Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2CB0A9BC1F4811EF91E60E137DDC24C2.roa
File: 2CB0A9BC1F4811EF91E60E137DDC24C2.roa (raw, json)
Hash identifier: EaOXQZGHZij8JIw2wZou4DOLvUEQvRhfx/guWEEoW7c=
Subject key identifier: D6:8B:C4:F2:15:90:87:84:6B:C1:16:BA:AA:6F:1C:51:43:A7:46:A1
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 10A4
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2CB0A9BC1F4811EF91E60E137DDC24C2.roa
Signing time: Fri 31 May 2024 12:20:32 +0000
ROA not before: Fri 31 May 2024 12:20:29 +0000
ROA not after: Sun 31 May 2026 12:20:29 +0000
asID: 46562
IP address blocks: 102.165.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Jun 2024 08:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4260 (0x10a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 31 12:20:29 2024 GMT
Not After : May 31 12:20:29 2026 GMT
Subject: CN=6659c090-07c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:28:38:de:9f:3e:b9:ef:5e:d5:73:2a:b7:30:
7b:e8:5b:2e:dd:39:67:12:cd:a5:07:1d:de:2c:18:
43:e4:30:11:d3:94:95:76:ec:52:3c:88:87:7a:cc:
f3:8b:77:8f:35:51:ec:8d:a5:93:6d:78:af:b8:73:
ef:57:36:1a:4d:43:dd:2e:e1:9d:8d:5e:b7:3c:ed:
d0:c7:2b:9f:3d:cc:4d:3e:31:3f:e3:f1:5a:57:d0:
54:c0:87:14:3d:82:3a:c5:97:91:05:da:93:b1:8b:
16:95:69:26:3d:a1:34:94:01:a6:14:1a:ff:18:a2:
40:4a:e3:b2:bb:d0:df:9a:b3:61:f2:89:6e:03:42:
17:43:0f:a7:d5:c5:77:5d:38:16:3c:88:1d:27:b8:
ae:d1:74:09:60:65:5b:ec:3b:b0:22:cd:86:af:bc:
32:ee:b0:83:9d:e3:75:25:a8:b3:b7:fa:c9:62:ab:
21:e8:d2:42:f5:87:c0:e2:ee:94:f7:3e:1c:d9:39:
e3:0e:5c:1d:96:73:92:b2:24:0a:89:f0:6b:e2:cc:
d0:fc:51:72:33:e8:dd:e2:45:ea:c5:c3:f3:fa:73:
61:a4:6f:b3:81:36:51:03:50:2b:99:b3:38:9d:26:
d2:e1:05:21:78:97:c4:5d:67:08:ac:45:77:6c:85:
25:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8B:C4:F2:15:90:87:84:6B:C1:16:BA:AA:6F:1C:51:43:A7:46:A1
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2CB0A9BC1F4811EF91E60E137DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.42.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:62:4d:ba:b4:02:67:73:96:4f:d9:37:a1:7a:4d:dd:53:8a:
fd:e3:55:cc:b4:0c:16:80:6c:b5:f7:56:cd:85:a2:ae:44:60:
0c:48:4b:f6:48:c6:c4:ae:24:c0:1c:86:b7:00:55:21:ac:d0:
c1:38:81:fe:06:7c:45:87:1e:d7:1e:0b:29:72:93:d9:21:1e:
5e:67:e9:ee:c8:e2:a7:78:76:0e:70:1a:f0:44:aa:1f:c4:ea:
ac:21:e7:69:81:98:3e:4a:77:a7:98:fa:92:0a:37:53:92:bd:
c2:a9:bf:2d:73:2d:3f:d6:74:d1:13:50:03:84:b3:d3:94:e9:
1a:40:3b:b9:05:6b:0c:f7:2f:3f:7d:3d:e1:78:c7:71:16:b3:
ad:01:11:4c:15:9d:18:53:08:3a:bf:74:a3:fb:aa:2d:ef:79:
de:cf:2c:7b:5d:be:ec:f3:ba:37:99:a7:cf:85:40:e3:a6:da:
0a:a5:56:85:23:1c:d2:62:6d:71:50:23:d6:0d:91:86:a8:8d:
e6:0f:c2:f8:e6:5f:d7:db:b5:38:ed:fd:10:b6:47:1b:de:7b:
dc:52:36:0e:c6:87:53:b6:76:be:e3:f5:0a:a7:a9:53:56:8a:
45:64:d4:9e:fc:ff:ef:72:36:53:f3:ee:8b:1e:d2:ce:b4:0f:
6e:fb:ca:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 11:35:03 2024 by rpki-client on console-fra.rpki-client.org