Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/5C36EE628F8C11EFA4C8364D762E951A.roa
File: 5C36EE628F8C11EFA4C8364D762E951A.roa (raw, json)
Hash identifier: csWAMVv5HWVSJezzrHUnN52M69vKTj4d/hDPjnboh1s=
Subject key identifier: 92:FF:ED:2F:99:66:E0:B0:53:D6:40:98:CF:01:D3:7D:EA:4E:AA:56
Certificate issuer: /CN=F36B35B7AF/serialNumber=E38937DE377A183822308BE399F0E16DD21E730D
Certificate serial: 3A
Authority key identifier: E3:89:37:DE:37:7A:18:38:22:30:8B:E3:99:F0:E1:6D:D2:1E:73:0D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/44k33jd6GDgiMIvjmfDhbdIecw0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/5C36EE628F8C11EFA4C8364D762E951A.roa
Signing time: Mon 21 Oct 2024 09:10:48 +0000
ROA not before: Mon 21 Oct 2024 09:10:44 +0000
ROA not after: Sat 21 Oct 2034 09:10:44 +0000
asID: 263692
IP address blocks: 102.165.152.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 10:55:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B35B7AF/serialNumber=E38937DE377A183822308BE399F0E16DD21E730D
Validity
Not Before: Oct 21 09:10:44 2024 GMT
Not After : Oct 21 09:10:44 2034 GMT
Subject: CN=67161a98-1f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8d:fb:1c:2e:4e:47:b5:22:bb:e2:1d:1b:bb:
34:f5:71:2c:2e:af:cd:32:2f:b2:f9:12:a0:55:61:
9f:88:17:10:00:65:8d:db:bc:1c:fe:79:d0:a9:2f:
01:e2:c9:a7:75:73:f1:1e:fe:f5:fd:b2:be:33:42:
e8:8a:bf:a2:31:06:dc:e2:0c:ab:03:8d:fe:2f:6c:
8f:44:95:d3:e5:73:74:39:72:ac:42:bb:65:1a:27:
5b:9d:d2:76:07:fe:c4:58:3c:f9:ae:62:a7:b1:62:
d7:a5:bf:5e:a5:84:a1:9b:30:62:9d:7a:3c:80:2d:
3a:33:d7:cf:b9:a8:9c:e8:1f:65:aa:71:71:ee:ea:
e6:d7:4b:0f:c2:42:67:47:f7:f0:51:fe:80:92:44:
6e:eb:63:e2:3e:03:12:85:bd:b5:20:10:b6:e6:0a:
45:e7:11:71:70:05:b8:5c:01:1e:9c:0b:bc:58:96:
44:fb:ad:84:71:1f:c2:03:4f:fb:ee:66:9d:f6:fe:
b2:a7:a4:6d:42:63:9a:58:44:7c:fc:6f:3d:97:79:
b4:cc:35:52:e1:c9:a5:57:0a:81:f7:dc:46:2e:67:
fd:7f:97:3f:21:22:c4:32:07:f0:67:07:74:78:3c:
da:ea:1d:a2:bb:2a:18:9b:fc:8d:34:8b:9a:10:ce:
32:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FF:ED:2F:99:66:E0:B0:53:D6:40:98:CF:01:D3:7D:EA:4E:AA:56
X509v3 Authority Key Identifier:
keyid:E3:89:37:DE:37:7A:18:38:22:30:8B:E3:99:F0:E1:6D:D2:1E:73:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/44k33jd6GDgiMIvjmfDhbdIecw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/44k33jd6GDgiMIvjmfDhbdIecw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/5C36EE628F8C11EFA4C8364D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.152.0/21
Signature Algorithm: sha256WithRSAEncryption
7c:dc:6e:74:98:87:40:71:37:ca:98:cd:57:da:1f:a0:5c:da:
6f:7c:4b:c7:70:6e:22:52:44:55:b5:d4:91:af:75:02:16:63:
e0:28:48:e5:26:ff:ee:95:7a:8d:47:e3:0b:a3:13:1c:00:5d:
e2:f3:9c:eb:d3:2e:b4:a3:5f:31:d0:c2:b7:6a:75:7b:d3:af:
a5:fe:14:e1:b0:e4:7c:a1:3b:de:92:d0:c2:10:c7:5d:46:2b:
0c:83:f4:b3:0e:a9:12:8a:67:6a:c6:cc:e3:7b:c5:43:33:47:
bb:f9:8d:fa:2a:48:26:c5:91:03:5c:5b:d1:6e:75:38:70:48:
69:ae:4d:fd:56:5c:03:f0:28:42:04:14:d3:30:14:3a:1e:66:
3d:65:b1:1b:b7:46:90:bf:11:51:33:fa:73:63:fa:f2:f4:ad:
56:1d:dd:b5:40:70:5a:e7:66:26:88:d4:ea:e4:42:82:6d:20:
b4:22:85:87:9a:03:f0:75:99:20:cc:97:c4:32:17:10:ee:16:
5a:35:eb:01:a0:aa:11:58:ce:a8:da:62:5d:64:4e:81:0a:9f:
e3:4e:4f:80:13:b6:12:73:6f:d3:fc:a4:d3:70:0f:13:8a:60:
6b:88:b4:4d:c1:fd:4f:6a:00:2f:e2:b3:ce:08:7e:e9:7d:30:
2e:05:22:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 13:52:11 2024 by rpki-client on console-fra.rpki-client.org