Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2DA2D8708C8211EF872A919D762E951A.roa
File: 2DA2D8708C8211EF872A919D762E951A.roa (raw, json)
Hash identifier: HtInYT+S0pBGlMLsTdNk6Z7UhqnIIgyeX1/JXA7/LE8=
Subject key identifier: C5:56:64:C5:C3:1B:83:1B:AD:74:DD:B4:83:47:F3:ED:ED:95:79:45
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 124F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2DA2D8708C8211EF872A919D762E951A.roa
Signing time: Thu 17 Oct 2024 12:20:21 +0000
ROA not before: Thu 17 Oct 2024 12:20:18 +0000
ROA not after: Sat 17 Oct 2026 12:20:18 +0000
asID: 834
IP address blocks: 102.165.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 08:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4687 (0x124f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 17 12:20:18 2024 GMT
Not After : Oct 17 12:20:18 2026 GMT
Subject: CN=67110105-6a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3a:05:39:f6:22:7b:b9:79:9f:13:8c:f9:dd:
60:cf:9b:f9:14:4b:67:b0:a9:bd:d7:cc:e7:82:6b:
e8:80:92:68:06:bc:11:10:22:14:da:6d:1c:a8:32:
b3:bd:c3:5a:1c:a6:52:ad:9c:86:53:38:1c:8e:5b:
37:0f:93:36:d3:e9:b2:2c:70:5a:3c:7c:60:1f:f7:
a9:c2:b3:8f:1c:2a:5f:d6:95:6a:f1:0e:63:a4:d9:
fc:0c:d6:cd:63:85:cc:15:17:65:cc:66:f3:d7:0c:
53:7f:18:03:f2:89:18:a2:b5:4c:18:d3:b6:01:38:
2e:82:6f:82:fb:02:5e:19:f7:5c:9d:7f:c0:0f:3d:
ca:1d:ac:d1:d8:81:72:53:36:cf:b4:18:9c:41:0c:
c4:bc:43:2c:ec:30:e0:37:fc:db:66:16:e7:08:04:
7d:f0:41:4f:c8:d2:5c:44:f9:5e:af:2c:fc:c3:94:
ed:04:bf:9b:44:7c:7e:aa:63:8e:24:86:6b:eb:b7:
7f:1c:82:a6:b9:d4:d4:0b:3e:45:e7:58:9b:ea:f6:
17:cd:f2:b4:27:8a:0c:ac:a5:37:1c:37:c6:45:ff:
fc:9a:5f:7d:58:75:c0:97:d1:f2:a0:ba:0d:68:c6:
d8:4a:21:80:5a:c8:fe:03:22:eb:ef:92:f3:ad:37:
32:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:56:64:C5:C3:1B:83:1B:AD:74:DD:B4:83:47:F3:ED:ED:95:79:45
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2DA2D8708C8211EF872A919D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.59.0/24
Signature Algorithm: sha256WithRSAEncryption
46:fb:36:08:91:16:0b:0b:56:ca:6f:71:e2:9f:3d:3f:4d:96:
51:da:e3:9b:41:6b:df:f6:8a:69:d1:eb:60:5c:0e:c7:84:b1:
64:46:01:dd:73:98:4e:15:4a:3d:51:18:d0:69:c3:ee:61:07:
06:ee:31:9e:0f:45:ba:ea:b4:4f:7f:f9:a4:e2:02:59:22:43:
be:35:7b:54:fc:e4:6a:78:b4:d2:db:5a:51:85:10:61:42:d0:
9f:d7:80:03:21:62:a0:d0:27:c5:71:8c:9e:b4:bd:e4:e0:f6:
f6:2a:67:48:95:14:a7:85:01:86:ac:3b:17:76:c6:4f:2d:bb:
a5:44:f7:8d:f2:86:29:7e:d7:27:e7:fb:00:d9:75:f4:4a:6a:
54:05:ac:9f:39:d7:52:91:6b:2d:03:19:76:73:c0:27:b1:2e:
f8:5d:36:a3:f4:7d:db:f9:f4:9b:d0:dd:83:a5:49:0b:2f:24:
91:ed:d7:5a:3d:d9:03:8f:69:fe:e0:47:83:8d:0f:02:8d:58:
41:c1:9e:f0:01:fc:1f:62:e6:c3:b7:ae:b4:e2:0b:80:50:8d:
95:8a:a7:08:77:a0:2d:a6:cc:73:41:3b:2e:2c:6b:ee:1f:a6:
c5:30:57:d2:d1:11:f8:25:6d:50:25:93:14:d5:5b:21:92:7c:
b2:22:87:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:17:25 2024 by rpki-client on console-ams.rpki-client.org