Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/52C729FC6BF011EEA84C29594AD9E6FC.roa
File: 52C729FC6BF011EEA84C29594AD9E6FC.roa (raw, json)
Hash identifier: jY1UkaQNps9Ih8yFZg58X+BmaDFgpxkEPHrpGoYFTZI=
Subject key identifier: B3:2C:00:85:E7:AA:AC:49:D5:82:E3:E3:83:52:30:6D:E4:1F:2C:6D
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0DEA
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/52C729FC6BF011EEA84C29594AD9E6FC.roa
Signing time: Mon 16 Oct 2023 06:50:42 +0000
ROA not before: Mon 16 Oct 2023 06:50:39 +0000
ROA not after: Wed 16 Oct 2024 06:50:39 +0000
asID: 62240
IP address blocks: 102.165.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 06:21:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3562 (0xdea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 16 06:50:39 2023 GMT
Not After : Oct 16 06:50:39 2024 GMT
Subject: CN=652cdd42-0e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d6:b6:40:9a:c7:3e:71:26:86:e8:17:62:cb:
7e:cf:06:7e:eb:78:a7:fa:14:fc:55:b3:4a:11:99:
a9:a4:ea:d1:c1:3b:71:6b:31:a2:e6:9d:5b:85:ec:
32:14:4d:65:18:ba:6a:a0:69:9b:f8:84:d6:e0:81:
33:0c:1f:e8:f4:45:1c:7d:dc:f2:45:68:5f:ca:fd:
a0:3d:46:c9:89:64:7a:00:6d:67:5e:6a:47:47:ff:
67:bf:e5:3c:bc:01:58:48:31:d2:9b:85:86:96:f5:
0c:d0:1a:a1:02:cd:28:7a:f2:02:c8:27:01:ca:07:
ce:b6:3c:c1:b4:d2:2f:53:49:6e:3f:d6:7e:84:dd:
cd:34:a5:1a:47:82:06:c4:a0:24:87:fa:13:8d:c2:
e0:ff:6f:df:d4:b4:a8:3b:a3:07:09:05:ea:63:60:
77:4c:e9:07:f3:2c:57:fb:9d:cd:72:bb:f2:51:17:
f6:27:57:6d:f3:6f:f1:c5:97:df:63:d0:71:23:06:
a6:1f:2e:61:70:1b:8e:c5:35:51:92:ba:24:0f:c5:
aa:4a:b8:3f:9f:16:e3:1b:f6:15:53:75:c7:65:d2:
1d:db:37:75:9b:d5:0a:30:fe:4f:79:e1:8d:1b:22:
b9:11:f1:d3:a5:a0:3e:0a:fa:54:bf:2c:e0:54:e7:
b8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2C:00:85:E7:AA:AC:49:D5:82:E3:E3:83:52:30:6D:E4:1F:2C:6D
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/52C729FC6BF011EEA84C29594AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.45.0/24
Signature Algorithm: sha256WithRSAEncryption
84:14:e0:cf:d0:64:be:53:6f:2f:66:0c:c9:97:c6:1d:7e:47:
33:e0:17:8c:5d:1e:ef:1b:82:60:9e:26:68:f7:1b:d5:a8:1e:
2e:67:46:32:07:b5:5d:d0:04:94:44:ac:53:c6:cf:48:77:8f:
fd:a7:9b:56:a7:03:f1:2f:f4:8b:62:3b:fc:8c:1d:f5:53:99:
7d:8c:e9:b8:d1:b9:5d:52:47:2f:5c:07:7e:3e:29:67:ed:6e:
44:42:ed:29:cb:33:5e:00:3f:2a:5b:c8:62:77:fd:b8:9a:68:
d3:14:76:26:e9:97:5f:1e:7c:e9:93:05:f9:00:01:36:2c:7f:
c5:c3:fe:5f:99:e6:e3:9b:c2:4f:10:79:c1:95:95:df:66:21:
14:2d:66:38:5f:da:06:dc:51:63:11:8a:e2:01:15:45:f1:68:
93:d8:16:c7:ba:27:4a:67:a5:b6:f4:08:f5:c3:11:cb:30:57:
58:56:cc:a0:7f:5f:e8:3d:c6:0c:5e:b7:69:26:de:8f:f8:6e:
21:f9:74:af:25:58:0d:60:59:7a:24:6d:ee:0b:0b:ee:cd:64:
24:4d:e2:c0:30:33:36:e4:eb:6c:6e:88:74:9b:9d:18:ee:54:
83:7e:c7:c8:bf:5b:71:8f:c6:79:d0:61:79:ae:0f:f9:e5:69:
c5:b8:7d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 11:27:25 2024 by rpki-client on console-fra.rpki-client.org