Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4F59376E4C7F11EE9FA084284AD9E6FC.roa
File: 4F59376E4C7F11EE9FA084284AD9E6FC.roa (raw, json)
Hash identifier: cbs2TTYDjJAPR1QNqstQWYX/sj4XPC4fNTPofnRzkik=
Subject key identifier: F0:B3:D9:E7:12:D9:26:01:08:38:22:9C:62:73:C7:18:96:D9:2C:9A
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0D1D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4F59376E4C7F11EE9FA084284AD9E6FC.roa
Signing time: Wed 06 Sep 2023 06:33:37 +0000
ROA not before: Wed 06 Sep 2023 06:33:34 +0000
ROA not after: Tue 10 Sep 2024 06:33:34 +0000
asID: 834
IP address blocks: 102.165.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3357 (0xd1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 6 06:33:34 2023 GMT
Not After : Sep 10 06:33:34 2024 GMT
Subject: CN=64f81d41-c40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:cf:eb:2e:7b:e9:e3:f6:f4:0e:7a:d5:48:69:
ce:71:8a:3e:36:98:f8:ed:35:52:6f:d9:4c:2f:1e:
91:ff:d8:dc:96:22:2d:cc:06:50:e5:02:37:34:cf:
dd:e4:c9:58:75:d4:76:77:9b:50:b5:87:0e:1f:9e:
d8:c8:8e:c2:66:6a:a5:53:80:ad:70:61:99:44:d0:
9a:df:ce:49:f1:14:7d:13:57:71:bb:d1:ac:b5:bf:
ce:77:de:90:bc:24:6f:06:b0:27:f2:fe:88:20:f1:
2b:c3:fe:13:cd:d3:7a:0b:e6:a9:bf:8d:19:74:f5:
db:71:a8:15:35:da:6f:1f:9a:b7:be:ba:4a:f0:fc:
fb:d4:2d:a5:a7:fb:4e:2b:4d:ab:16:6d:00:eb:07:
99:ad:5b:2d:8b:58:f1:bd:0b:24:c6:9c:b1:df:5e:
4c:fd:c2:8f:6b:8f:31:4a:fe:0a:f4:db:c6:5c:28:
5c:4e:54:0e:98:11:10:e3:92:aa:af:5d:de:ec:6c:
46:71:bf:9b:d1:62:4c:4e:85:5f:f3:bd:59:6e:5a:
bf:01:f6:ba:9a:eb:c0:8e:b4:8e:e7:05:fd:a3:7c:
e3:17:28:12:05:ca:3f:92:03:7f:8b:76:42:e6:17:
57:db:07:2e:1d:b3:8f:53:f2:74:ed:21:03:06:10:
c1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B3:D9:E7:12:D9:26:01:08:38:22:9C:62:73:C7:18:96:D9:2C:9A
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4F59376E4C7F11EE9FA084284AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.31.0/24
Signature Algorithm: sha256WithRSAEncryption
28:b6:66:61:8d:a2:5c:9b:68:df:7d:5d:50:1b:a5:50:bf:3b:
ba:bc:01:e1:9b:1c:e8:7a:0c:68:a4:de:b7:ab:5a:ee:e9:fc:
47:be:d7:a4:c0:af:59:57:ea:76:27:14:e1:8c:d9:ff:75:2c:
35:3f:a6:33:2a:5d:05:85:4c:db:06:10:30:9e:28:40:2b:7e:
a5:58:9c:a2:14:2c:03:3e:c6:18:11:b7:0b:bb:7d:8c:ac:b3:
c4:a0:85:32:c5:e1:24:c2:88:f3:46:13:53:74:73:87:e7:bb:
b2:06:e4:65:7d:44:87:2c:ed:3c:65:52:f8:31:4e:6b:0c:ed:
f0:17:2d:95:3c:5d:b5:46:10:a8:da:0b:27:62:c5:6a:85:c1:
12:3a:a5:24:4b:15:9c:d7:dd:61:32:57:31:06:69:2f:21:f1:
8f:10:6b:52:a5:66:58:dc:12:55:f4:0c:7a:fc:54:7d:4d:ba:
50:01:b8:85:5a:ea:1d:c7:83:11:a3:c1:9e:ed:ff:1f:89:df:
14:2c:1a:a4:35:94:7d:60:9d:6a:95:fb:9e:cb:f7:99:aa:c2:
77:80:c6:91:ce:8a:cd:44:a0:64:b7:09:3c:ed:1e:dd:9c:4b:
5f:de:c8:19:fc:67:18:7e:08:cd:32:c5:d0:b8:9a:3c:61:df:
89:09:19:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 12:43:04 2023 by rpki-client on console-ams.rpki-client.org