Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/08710608695611EEB9F468804AD9E6FC.roa
File: 08710608695611EEB9F468804AD9E6FC.roa (raw, json)
Hash identifier: dodbeivKgmOSYbXh7Lfg8iNVXB8a2gKTjdHwNnUu1Q4=
Subject key identifier: BF:F2:28:D0:38:6F:10:9F:79:D4:1B:41:B8:B6:EF:D6:6B:1A:87:94
Certificate issuer: /CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Certificate serial: 01F1
Authority key identifier: 53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/08710608695611EEB9F468804AD9E6FC.roa
Signing time: Thu 12 Oct 2023 23:21:13 +0000
ROA not before: Fri 13 Oct 2023 23:21:09 +0000
ROA not after: Sun 13 Oct 2030 23:21:09 +0000
asID: 25818
IP address blocks: 102.177.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Oct 2023 11:15:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 497 (0x1f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Validity
Not Before: Oct 13 23:21:09 2023 GMT
Not After : Oct 13 23:21:09 2030 GMT
Subject: CN=65287f68-1444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ff:c0:c4:1e:9f:ad:83:91:9c:c3:a3:77:b6:
bf:a6:5a:20:f0:57:e9:cc:3b:f4:a7:c3:71:25:14:
2c:6a:49:1a:6f:30:67:f4:17:d5:6f:28:fb:b7:ff:
d4:f8:8f:1d:6f:34:29:7e:1d:8d:76:5a:8f:12:5c:
55:23:c1:07:c8:e9:3f:48:92:11:34:71:dc:18:99:
7b:c1:c4:1f:81:54:cd:24:3f:55:2e:bd:e9:e6:e5:
4a:b2:29:22:e8:0c:b8:37:5c:7c:37:19:10:85:c4:
5a:60:20:c8:44:88:36:e4:d9:f2:21:2e:05:d3:96:
33:95:33:ba:18:3a:71:11:ad:69:4f:32:cf:8d:7e:
12:ee:6f:dd:88:98:cb:7c:19:a5:cb:cd:cc:ab:2d:
f7:36:5e:0b:4b:13:68:02:a6:33:1f:87:e4:78:06:
cb:25:2f:28:45:9d:18:39:5b:2f:cf:1c:8d:81:a6:
fa:ec:33:c8:dd:f4:67:5b:a9:fb:4a:c9:a8:b5:7c:
88:da:51:06:79:64:19:2b:c9:72:1b:97:bc:a6:4e:
01:02:d8:ed:d6:8a:6f:05:bc:65:82:55:79:7e:2d:
65:e9:19:5e:e0:dd:c7:4b:9e:23:c3:01:8d:5f:65:
4b:1e:f2:92:7f:85:00:b5:49:f6:de:0a:54:4c:9c:
80:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F2:28:D0:38:6F:10:9F:79:D4:1B:41:B8:B6:EF:D6:6B:1A:87:94
X509v3 Authority Key Identifier:
keyid:53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/08710608695611EEB9F468804AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.125.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:a1:bd:01:29:0b:27:9c:de:d8:d5:11:6f:40:94:23:a2:5a:
4e:63:f8:53:a1:b7:3e:ec:ee:0d:9b:0e:61:e4:5c:77:63:b9:
6e:a4:85:99:bb:18:44:38:94:19:08:32:df:00:59:ad:ce:4a:
65:20:44:7f:de:7c:09:e2:94:1d:ba:cd:ca:40:3b:47:13:52:
27:f6:2a:ce:9a:40:0b:ab:19:75:1a:52:c5:c2:9b:4c:3f:b9:
3f:98:d9:3a:9a:bc:4b:fa:fc:66:76:0f:5a:eb:92:6a:e4:b9:
70:27:45:8b:8f:f6:81:00:40:88:30:05:84:52:8f:47:85:b2:
c9:b8:3c:a3:72:b4:f8:4b:09:e0:06:60:49:1d:73:fe:63:49:
0f:0e:b8:00:71:ba:e3:81:b9:d9:3c:af:fc:15:54:61:66:ad:
64:1b:57:3b:6d:4c:03:3a:cf:03:fc:3e:c1:d8:fd:18:c2:d9:
e2:43:db:6d:5b:d2:49:89:62:c5:08:dd:9d:5f:35:74:bc:d6:
9a:a8:23:69:54:da:87:11:0b:c1:5a:f1:49:dd:31:1c:cb:a1:
bc:57:40:d1:a5:62:e6:3c:81:38:c9:cf:7d:82:27:c5:a4:20:
3f:1b:df:ca:45:50:a2:cb:5f:43:0e:20:e5:55:a1:a8:08:90:
92:b0:39:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org