Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/00F6F49E547211EE90472C814AD9E6FC.roa
File: 00F6F49E547211EE90472C814AD9E6FC.roa (raw, json)
Hash identifier: 0Yf0Oyid9KlrKEdNvgNq5CfFKg8WS6+YoI5oKoQ+a5s=
Subject key identifier: E7:56:69:CC:D1:2B:AA:90:CB:48:03:A5:AF:7D:20:9C:FE:E9:52:D0
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0D66
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/00F6F49E547211EE90472C814AD9E6FC.roa
Signing time: Sat 16 Sep 2023 09:18:31 +0000
ROA not before: Sat 16 Sep 2023 09:18:28 +0000
ROA not after: Mon 16 Sep 2024 09:18:28 +0000
asID: 834
IP address blocks: 102.165.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3430 (0xd66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 16 09:18:28 2023 GMT
Not After : Sep 16 09:18:28 2024 GMT
Subject: CN=650572e7-bdf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:04:e4:92:ba:bf:de:25:ac:a4:93:0c:8f:
10:89:40:79:2b:83:29:85:76:58:b9:d5:5b:a0:18:
7d:48:34:be:c9:0a:9b:89:20:76:f4:24:b0:ed:04:
59:24:95:d0:07:be:ac:ee:73:14:27:2d:51:6f:d0:
b5:41:e2:40:e5:70:df:c0:d1:b5:8c:b4:55:33:5e:
85:16:05:04:ec:c0:26:10:e7:72:cf:70:a9:50:58:
90:cf:cd:24:8a:85:6e:b5:c7:13:61:81:29:6a:b8:
07:0e:e7:a4:ef:68:7a:0e:2c:b8:14:5b:38:9a:d3:
50:d3:57:ec:0b:95:84:22:84:6f:ea:90:68:83:06:
3f:66:ea:41:40:d6:e7:7b:30:73:cf:da:10:1a:8a:
f9:61:5f:de:5a:a1:7e:b7:03:3a:65:68:6d:21:b8:
78:89:aa:82:03:5a:5b:ae:4b:1c:8d:78:b2:6f:4c:
ca:1a:51:27:85:24:94:07:f8:3e:0b:da:8e:ea:af:
ed:35:3f:c2:58:48:f6:9f:10:ce:3f:7e:cf:fd:a1:
a6:e9:36:1d:56:84:8d:3a:a1:06:f1:08:96:36:9a:
e1:16:33:7c:b1:63:57:b0:52:91:12:7f:07:dc:8b:
71:58:75:94:23:30:d4:45:df:c6:92:f7:e3:92:a8:
48:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:56:69:CC:D1:2B:AA:90:CB:48:03:A5:AF:7D:20:9C:FE:E9:52:D0
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/00F6F49E547211EE90472C814AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.59.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:58:22:24:4b:d2:6b:a5:63:f7:d5:88:c9:13:79:34:b4:d8:
cc:a8:b9:5f:92:44:41:7b:f7:a7:c0:68:da:57:99:7f:d8:59:
8e:1e:6e:12:39:d2:f0:6c:e6:6b:76:77:df:fd:88:a7:9e:dc:
f1:b2:76:10:53:4e:2c:80:dc:26:a6:c3:3d:69:ed:10:b8:ed:
0e:d1:4e:4c:7a:51:25:67:c3:63:97:00:72:ca:41:bc:6b:48:
f6:e9:4e:23:4c:98:80:65:70:f7:1c:b3:2f:56:e8:77:fc:f7:
74:76:a7:4a:71:53:1e:b4:e4:7b:22:51:94:39:7f:91:33:9a:
22:16:c2:31:ef:72:04:83:82:79:b8:52:0a:90:e9:ba:18:02:
61:5c:e3:f5:cb:19:a9:c9:a1:c1:2b:b8:70:78:73:a8:a1:90:
3d:7a:2f:47:e0:14:8c:70:2a:d2:f0:e0:c8:5c:76:05:5c:02:
3f:b3:bb:2c:0b:ed:5a:b3:25:e2:63:24:c4:48:f9:be:b9:a6:
e5:ec:a4:55:aa:79:20:52:b7:17:c6:9b:9a:28:98:bd:42:68:
03:22:c4:1a:73:fd:90:b5:50:dd:59:90:42:34:92:4e:07:01:
1c:99:aa:53:61:cc:40:55:cf:b7:eb:80:35:8a:9f:da:d7:63:
d4:26:90:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 29 09:07:29 2023 by rpki-client on console-fra.rpki-client.org