Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365052E/7BC482DE5E4B11EFBC78A1A3762E951A/EFC80D585E4C11EF8036FEAC762E951A.roa
File: EFC80D585E4C11EF8036FEAC762E951A.roa (raw, json)
Hash identifier: GZLRjc5Qm6NVPFh3ndYdGbqwhjkeLN2ZMvYTQmpgQG8=
Subject key identifier: F6:AF:D0:FE:44:D2:F8:87:CB:A9:AA:7F:18:B2:91:20:62:E8:42:82
Certificate issuer: /CN=F365052EAF/serialNumber=131DA6703B16C2A2B48C3AE2CDAE1EFFDAE1FB3A
Certificate serial: 02
Authority key identifier: 13:1D:A6:70:3B:16:C2:A2:B4:8C:3A:E2:CD:AE:1E:FF:DA:E1:FB:3A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Ex2mcDsWwqK0jDriza4e_9rh-zo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365052E/7BC482DE5E4B11EFBC78A1A3762E951A/EFC80D585E4C11EF8036FEAC762E951A.roa
Signing time: Mon 19 Aug 2024 17:03:21 +0000
ROA not before: Mon 19 Aug 2024 17:03:16 +0000
ROA not after: Mon 19 Aug 2030 17:03:16 +0000
asID: 36920
IP address blocks: 41.78.172.0/22 maxlen: 22
41.215.244.0/22 maxlen: 22
41.223.64.0/22 maxlen: 22
102.67.0.0/19 maxlen: 19
102.216.200.0/22 maxlen: 22
102.219.152.0/22 maxlen: 22
197.157.216.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 19 Aug 2024 18:16:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365052EAF/serialNumber=131DA6703B16C2A2B48C3AE2CDAE1EFFDAE1FB3A
Validity
Not Before: Aug 19 17:03:16 2024 GMT
Not After : Aug 19 17:03:16 2030 GMT
Subject: CN=66c37ad8-8923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b6:ee:7f:07:3c:0c:a0:55:2c:4f:3e:12:c6:
93:d5:d1:c5:67:b4:f8:47:3e:1e:0d:4f:89:15:59:
e0:5d:5b:a6:a3:48:c0:b5:5f:22:e3:48:cc:f8:d6:
a2:3f:69:5e:1f:46:44:f7:b9:61:96:d1:4d:e8:19:
16:44:94:c1:97:2e:d1:ce:fe:e4:de:50:95:a5:ff:
cd:6f:dc:b9:c7:6d:cc:7b:30:6e:3f:6a:55:12:e9:
55:6c:89:e4:9f:a3:09:b4:c5:3e:53:be:d8:c0:65:
87:49:be:79:a4:de:ce:84:31:2d:f5:2f:dc:ff:15:
c3:a1:86:87:ae:94:0d:93:52:fb:b9:3e:3b:38:34:
28:ae:e0:80:c3:47:5d:3e:1a:4f:42:1f:b6:d6:3e:
35:1c:03:96:df:f7:0d:72:c6:8b:00:f1:b2:cf:1e:
ff:7a:47:11:d8:e8:a0:79:5f:37:70:1e:94:ea:61:
c4:f4:7e:51:f6:bb:9d:75:b9:9b:66:77:e3:52:21:
88:87:1c:c8:0a:b7:e3:31:5e:61:e9:81:6f:48:88:
6d:8d:9d:38:71:b6:fc:2b:d0:70:93:64:63:e6:bf:
51:a4:c4:23:b5:41:f1:c5:f8:88:6d:93:91:cc:33:
9d:52:3f:04:dc:77:76:63:77:e1:f6:fe:a2:c3:87:
8e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AF:D0:FE:44:D2:F8:87:CB:A9:AA:7F:18:B2:91:20:62:E8:42:82
X509v3 Authority Key Identifier:
keyid:13:1D:A6:70:3B:16:C2:A2:B4:8C:3A:E2:CD:AE:1E:FF:DA:E1:FB:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365052E/7BC482DE5E4B11EFBC78A1A3762E951A/Ex2mcDsWwqK0jDriza4e_9rh-zo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ex2mcDsWwqK0jDriza4e_9rh-zo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365052E/7BC482DE5E4B11EFBC78A1A3762E951A/EFC80D585E4C11EF8036FEAC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.78.172.0/22
41.215.244.0/22
41.223.64.0/22
102.67.0.0/19
102.216.200.0/22
102.219.152.0/22
197.157.216.0/22
Signature Algorithm: sha256WithRSAEncryption
56:30:ce:50:43:73:85:71:4f:fa:fa:e3:04:a3:7e:0d:94:e9:
85:26:bd:cb:a0:c4:80:60:b7:b4:67:ad:9d:7e:77:bf:aa:e6:
4b:92:9d:ec:83:f8:91:0c:dd:02:15:9d:17:25:88:7f:14:18:
1b:aa:6f:eb:89:17:fc:1c:9b:40:a5:b6:a8:71:8f:e9:b5:7c:
7b:a9:a9:20:18:60:12:b5:e9:10:f4:8e:aa:f9:a4:4d:7b:d9:
d6:60:c3:7d:2d:5e:81:70:ab:8e:f6:84:f7:27:4a:b6:90:9f:
ec:bc:1d:43:e2:88:de:db:1f:31:25:7e:ac:39:af:6c:d2:67:
01:50:d8:10:18:b8:3b:e2:62:40:75:cc:76:76:d0:f0:a5:3e:
22:6b:76:0e:40:e7:5a:3c:55:df:ba:8c:45:8f:6f:31:e4:32:
a3:c6:65:d8:72:3c:66:d6:bc:4b:66:35:75:2e:2a:a0:14:2c:
78:c0:b4:fa:77:8d:fc:50:ab:c6:59:d0:ff:ba:48:c0:60:4f:
15:f8:39:05:a2:9e:a3:47:c7:86:f2:31:c1:49:da:e8:34:20:
8c:24:f6:a5:3d:e8:32:3e:8a:98:49:f3:fb:c7:1d:79:91:6c:
6e:d9:cd:bd:5b:3d:0a:41:05:4b:5c:83:19:78:8d:4b:72:d6:
76:df:28:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 23:05:45 2024 by rpki-client on console.sobornost.net