Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/2910B83E73F711EF86C2C387762E951A.roa
File: 2910B83E73F711EF86C2C387762E951A.roa (raw, json)
Hash identifier: Gi83aE+hx1xwqviF1jNQJbcjyUf/oIEMhVPlmBDbD88=
Subject key identifier: E2:FD:9E:E8:20:F6:2B:F4:4F:02:33:04:0C:AB:42:D3:58:DE:80:AD
Certificate issuer: /CN=F36B35B7AF/serialNumber=E38937DE377A183822308BE399F0E16DD21E730D
Certificate serial: 06
Authority key identifier: E3:89:37:DE:37:7A:18:38:22:30:8B:E3:99:F0:E1:6D:D2:1E:73:0D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/44k33jd6GDgiMIvjmfDhbdIecw0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/2910B83E73F711EF86C2C387762E951A.roa
Signing time: Mon 16 Sep 2024 06:44:45 +0000
ROA not before: Mon 16 Sep 2024 06:44:42 +0000
ROA not after: Sun 17 Nov 2030 06:44:42 +0000
asID: 329078
IP address blocks: 102.165.144.0/20 maxlen: 20
Validation: Failed, certificate revoked on Sat 19 Oct 2024 17:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B35B7AF/serialNumber=E38937DE377A183822308BE399F0E16DD21E730D
Validity
Not Before: Sep 16 06:44:42 2024 GMT
Not After : Nov 17 06:44:42 2030 GMT
Subject: CN=66e7d3dd-9bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:de:eb:62:5a:d8:00:53:66:a2:ba:9b:2d:a3:
a4:3b:63:3b:22:d1:51:76:bc:fa:9e:c9:d0:d0:8d:
e9:47:63:36:3a:57:e5:e5:91:fe:a6:fd:88:06:5f:
45:4d:14:27:43:9e:4b:11:88:6f:d6:6b:4f:2a:02:
a6:15:98:b4:b0:ab:d9:f1:90:d4:66:f0:7c:29:ec:
18:8a:10:c3:ef:68:7c:0c:0d:e5:7a:82:fd:8e:b1:
92:3d:12:df:7f:73:21:7e:ff:0f:a2:a6:c3:f7:91:
36:80:71:71:8e:2c:cb:a0:f6:d0:0e:f0:e6:cd:d5:
1b:43:2d:a9:05:6e:2c:9a:53:b2:d0:5a:4f:20:d2:
2b:11:d2:b9:83:1e:58:fa:25:3b:44:ec:44:a6:ad:
18:7e:4f:7a:dc:e2:5e:e2:e0:11:bf:f6:17:52:fb:
1a:cf:43:4e:73:35:f5:76:2b:2f:b7:e1:56:34:5d:
bf:c5:64:a1:df:72:41:d9:5b:fa:a0:68:f4:9d:dd:
03:d4:0f:25:30:1c:98:9c:c6:09:ac:a4:c0:4a:cb:
c1:97:fe:7d:42:2a:45:5a:00:ef:cf:72:c2:08:8d:
ae:27:a8:9c:ae:36:8e:84:23:56:9c:d2:e1:45:00:
4f:16:fd:1c:96:a5:9b:a7:32:7e:10:e9:5a:e2:8f:
9a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FD:9E:E8:20:F6:2B:F4:4F:02:33:04:0C:AB:42:D3:58:DE:80:AD
X509v3 Authority Key Identifier:
keyid:E3:89:37:DE:37:7A:18:38:22:30:8B:E3:99:F0:E1:6D:D2:1E:73:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/44k33jd6GDgiMIvjmfDhbdIecw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/44k33jd6GDgiMIvjmfDhbdIecw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/2910B83E73F711EF86C2C387762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.144.0/20
Signature Algorithm: sha256WithRSAEncryption
2e:8a:90:49:3b:f1:b2:d1:85:b3:32:fd:4f:67:12:fa:8c:32:
03:7b:6c:4b:06:3b:f5:11:36:7c:39:2b:25:69:b6:b9:ae:3a:
d8:0c:2e:47:8d:21:51:8f:8b:7a:28:bd:42:32:ca:fb:1e:27:
e9:54:38:f1:12:0b:35:34:58:4e:6a:52:2d:a6:4e:ae:01:1c:
30:a1:37:c2:31:34:a3:f5:07:fa:2d:7b:71:56:4b:ea:c1:79:
9c:16:f7:d5:99:12:ef:bb:ce:bf:b6:c8:f4:07:d4:06:74:fa:
4d:cf:14:88:3d:bc:80:2e:d8:ef:ac:d6:54:32:14:a7:d6:01:
b5:d5:96:11:c6:7e:f0:11:8d:a0:3a:fd:d6:37:93:c2:34:8b:
42:0b:16:1f:1d:22:09:21:5d:0d:b1:a1:35:f7:0c:a3:5a:55:
c2:a9:f3:a3:a2:93:68:bd:0f:0e:9b:d5:11:15:61:ed:85:54:
2d:b6:bf:eb:47:9e:d9:2b:d9:5c:13:1e:99:64:61:70:ba:3c:
b8:dc:b3:27:57:ed:40:e1:2e:53:23:a4:95:2b:52:4d:1f:28:
9f:26:c8:d5:a7:db:65:17:58:09:6f:bc:67:38:89:06:47:ff:
0d:dd:9e:ac:1f:8a:ca:b9:54:ba:0d:14:84:0a:39:2a:89:d0:
50:ae:01:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 20:19:22 2024 by rpki-client on console-ams.rpki-client.org