Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/35A666EC1BE311EEBB0DCC174AD9E6FC.roa
File: 35A666EC1BE311EEBB0DCC174AD9E6FC.roa (raw, json)
Hash identifier: sOJAs9bGeIw74DGyvEhLieRY9meGBJ/qxK2T3tTOxfQ=
Subject key identifier: 8A:FB:38:95:A8:57:CD:0C:1A:63:6E:B9:0E:14:E6:32:61:AD:62:1A
Certificate issuer: /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial: 22
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/35A666EC1BE311EEBB0DCC174AD9E6FC.roa
Signing time: Thu 06 Jul 2023 09:55:17 +0000
ROA not before: Thu 06 Jul 2023 09:55:13 +0000
ROA not after: Wed 06 Jul 2033 09:55:13 +0000
asID: 37105
IP address blocks: 41.56.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Validity
Not Before: Jul 6 09:55:13 2023 GMT
Not After : Jul 6 09:55:13 2033 GMT
Subject: CN=64a68f85-5e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:db:87:f3:a1:7f:3c:37:31:92:55:68:d7:c1:
92:03:38:02:1f:4f:20:67:d5:7e:01:d3:97:fb:70:
c1:e5:75:f6:ef:c9:76:dc:03:dc:44:29:96:be:80:
5f:20:93:58:3e:f9:9b:66:16:0f:d8:55:75:3e:ba:
84:12:0c:6e:15:8d:a7:6b:06:85:df:15:c3:ce:74:
69:cd:8d:bf:83:7c:91:39:0a:b4:64:e0:ed:8b:9a:
37:0f:91:d9:7b:c4:3d:9a:3d:c6:d8:c7:ab:bc:4c:
f6:4f:c9:2b:0c:ff:91:f2:d7:25:c9:28:07:c7:c0:
f4:6e:e0:7c:58:a7:ad:60:99:ce:e4:1f:2d:09:2a:
ba:c7:a2:dc:22:cd:68:dd:ee:ed:8d:aa:3d:99:27:
7d:2f:df:50:39:6e:8a:e5:78:53:0d:44:1e:93:d1:
84:48:b7:5c:94:41:d2:8e:26:e0:24:f3:a0:28:ac:
98:7d:d6:ab:ad:f1:22:11:e3:f9:b2:e2:5a:13:66:
93:e1:53:d5:66:a3:46:96:5e:43:91:4b:da:61:bd:
c5:fb:c6:8b:ea:85:e7:11:45:79:34:07:05:45:1b:
a1:ff:b4:20:ec:4e:48:b4:0c:20:ff:dd:40:4a:c4:
10:43:e1:25:d1:c4:70:6c:ea:e4:c8:85:03:6e:b2:
4c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FB:38:95:A8:57:CD:0C:1A:63:6E:B9:0E:14:E6:32:61:AD:62:1A
X509v3 Authority Key Identifier:
keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/35A666EC1BE311EEBB0DCC174AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.56.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ba:80:a6:a1:d6:d5:ef:18:e4:9a:4b:84:24:e7:26:dd:f0:4c:
12:c4:05:55:7e:47:2a:07:87:37:f4:16:1a:56:f5:5d:61:00:
a6:05:19:3d:31:a8:4b:84:33:16:88:5e:92:72:92:f9:7f:ee:
6b:ee:87:57:8d:1f:1b:7f:0a:b5:4a:02:ab:a0:1f:92:dc:1f:
5f:73:76:c5:0e:d5:9e:52:b1:71:a0:b0:fc:45:42:99:03:45:
fe:81:de:23:a9:71:d2:71:d2:21:74:d5:f7:6e:99:46:15:86:
db:26:56:9c:5c:ef:b0:46:4e:e1:36:c6:d7:94:fb:3e:28:d0:
8a:a9:43:c1:91:55:a6:55:b0:63:e4:a1:3b:f9:69:e0:57:24:
77:fc:7b:f1:b0:58:2c:83:d0:01:71:8d:06:70:b3:95:17:31:
39:b9:fd:ee:0f:45:70:ab:fe:f5:c9:af:e0:26:49:23:5b:b2:
20:f4:ff:1c:ff:49:dd:47:7f:6e:f3:84:12:bd:56:02:38:fd:
d9:4f:69:da:b9:5d:2c:35:50:2a:cb:0f:18:97:ad:55:55:50:
70:fb:04:63:e8:14:2e:60:40:d8:c1:0e:74:46:7a:06:9f:9e:
ce:61:93:c4:5b:b7:94:34:03:84:9f:b1:2a:57:18:74:b0:4e:
a0:90:49:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:25 2023 by rpki-client on console.sobornost.net