Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4054B592B37011EEB5B522C3775412E6.roa
File: 4054B592B37011EEB5B522C3775412E6.roa (raw, json)
Hash identifier: N9sN8FcwpON3qqBXXtEfaugDPaXwmyHDb4Ey5YSyeLM=
Subject key identifier: 0C:8D:DF:32:F1:BD:41:B6:BA:D1:B8:BA:4E:E9:FB:C7:23:8B:BC:3D
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0EEF
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4054B592B37011EEB5B522C3775412E6.roa
Signing time: Mon 15 Jan 2024 06:35:19 +0000
ROA not before: Mon 15 Jan 2024 06:35:16 +0000
ROA not after: Thu 15 Jan 2026 06:35:16 +0000
asID: 834
IP address blocks: 102.165.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 11:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3823 (0xeef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 15 06:35:16 2024 GMT
Not After : Jan 15 06:35:16 2026 GMT
Subject: CN=65a4d227-b646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:81:a8:67:f1:74:61:ee:c3:92:53:23:0e:e3:
36:67:d9:a9:0d:64:d9:8a:6c:08:e6:ef:ae:59:52:
52:26:c5:ce:4e:c4:25:cb:7a:a4:8f:2b:93:69:f3:
9b:75:a5:f7:54:6e:c6:32:09:d6:d4:4a:16:ea:1c:
d4:81:99:a9:cf:bd:30:49:f6:c9:d8:1a:39:74:33:
e4:84:ee:14:ca:d1:ba:6f:8c:aa:f4:c2:3e:e3:cb:
27:be:ab:51:87:67:b8:0a:81:ca:99:4d:35:5c:37:
cf:b9:92:50:de:71:7a:c0:b4:f3:64:a5:41:57:01:
9f:34:b5:ef:66:95:1c:ed:0e:38:d8:03:cd:13:17:
9f:b6:a8:f3:d6:f7:71:04:85:b9:c7:f2:9e:e6:88:
bb:24:99:c0:5c:69:5a:18:40:5b:9e:1e:be:41:69:
26:2d:57:7d:90:b5:bf:88:6e:12:ef:e1:a8:c1:70:
5e:3a:e4:83:72:8f:59:95:e2:6e:6c:32:02:7c:32:
2a:08:85:bd:69:8d:fa:1a:86:de:cd:d7:dd:5a:c3:
8a:3c:ec:0f:16:23:45:ec:1b:1b:15:6d:57:ca:24:
ed:e7:e0:d6:a6:1b:18:53:c0:38:ec:6f:e2:ab:16:
7d:d5:8a:8f:8f:27:67:58:eb:6e:72:ea:d7:60:00:
91:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8D:DF:32:F1:BD:41:B6:BA:D1:B8:BA:4E:E9:FB:C7:23:8B:BC:3D
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4054B592B37011EEB5B522C3775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.43.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:20:f1:90:cd:c6:d7:e7:67:c5:f7:b6:18:fe:ae:74:6f:b3:
c3:41:f5:1c:e5:9a:0d:27:f7:b7:a1:37:b3:f3:89:eb:51:d5:
02:a0:b2:62:0f:c1:f8:db:64:21:61:e6:60:f9:ea:66:2d:fe:
a7:a1:84:b5:4e:cb:96:f7:91:33:d5:d2:41:79:a9:ec:70:1b:
ce:c6:6d:56:09:07:b3:5b:90:c5:d1:87:ac:fe:9c:81:75:0e:
31:be:18:83:b1:2d:de:10:39:5b:3f:86:c4:db:44:ce:83:ff:
e3:cb:13:f7:4d:40:4a:53:f5:9f:cd:2e:fa:42:6c:04:5d:2e:
90:47:7a:cf:31:86:4f:a6:c2:29:4e:6f:da:47:3b:35:95:7c:
53:b3:a1:8a:1f:61:13:52:2d:79:ae:57:33:ab:17:04:38:15:
9b:a0:b3:0a:23:08:57:be:21:02:cc:73:9c:09:55:70:f5:99:
28:0e:37:40:ad:61:47:2e:57:3c:4a:7f:35:20:78:63:b2:80:
15:66:b5:3f:fb:60:44:ae:1e:86:27:aa:cb:dd:14:a5:34:02:
fb:31:6e:e2:a9:ff:ef:e6:84:cf:50:62:a2:5a:45:f0:ed:36:
aa:c4:a1:89:08:e5:40:ea:18:20:65:50:3f:18:f1:54:e5:5b:
68:76:35:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 17 15:53:11 2024 by rpki-client on console-fra.rpki-client.org