:2E:80:98:36:E2:30:2E:71:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE001/84ED8AA074B611EF988AF3B6762E951A/P7W-Pd2uYUvp0eYugJg24jAucRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P7W-Pd2uYUvp0eYugJg24jAucRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE001/84ED8AA074B611EF988AF3B6762E951A/63EF1A5674EF11EF9E32B397762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:9e0::/48
Signature Algorithm: sha256WithRSAEncryption
3c:d1:dd:89:c8:88:41:31:67:7e:1c:68:b8:ac:0c:65:6e:4a:
ca:d6:68:8f:c8:0d:bd:52:e8:c9:a4:40:51:92:55:f0:0f:b7:
c6:ba:d3:ee:3d:cd:ed:d2:6e:bd:5b:5c:14:50:79:a5:9d:52:
1a:78:19:c3:ad:92:29:a0:a3:14:f4:0d:28:bb:26:0f:37:58:
ee:b3:c6:18:c5:09:4b:7e:37:5b:f1:e8:dd:55:4b:c8:e3:21:
54:d9:bc:29:d0:08:9c:51:84:7a:e5:80:25:3b:9a:18:79:8c:
2a:27:9e:30:48:81:57:1d:a6:b9:f9:d5:0d:66:aa:d9:bf:98:
65:71:2f:bb:6d:2f:1d:2c:3b:71:96:84:64:ce:fb:40:93:cf:
92:fc:34:c1:56:e2:7d:2f:bd:e1:d6:58:46:15:7f:37:f0:fa:
d4:54:4e:f8:ae:f6:59:3d:8a:1d:b4:50:7c:33:6a:23:54:9f:
92:5c:9c:85:79:26:fd:ec:73:b9:d5:8d:f1:98:47:72:01:fb:
04:96:0a:23:ec:8a:63:70:a9:a3:5a:a2:24:49:74:4b:95:46:
26:cf:c9:e2:e6:37:93:50:4a:14:a3:2b:66:22:59:a2:12:7d:
3d:1f:9e:09:b8:55:25:48:22:8f:44:15:ce:43:5e:74:89:9b:
61:76:85:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 10:09:29 2024 by rpki-client on console-fra.rpki-client.org