Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/20B96C4AA3A511ED8962FDF2F1222468.roa
File: 20B96C4AA3A511ED8962FDF2F1222468.roa (raw, json)
Hash identifier: 7MAbZY1fhZ1NRl3dICp5Lvasmv8VCDZ+O3GJdKmNGr8=
Subject key identifier: 7D:E2:07:34:E8:B3:5F:93:D1:A1:78:08:EE:46:5E:65:31:53:2E:5D
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A01
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/20B96C4AA3A511ED8962FDF2F1222468.roa
Signing time: Fri 03 Feb 2023 09:28:33 +0000
ROA not before: Fri 03 Feb 2023 09:28:29 +0000
ROA not after: Mon 03 Feb 2025 09:28:29 +0000
asID: 49999
IP address blocks: 102.165.44.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2561 (0xa01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 3 09:28:29 2023 GMT
Not After : Feb 3 09:28:29 2025 GMT
Subject: CN=63dcd3c1-67ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e4:48:f9:4b:3c:c2:5b:01:73:38:1a:a1:08:
30:23:91:2f:4e:11:29:5e:a5:c1:cd:8b:12:86:7f:
ee:03:b0:0e:3a:9e:fe:05:78:38:24:c3:2a:0a:5d:
f1:9d:9e:13:7a:9c:92:1e:b6:d7:8c:23:4f:3a:e1:
a9:e7:66:47:f5:ed:1a:87:5b:c4:82:5b:5a:87:e5:
8b:d7:fa:51:9f:76:f5:44:38:ee:e1:06:f6:5c:fc:
b5:aa:6b:c7:e3:98:49:be:2c:74:bb:ca:14:51:bc:
65:c6:f4:c7:b6:22:f0:89:6a:c5:c7:39:9d:aa:97:
9f:44:84:39:07:4f:f9:db:64:2c:24:94:a4:21:a6:
c0:7b:7d:41:4a:d5:75:6b:c6:a4:59:0b:2b:0b:2b:
ff:3d:63:cf:96:ae:7f:e4:3c:d3:f4:8a:46:eb:ef:
26:ad:ea:b4:3f:4b:da:7e:c4:69:f2:07:12:9f:71:
6c:9a:08:b2:4f:45:20:0e:33:ea:0c:44:f8:ca:68:
57:91:e6:3a:be:bd:82:7d:c3:01:21:84:64:03:85:
69:0d:1d:a1:43:23:d4:a6:0c:82:8a:90:3e:f2:1b:
fd:46:82:0a:cd:63:ca:54:e9:e6:83:a4:d2:a9:43:
9f:74:78:67:e6:e3:a1:0d:92:cb:54:e2:b3:5a:e4:
4f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E2:07:34:E8:B3:5F:93:D1:A1:78:08:EE:46:5E:65:31:53:2E:5D
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/20B96C4AA3A511ED8962FDF2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.44.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:68:79:78:d8:6e:00:18:1f:33:1d:f5:28:82:ee:4a:c5:39:
23:73:89:96:8a:0e:e8:48:7d:b4:04:31:c3:15:44:6a:e4:5b:
5c:ad:5e:fb:60:b4:28:e1:88:42:6f:11:1a:37:58:49:06:dd:
61:11:d2:6c:de:e8:ff:d7:ea:49:31:83:c6:af:56:2d:75:94:
9c:f3:51:1e:bd:1d:72:16:0d:e1:e2:55:88:f1:cf:b3:fd:cd:
1f:59:78:f9:5a:eb:8d:fa:eb:46:3c:ef:76:17:b6:4b:ac:cd:
79:e6:59:91:a9:92:ff:e8:c2:fb:4d:ab:be:74:44:86:03:0a:
bb:b8:5d:35:f2:9f:cb:58:80:24:28:dd:21:6c:60:52:2c:16:
65:55:46:6b:38:59:55:87:61:84:93:06:f5:f2:9a:00:b6:fd:
09:1c:31:cf:87:0b:7c:0e:a7:11:7d:24:8a:cc:a1:f2:aa:f1:
2f:7e:a4:b8:fa:99:cf:15:e7:eb:a4:67:72:47:0e:e3:9e:32:
42:72:b9:8a:1f:0f:c5:f6:5c:c8:a0:34:59:0d:2d:28:f8:b0:
9a:9f:41:59:da:50:11:1d:20:15:b0:8d:1a:8a:02:50:b0:c2:
59:21:37:8b:4f:fd:14:61:0c:64:e0:9f:5f:77:c9:32:12:7d:
7b:eb:f6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org