Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/20835620EDD111ED8283F6254AD9E6FC.roa
File: 20835620EDD111ED8283F6254AD9E6FC.roa (raw, json)
Hash identifier: +FshD/nFwuMgEzbM0ccPrSVvq9MjnrOoJO8TUvR8JqE=
Subject key identifier: 9C:A3:7E:B3:52:A3:5E:07:B6:28:B1:48:B3:B5:56:21:12:80:18:1A
Certificate issuer: /CN=F36750E0AF/serialNumber=1AC2711DE56051E0CD6701041D1D8204710BDDF5
Certificate serial: 04
Authority key identifier: 1A:C2:71:1D:E5:60:51:E0:CD:67:01:04:1D:1D:82:04:71:0B:DD:F5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/GsJxHeVgUeDNZwEEHR2CBHEL3fU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/20835620EDD111ED8283F6254AD9E6FC.roa
Signing time: Mon 08 May 2023 18:49:57 +0000
ROA not before: Mon 08 May 2023 18:49:53 +0000
ROA not after: Sat 31 May 2025 18:49:53 +0000
asID: 328275
IP address blocks: 102.165.120.0/24 maxlen: 24
102.165.121.0/24 maxlen: 24
102.165.122.0/24 maxlen: 24
102.165.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 May 2023 05:08:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36750E0AF/serialNumber=1AC2711DE56051E0CD6701041D1D8204710BDDF5
Validity
Not Before: May 8 18:49:53 2023 GMT
Not After : May 31 18:49:53 2025 GMT
Subject: CN=64594455-5e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f7:39:ad:7d:25:84:2c:ed:78:88:ff:0c:3a:
3a:a2:ba:f8:70:fa:e5:af:70:2e:f7:72:bc:f7:49:
35:d1:49:f1:27:c0:9a:97:be:c9:fe:9f:09:d5:94:
22:a9:fe:b7:44:b3:16:a2:66:43:ba:98:d8:0b:9d:
80:13:66:d9:61:ad:21:d0:ce:8f:4f:3b:c6:16:f3:
e4:32:75:30:ae:de:c6:1c:b6:23:19:60:9b:78:54:
68:18:a5:b7:d1:e6:b8:d1:2b:a0:1f:30:5f:f7:9b:
6a:61:0f:44:18:00:84:42:ab:ce:ef:dc:83:f8:eb:
50:29:ab:d8:c6:9d:63:cc:8a:60:ba:9c:6b:ed:a2:
37:f4:5e:e9:d7:67:ed:e0:b8:25:3f:b5:12:a0:a5:
39:17:ba:a9:01:f7:29:f8:fa:4c:05:7e:ca:32:5c:
6e:1a:dd:9e:56:71:0d:1f:cf:3b:75:c4:8c:89:02:
ac:1d:3e:f3:fe:47:71:d6:25:9b:6a:b8:cb:6b:f1:
4d:20:5e:9d:15:0f:da:fc:63:6b:ef:6f:c8:27:7f:
5b:e1:18:aa:51:93:56:c5:1a:a6:36:8e:03:d0:62:
5b:41:95:cd:85:a0:fb:08:d6:02:47:54:dc:d0:0b:
3a:6b:32:f4:9f:30:ff:72:05:bc:d9:2b:85:dc:41:
f4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A3:7E:B3:52:A3:5E:07:B6:28:B1:48:B3:B5:56:21:12:80:18:1A
X509v3 Authority Key Identifier:
keyid:1A:C2:71:1D:E5:60:51:E0:CD:67:01:04:1D:1D:82:04:71:0B:DD:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/GsJxHeVgUeDNZwEEHR2CBHEL3fU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GsJxHeVgUeDNZwEEHR2CBHEL3fU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/20835620EDD111ED8283F6254AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.120.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:e2:9e:84:f0:41:f8:9b:a6:b7:83:03:76:02:5d:00:40:a9:
83:01:8a:81:bc:39:75:6d:c6:b0:17:7d:14:ac:eb:8c:09:4a:
f3:02:9c:f0:c8:78:0e:8e:93:e9:ee:b6:b9:ff:77:41:b1:e1:
f1:e4:74:7a:21:d3:44:55:34:8a:63:03:5f:ab:bb:6b:0b:7a:
60:63:d2:6e:3d:c5:e7:77:2c:80:e4:44:93:e0:b0:df:90:68:
3f:96:c4:c4:eb:c0:f6:06:e4:24:43:1f:9d:03:2b:89:eb:50:
7c:73:94:a5:fa:6c:f1:b9:d8:7b:c3:e2:2a:bf:6b:f2:d6:d5:
18:4a:d7:95:cf:c3:c4:6b:9d:50:4f:df:78:6a:f3:c6:23:de:
05:2c:c2:ac:fe:5e:95:bf:8a:fb:c9:a0:eb:61:36:ea:55:e5:
d8:b7:70:2c:4c:1e:60:db:14:6d:02:21:bb:d0:2f:64:7c:51:
a7:e6:0e:16:38:dc:61:ea:59:19:25:ce:c1:0d:c5:5c:00:27:
4d:f7:93:a1:2f:fa:de:94:f2:8c:72:96:4b:17:cf:55:81:ca:
c4:95:ed:df:a4:22:bc:47:5c:c1:a8:3c:50:6b:9e:d0:cf:94:
49:b2:d7:01:ea:88:77:17:cd:ce:04:a2:e3:cf:e1:f3:2a:42:
07:6c:60:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org