Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CB397A94CB9811EA9C31CD51F8AEA228.roa
File: CB397A94CB9811EA9C31CD51F8AEA228.roa (raw, json)
Hash identifier: PealhLrN4HeslcozoPSbhbZ6iLdxGeF7QvtPBgmxbyI=
Subject key identifier: 20:77:6D:2B:F9:F8:BC:B2:C5:60:50:3C:9C:4F:C9:EE:C7:C5:37:D7
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 01F5
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CB397A94CB9811EA9C31CD51F8AEA228.roa
Signing time: Tue 21 Jul 2020 21:26:09 +0000
ROA not before: Wed 22 Jul 2020 21:26:06 +0000
ROA not after: Wed 24 Jul 2030 21:26:06 +0000
asID: 61317
IP address blocks: 102.165.32.0/22 maxlen: 24
102.165.40.0/22 maxlen: 24
102.165.56.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 501 (0x1f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 22 21:26:06 2020 GMT
Not After : Jul 24 21:26:06 2030 GMT
Subject: CN=5f175d71-2bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:96:03:1f:59:96:81:96:b1:43:58:66:56:f0:
c8:3f:80:e9:53:7f:49:10:6d:5f:6c:4c:6a:c0:86:
e8:59:29:88:9e:b4:f1:7a:0a:73:bd:a7:aa:04:0c:
92:13:03:f2:df:ef:80:f6:95:b8:68:49:7f:e8:c3:
fe:18:92:01:ba:e8:13:92:69:89:8a:4f:48:c4:8d:
e6:8e:a7:3e:d3:de:fc:29:6c:ee:ed:60:49:04:e2:
5e:c1:0c:cd:84:ba:31:fd:18:45:00:da:c7:25:66:
04:0a:eb:e2:ef:b9:3f:a8:a8:25:86:46:31:b4:08:
3f:c7:5a:2b:d7:9d:42:3f:b2:5c:93:a3:2a:5e:65:
bb:f6:54:df:01:a2:f9:34:34:ec:77:39:d9:e4:e2:
3e:b6:6e:3b:db:39:b8:a4:61:1f:7b:94:26:3a:da:
c9:5d:a5:32:d4:9b:6b:74:08:31:04:47:36:f9:43:
db:1e:b8:53:ff:10:a2:3c:37:99:4f:cb:8b:96:f7:
54:1e:02:be:8e:46:7c:7f:a3:4b:04:51:88:01:d4:
88:ea:51:3a:8f:47:f3:e7:64:7f:bd:32:bc:7a:31:
25:33:76:ea:09:36:de:af:b4:e8:86:42:f4:ab:0b:
18:32:90:14:50:e1:0e:03:0c:27:e3:ce:24:c1:dd:
3d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:77:6D:2B:F9:F8:BC:B2:C5:60:50:3C:9C:4F:C9:EE:C7:C5:37:D7
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CB397A94CB9811EA9C31CD51F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.32.0/22
102.165.40.0/22
102.165.56.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:b4:b9:c2:b6:23:93:42:19:fc:71:65:a1:52:c4:56:67:c4:
ee:56:4a:b0:30:3b:cc:4a:e4:73:e9:e2:62:0c:be:72:73:a7:
02:8a:8c:d3:8d:b0:09:71:b8:4a:d2:2d:ab:3c:42:0d:7d:f8:
87:b6:59:b3:cc:b7:d3:84:18:25:5d:82:9c:7b:a3:65:a5:a3:
a6:4e:8b:72:d3:7b:64:71:32:43:88:df:39:23:1b:50:f4:de:
f6:5c:ba:37:da:86:91:8d:24:83:d7:61:10:77:7e:a2:4d:da:
cf:d1:2f:1d:b4:63:d1:2f:5d:9b:b1:b2:44:ca:7d:4e:35:b7:
b5:e9:78:d8:f2:6e:b3:1d:2c:b9:51:3d:1b:47:92:a7:e2:8c:
83:36:25:62:de:8b:36:7d:12:43:30:0c:fd:69:4b:31:f9:5c:
15:55:58:4b:f0:23:66:aa:53:f0:17:b8:56:4e:d7:24:50:36:
5c:16:bb:5a:76:a0:93:ea:ec:d5:06:5f:9e:75:6a:2a:8d:2f:
59:dc:3f:39:9a:37:0b:30:1e:0a:81:cd:90:b3:9b:92:8a:a2:
4c:0d:f1:d5:12:10:76:e9:21:2c:9c:54:53:1e:6c:1b:b9:e8:
2d:36:78:64:cd:af:a1:98:ac:76:16:7f:1e:10:2b:b2:77:10:
f7:2c:7b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org