Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/018EC33C1B4211EE89EF572A4AD9E6FC.roa
File: 018EC33C1B4211EE89EF572A4AD9E6FC.roa (raw, json)
Hash identifier: KCzeyhX2L4yoQbJbrheTOmwmvIUDnI3JhiBMsX+INuU=
Subject key identifier: F9:03:2A:99:32:70:E0:CE:32:6A:3A:ED:DF:4D:91:9F:B6:E1:75:DF
Certificate issuer: /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial: 13
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/018EC33C1B4211EE89EF572A4AD9E6FC.roa
Signing time: Wed 05 Jul 2023 14:41:20 +0000
ROA not before: Wed 05 Jul 2023 14:41:17 +0000
ROA not after: Tue 05 Jul 2033 14:41:17 +0000
asID: 37105
IP address blocks: 41.73.32.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Validity
Not Before: Jul 5 14:41:17 2023 GMT
Not After : Jul 5 14:41:17 2033 GMT
Subject: CN=64a58110-0907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:15:c5:e6:1d:9a:50:3e:b5:19:af:4b:75:9a:
83:b0:55:43:6c:3c:86:74:0f:d0:88:c1:df:7b:f5:
68:07:93:28:01:bc:db:12:0c:74:54:b2:27:b9:a4:
41:09:60:8b:ab:b6:08:a3:db:2a:0d:93:37:29:7d:
84:05:5f:e0:10:f3:b2:4f:48:90:47:8c:a9:0e:cc:
89:ff:d1:56:c2:c0:8d:91:11:c4:0c:62:fc:a6:0e:
23:72:b6:94:c7:d1:9b:6d:b2:6d:c3:e6:fd:fa:1e:
09:ff:bf:de:ad:74:98:75:17:8f:d1:50:04:94:ba:
9d:82:c8:f9:81:f9:1a:83:e0:78:71:9d:71:b8:07:
0e:46:93:85:8e:38:54:70:a0:c0:91:27:76:c6:c3:
4b:8b:85:88:fa:6d:87:74:11:41:69:66:7e:85:d8:
6e:fd:5e:e6:1b:2a:83:04:42:96:1a:b5:2d:65:96:
95:a1:08:21:ba:98:d2:30:b9:fb:55:b0:89:ef:98:
03:c1:8d:73:24:cf:33:48:27:a6:f5:9b:59:ad:aa:
6b:8d:50:c8:e8:3e:64:49:1b:43:07:30:0b:a4:9b:
a3:8a:c4:76:72:3f:aa:ff:60:8a:14:23:66:a3:06:
4d:4c:19:20:72:5c:91:6e:59:08:85:d7:9f:a0:69:
06:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:03:2A:99:32:70:E0:CE:32:6A:3A:ED:DF:4D:91:9F:B6:E1:75:DF
X509v3 Authority Key Identifier:
keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/018EC33C1B4211EE89EF572A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.73.32.0/19
Signature Algorithm: sha256WithRSAEncryption
b8:84:79:d8:54:8e:11:b0:f2:de:7d:9f:42:1d:46:f8:00:1b:
77:65:06:01:a1:93:14:e8:e3:6d:e5:cd:9d:9c:00:da:57:79:
60:64:ff:09:a9:ef:00:f3:0f:38:1c:19:83:6e:65:41:1f:6b:
ea:8d:12:a9:cd:75:09:89:2b:2a:99:f2:95:9b:15:26:92:ad:
ed:b6:51:85:44:98:c7:0f:23:8e:51:42:eb:4c:a9:71:03:32:
cb:fc:56:04:da:36:7a:86:e0:42:83:84:54:2b:30:7b:61:b5:
00:86:d5:bb:ad:cc:c7:cd:25:00:74:5e:d5:d7:fe:32:1c:46:
44:f7:27:82:96:54:bb:20:c4:bb:a3:67:a4:23:a3:c9:ef:de:
b5:67:32:b1:08:b3:82:d8:6e:61:74:3e:db:3f:71:4b:67:8b:
10:e2:93:d1:8c:af:97:29:77:9f:45:24:e1:5c:73:6a:c8:57:
04:99:41:7d:f2:e7:4e:32:8f:3d:36:87:73:c9:1b:87:d5:66:
22:36:f1:06:35:5c:54:12:83:ab:ad:dd:1f:4a:47:ec:e6:df:
95:ef:a4:3a:d9:6a:34:cc:4d:a8:c4:1a:e8:27:4d:d8:37:d8:
73:73:e2:b0:39:29:ce:2c:da:fb:66:7e:bd:f4:f3:36:c6:81:
83:38:50:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:25 2023 by rpki-client on console.sobornost.net