Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/19C417987BEC11EF987F189A762E951A.roa
File: 19C417987BEC11EF987F189A762E951A.roa (raw, json)
Hash identifier: 6jsvvihf1WEyl8ajtlJK6aURxNOSN9rFAENlZxDec7w=
Subject key identifier: 05:C5:EC:45:74:82:C8:70:AB:B9:90:9A:1B:67:82:10:B4:61:58:A9
Certificate issuer: /CN=F36B35B7AF/serialNumber=E38937DE377A183822308BE399F0E16DD21E730D
Certificate serial: 17
Authority key identifier: E3:89:37:DE:37:7A:18:38:22:30:8B:E3:99:F0:E1:6D:D2:1E:73:0D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/44k33jd6GDgiMIvjmfDhbdIecw0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/19C417987BEC11EF987F189A762E951A.roa
Signing time: Thu 26 Sep 2024 09:45:45 +0000
ROA not before: Thu 26 Sep 2024 09:45:41 +0000
ROA not after: Sun 17 Nov 2030 09:45:41 +0000
asID: 329078
IP address blocks: 102.165.144.0/21 maxlen: 21
Validation: Failed, certificate revoked on Sat 19 Oct 2024 17:33:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B35B7AF/serialNumber=E38937DE377A183822308BE399F0E16DD21E730D
Validity
Not Before: Sep 26 09:45:41 2024 GMT
Not After : Nov 17 09:45:41 2030 GMT
Subject: CN=66f52d49-6e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:da:c0:8a:91:51:00:12:da:5a:73:07:3b:cc:
f7:15:fe:f8:2a:b5:b8:b6:52:ff:44:06:89:cd:3a:
d8:07:c5:48:2e:d0:d8:2c:84:92:74:fa:a5:b4:69:
db:10:6b:82:80:86:30:d2:38:9d:7b:42:23:d6:04:
78:b8:cf:64:e9:e3:99:60:19:ea:dd:bc:9f:e0:d5:
c7:7e:ca:e1:3d:4d:99:bf:7a:91:ed:a1:1e:bf:cc:
5d:a9:b9:85:ff:85:74:d6:f2:ed:61:47:e0:04:5a:
43:88:54:b0:16:62:5a:b1:d3:ac:b3:97:af:57:8f:
7f:0d:8c:72:93:81:a5:26:8e:f7:5b:6e:81:93:66:
6c:f2:89:9b:82:02:b6:c6:45:7e:2f:ba:9c:c8:1a:
86:85:9e:1b:10:df:e4:9e:3b:91:d2:c1:3b:30:4d:
8f:43:fb:fd:45:db:de:e2:70:eb:7f:e9:12:4d:f4:
78:2d:44:94:f6:a6:c0:a5:22:ad:47:56:f5:6e:6b:
aa:a2:e9:cc:48:f2:ab:8c:68:c7:86:a4:d2:10:0a:
5b:b4:5a:f8:62:a4:b3:02:72:97:35:63:b9:18:94:
c3:54:3d:84:25:c7:3e:bb:2d:07:53:2b:64:a0:b0:
5a:85:a9:36:cc:ba:5a:0a:7e:f2:6e:c7:9a:ae:df:
73:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C5:EC:45:74:82:C8:70:AB:B9:90:9A:1B:67:82:10:B4:61:58:A9
X509v3 Authority Key Identifier:
keyid:E3:89:37:DE:37:7A:18:38:22:30:8B:E3:99:F0:E1:6D:D2:1E:73:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/44k33jd6GDgiMIvjmfDhbdIecw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/44k33jd6GDgiMIvjmfDhbdIecw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/19C417987BEC11EF987F189A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.144.0/21
Signature Algorithm: sha256WithRSAEncryption
c5:f2:26:1f:af:5e:53:02:37:60:d5:73:d4:92:7c:ea:b4:24:
25:04:2a:20:d5:b3:1a:eb:f0:31:2c:53:35:c2:ad:1a:1b:16:
83:a6:e6:f4:8e:7e:53:62:dd:47:08:3e:c4:70:6e:e0:54:95:
ba:85:1e:bc:ee:f6:04:dc:10:37:2d:d3:bc:55:29:87:a1:13:
96:1a:59:d6:fe:94:fe:3a:b5:da:59:08:04:a0:2d:8e:e1:53:
dc:aa:2b:80:15:d2:9f:38:3a:d5:9a:d1:5e:28:cd:fb:0b:f3:
f1:ef:37:eb:e8:ed:ec:89:b5:2f:78:1e:28:32:3d:48:90:ae:
e7:a2:02:a6:64:e1:42:50:a4:21:28:6f:59:f1:f7:5f:11:f6:
83:74:40:e3:30:80:3b:af:d6:49:57:cc:a3:bc:2e:d7:12:15:
c8:cf:9a:e6:10:ed:e9:61:7c:19:a6:e3:97:38:07:e0:2b:4f:
c3:88:1e:42:5c:f4:79:2f:a1:0b:05:97:b8:bf:13:61:c8:f6:
3c:80:34:e9:68:28:e3:91:34:78:b3:66:d8:5b:1b:41:e9:c7:
74:55:f0:e1:c1:df:af:84:39:8c:38:7d:9f:e9:d3:fb:00:4c:
d4:be:65:d0:fa:23:df:ee:9a:63:99:43:65:79:74:ec:f1:96:
f0:10:41:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 19:33:34 2024 by rpki-client on console-fra.rpki-client.org