Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0255E474368311EE866242754AD9E6FC.roa
File: 0255E474368311EE866242754AD9E6FC.roa (raw, json)
Hash identifier: 2X17X4wRyFR9SQ62ksxOFm1hpj1UF3MXz/OM3MRFC9U=
Subject key identifier: CD:91:8F:5A:E9:5B:A4:7A:D0:0F:78:56:3F:10:92:EC:49:FA:7D:20
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0CBC
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0255E474368311EE866242754AD9E6FC.roa
Signing time: Wed 09 Aug 2023 07:04:40 +0000
ROA not before: Wed 09 Aug 2023 07:04:35 +0000
ROA not after: Wed 14 Aug 2024 07:04:35 +0000
asID: 834
IP address blocks: 102.165.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Sep 2023 15:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3260 (0xcbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 9 07:04:35 2023 GMT
Not After : Aug 14 07:04:35 2024 GMT
Subject: CN=64d33a88-a953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:47:6a:cd:d8:30:e4:6c:3d:d7:ef:9d:e1:f6:
0a:b0:49:2f:b3:56:b4:e7:2a:b6:5f:81:62:fa:85:
b1:98:1a:1e:f4:66:fa:b6:1d:5a:d7:de:09:de:c3:
0b:d0:29:a2:45:47:36:ff:44:a8:3e:5f:c5:76:30:
97:71:cc:29:f9:c5:e9:c2:f2:0b:d5:51:6d:ba:3d:
4b:76:b2:55:c3:27:97:35:30:26:94:34:23:c4:4e:
bb:26:8e:ca:07:57:b7:dd:4a:ef:33:7d:9c:58:87:
83:9f:7a:af:61:08:b1:d4:70:73:e4:85:d5:8c:af:
87:b3:8d:26:6f:8e:6b:a9:56:d7:d8:01:38:19:73:
dc:74:e7:8c:14:ef:52:d9:ae:d3:1b:3d:5e:c0:09:
19:65:21:88:78:ac:2d:08:d1:f3:cf:45:e9:e5:bc:
fa:ab:46:13:04:62:14:96:71:50:9f:1a:e3:75:17:
e6:e1:0a:d1:d2:10:c8:86:22:63:84:bd:c7:c8:35:
b9:81:51:4d:53:36:96:a9:fa:52:47:74:d4:a5:a7:
3e:af:9a:58:f4:e4:24:e7:1c:a9:d7:4d:84:9b:12:
98:69:a0:95:ee:83:09:91:73:d6:a7:b2:1f:d3:8d:
24:ab:3a:3e:39:c9:26:e2:c9:62:50:79:88:aa:78:
9b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:91:8F:5A:E9:5B:A4:7A:D0:0F:78:56:3F:10:92:EC:49:FA:7D:20
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0255E474368311EE866242754AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.40.0/24
Signature Algorithm: sha256WithRSAEncryption
54:10:20:9e:c3:95:d0:66:06:d9:b6:5c:2d:e6:29:07:97:b9:
1c:23:71:d9:a1:00:20:fb:c2:80:34:67:68:6a:40:14:02:98:
e4:78:34:76:6d:1e:73:1e:39:8c:b2:31:6e:50:87:09:fe:14:
0d:65:6b:18:3b:f2:3c:73:cf:8a:73:e2:ca:97:e7:b3:40:4f:
e4:8e:34:88:63:e5:62:1e:06:2d:f0:33:cb:c2:c0:07:0b:8e:
4c:82:11:6c:e8:19:1c:bc:95:04:f6:e7:e9:cd:52:da:f1:71:
3f:d8:20:d2:f7:ed:31:86:1e:8d:34:ae:8f:93:45:68:e7:78:
66:f3:36:70:28:5a:e4:8a:7b:29:04:e2:76:19:50:a6:68:9a:
ce:63:1b:18:2e:dc:38:df:9b:a2:99:c0:15:8b:34:1a:f4:8c:
5d:b8:3f:71:94:ff:56:b9:3d:90:d2:1d:11:d2:32:3b:df:4e:
7e:2c:bf:bd:eb:74:28:2e:24:d9:b5:25:9e:94:a8:0c:cd:06:
47:15:7e:1b:75:dc:1c:40:67:8f:23:19:8e:48:bd:3f:f4:cf:
df:81:dc:f1:fa:cb:48:79:84:77:f7:a1:4c:50:9f:98:c5:9f:
29:4e:01:e9:6e:0f:15:b0:73:a9:91:1c:37:ba:32:6f:0c:f8:
29:63:a3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org