Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/53690A5A723B11EEBF87A77C4AD9E6FC.roa
File: 53690A5A723B11EEBF87A77C4AD9E6FC.roa (raw, json)
Hash identifier: fhNb0Rjj5Lz/6mVSI1Gt1M5c6U9L9jQwTshlBEtPUBw=
Subject key identifier: 72:80:88:01:FF:95:88:35:6C:8A:40:18:3A:B8:60:A9:F2:0E:35:3F
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0E05
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/53690A5A723B11EEBF87A77C4AD9E6FC.roa
Signing time: Tue 24 Oct 2023 07:02:42 +0000
ROA not before: Tue 24 Oct 2023 07:02:39 +0000
ROA not after: Thu 31 Oct 2024 07:02:39 +0000
asID: 151604
IP address blocks: 102.165.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Nov 2023 07:16:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3589 (0xe05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 24 07:02:39 2023 GMT
Not After : Oct 31 07:02:39 2024 GMT
Subject: CN=65376c12-67aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9d:b4:23:2e:8e:95:46:59:85:95:b5:42:96:
47:6a:29:40:f3:4c:d2:bc:83:29:a7:7b:00:52:5a:
83:e9:63:7f:8f:90:23:51:ed:3f:b3:89:89:a1:fd:
a2:6e:aa:57:55:53:4a:7a:2a:7c:7d:ab:e0:a0:30:
5b:12:e5:dc:bd:98:61:98:d9:3f:96:63:4a:46:fa:
32:da:0f:14:c7:5a:dc:c3:be:53:af:3f:c6:8e:f8:
d2:16:03:94:70:36:98:28:23:3c:9d:9f:af:40:2b:
43:12:5d:97:45:03:63:0b:02:3c:cc:88:0d:b0:55:
e0:6b:8c:72:94:a9:ec:79:9a:7d:81:d9:9f:86:b2:
43:28:f7:62:57:6b:31:70:f2:c0:32:2f:4b:06:bd:
4c:ee:c2:9a:dd:7f:3f:36:8b:20:67:48:f6:92:9b:
11:55:88:bd:74:14:a3:d4:e5:a2:bb:a3:b8:63:5d:
0e:4b:fc:21:b6:24:c1:4b:99:b9:0e:8a:52:41:e3:
a3:28:3b:ae:2a:be:aa:87:d0:9b:d6:c1:30:b1:cf:
22:e3:6e:65:41:4a:3b:4e:fc:b1:6f:91:4b:81:0e:
2c:e8:3c:36:9d:ad:f0:ef:d1:c9:e4:a4:f4:06:b6:
2c:c3:27:b9:90:c6:e3:a5:8e:09:c6:f7:07:a0:f7:
69:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:80:88:01:FF:95:88:35:6C:8A:40:18:3A:B8:60:A9:F2:0E:35:3F
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/53690A5A723B11EEBF87A77C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.40.0/24
Signature Algorithm: sha256WithRSAEncryption
57:7a:4d:ce:3e:9b:49:63:38:1f:2d:f4:2e:8e:72:3a:07:e2:
45:c3:87:51:a1:dc:06:7c:a8:3f:4a:8d:ba:1f:40:e2:69:71:
d7:f5:ee:99:dc:1a:69:9a:da:31:b2:83:e7:a8:58:4f:ed:9b:
d5:68:45:34:39:b6:f1:30:41:48:f4:ba:51:71:24:5d:8e:78:
2b:81:28:d6:ac:2e:55:65:72:61:f9:1d:e8:49:4b:8d:e3:87:
7a:ea:f9:b3:2b:88:39:ae:e2:0b:a0:76:53:c7:4f:33:89:0a:
3f:50:9a:76:09:98:06:18:d1:c3:b5:e1:b9:c9:42:d7:69:8c:
ce:f2:18:3c:38:d3:57:91:f7:68:18:39:84:07:b6:89:d0:49:
d0:9f:a1:f2:58:38:cf:f6:52:ae:b8:6e:06:92:c5:36:9b:a4:
ed:47:a4:ab:b6:5b:07:f4:57:05:7b:2b:92:45:63:12:df:b0:
9b:fe:2b:3a:3d:d7:1c:87:22:f0:0f:7c:94:7c:b5:4b:95:fd:
d5:86:36:4c:6d:f2:73:ea:29:a4:27:2c:c9:13:f5:fb:96:ac:
3a:d8:2f:ac:33:58:9e:00:7e:00:4f:94:11:4f:05:5c:ae:3e:
3c:47:56:e9:c3:b6:77:d8:4a:0e:3d:55:3d:f6:84:85:53:c7:
05:2e:66:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-ams.rpki-client.org