Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/495B593C695311EEB5F7D7774AD9E6FC.roa
File: 495B593C695311EEB5F7D7774AD9E6FC.roa (raw, json)
Hash identifier: fw3Ni2dTnea2BU4R/e1Tf2oKPyhkbPokYNho5kS92Ew=
Subject key identifier: 11:01:A5:A1:82:C2:48:DB:9E:07:CA:1B:20:83:7B:CC:65:D1:D2:EF
Certificate issuer: /CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Certificate serial: 01DB
Authority key identifier: 53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/495B593C695311EEB5F7D7774AD9E6FC.roa
Signing time: Thu 12 Oct 2023 23:01:33 +0000
ROA not before: Fri 13 Oct 2023 23:01:29 +0000
ROA not after: Sun 13 Oct 2030 23:01:29 +0000
asID: 25818
IP address blocks: 102.177.112.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 30 Jan 2024 23:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475 (0x1db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Validity
Not Before: Oct 13 23:01:29 2023 GMT
Not After : Oct 13 23:01:29 2030 GMT
Subject: CN=65287acd-58e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a6:3f:10:a3:3e:98:f5:f6:d3:55:c7:29:ba:
e9:20:7a:9f:5e:48:2d:c6:67:46:18:21:7e:87:c4:
16:e9:4a:74:c5:f9:db:3a:45:fc:6a:7f:37:5f:0c:
e6:3a:6e:22:e8:ad:31:0a:38:87:64:67:6a:0d:de:
57:a8:58:4b:2d:50:1e:3b:9d:53:ca:bd:b1:5c:dc:
6e:e8:e4:51:2f:ea:c5:ef:9c:c7:1e:d4:1e:12:86:
c2:96:ac:7a:98:9b:1c:04:5c:87:2e:9e:ec:6f:70:
90:54:5a:98:78:9d:dd:6e:6c:c8:9a:ef:24:4c:7f:
2f:76:32:c3:8b:8e:b2:db:00:55:d8:d9:57:60:0d:
26:8b:a3:7f:96:1d:67:43:fb:7b:00:4c:89:02:9d:
a3:7d:ab:8a:77:69:3a:b8:aa:83:ad:38:8b:2e:84:
29:ce:b6:2e:27:39:96:12:e9:2d:01:f2:33:04:65:
06:2b:62:96:75:4f:6b:2d:fc:16:04:fc:90:ab:92:
27:0c:75:75:15:d3:07:f3:56:02:57:09:59:d4:8c:
5b:ca:53:a4:e2:c9:13:0a:74:fc:b2:c8:12:e5:fd:
de:ff:42:7a:06:2b:29:9f:90:75:5e:ed:fd:6e:ec:
df:55:2a:07:91:12:20:1e:c9:ad:69:ae:76:b8:22:
cf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:01:A5:A1:82:C2:48:DB:9E:07:CA:1B:20:83:7B:CC:65:D1:D2:EF
X509v3 Authority Key Identifier:
keyid:53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/495B593C695311EEB5F7D7774AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.112.0/20
Signature Algorithm: sha256WithRSAEncryption
85:42:be:57:59:2e:0c:2c:6e:52:90:f1:2f:87:49:f1:a7:1b:
5d:2a:d5:a0:3b:f8:bf:37:25:f3:e3:cd:43:d6:fe:f8:87:d4:
18:ab:f8:73:c8:64:62:d9:a9:25:24:c8:23:0b:a6:3a:aa:07:
aa:d6:54:da:50:77:47:86:e0:71:1d:d0:b8:03:a9:0d:5d:3b:
41:13:f1:77:07:4b:9b:27:9b:58:7d:31:67:0c:87:ad:d5:05:
ff:c1:1c:9b:37:fe:19:ef:a6:93:da:0a:b4:59:9c:e7:ab:a3:
44:1c:22:b9:c1:fb:27:24:0e:92:5c:74:8a:d4:d8:24:29:4b:
72:85:a1:6f:41:74:be:8f:26:07:2a:4b:ed:7e:2c:4a:69:d9:
56:09:ea:dd:85:d3:59:ff:76:43:20:7e:6b:70:3d:16:6f:aa:
c3:1e:c2:98:d5:71:84:0e:64:b4:3b:8e:78:78:92:5d:f8:8a:
4e:ea:ab:6c:0b:53:a4:52:b7:fa:ee:e7:ae:f2:0d:69:45:6d:
d5:45:7f:19:36:0e:47:78:23:23:72:f8:5b:71:24:e9:8c:ad:
03:10:c5:e5:2c:bb:67:91:10:48:0d:0c:1e:c9:0d:13:74:36:
88:46:f6:5f:56:b3:11:20:21:23:ea:05:45:9f:f6:df:a2:9e:
25:ba:08:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org