Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5BCA64F076FA11EE838309224AD9E6FC.roa
File: 5BCA64F076FA11EE838309224AD9E6FC.roa (raw, json)
Hash identifier: Z37Xh4Fwa3WKRF6nz7SI+dwaGNYAiBX8MEds1nZ6FSQ=
Subject key identifier: A4:A9:7C:79:8F:16:40:AD:A6:68:75:86:5A:8D:48:54:B0:1E:B9:38
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0E14
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5BCA64F076FA11EE838309224AD9E6FC.roa
Signing time: Mon 30 Oct 2023 08:00:15 +0000
ROA not before: Mon 30 Oct 2023 08:00:10 +0000
ROA not after: Tue 29 Oct 2024 08:00:10 +0000
asID: 834
IP address blocks: 102.165.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Nov 2023 18:15:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3604 (0xe14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 30 08:00:10 2023 GMT
Not After : Oct 29 08:00:10 2024 GMT
Subject: CN=653f628f-7c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2a:eb:74:c4:e4:36:ab:47:99:ac:28:1e:bc:
8f:4f:23:08:22:37:de:a8:be:8a:64:a9:13:01:3f:
30:92:77:81:3a:05:dd:59:d2:f0:0c:9f:fb:6f:02:
3b:8b:fc:5c:b0:3d:0b:71:97:bf:6a:f1:8c:c0:e4:
b4:e6:2c:ec:ce:45:37:9f:2a:3e:f8:ab:0e:28:24:
e4:5e:e7:73:5f:3b:cf:6d:6b:92:fe:1e:ec:95:8d:
45:ec:fe:05:e2:01:c9:ec:f3:b5:bf:86:5c:22:f7:
0c:a6:82:03:62:4c:c8:61:d1:0e:93:79:9b:d6:10:
e6:48:14:a5:b5:b1:7c:ad:d8:b7:9c:c7:a8:5f:a5:
9a:ae:9d:1f:5d:bd:d6:f8:e2:2a:cd:1a:8c:b3:68:
78:35:ec:3b:ff:a9:47:75:76:d4:1d:31:3e:0c:e9:
f8:30:0d:5d:ea:32:82:ce:3b:f8:d5:f4:a7:5b:d9:
5b:e6:50:84:ab:6e:39:df:15:1f:02:51:b5:56:00:
04:6d:2f:38:b8:37:32:ab:e3:6e:eb:3e:25:d7:88:
de:b3:76:f9:f5:47:7e:e7:3c:48:2b:de:92:63:5e:
e3:21:19:8a:60:e5:6d:a2:8e:e7:12:ec:86:70:02:
76:10:68:e5:0a:52:e0:df:7f:37:c2:59:3f:a5:46:
20:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A9:7C:79:8F:16:40:AD:A6:68:75:86:5A:8D:48:54:B0:1E:B9:38
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5BCA64F076FA11EE838309224AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.59.0/24
Signature Algorithm: sha256WithRSAEncryption
80:a5:ff:e0:4c:7b:fd:1d:e0:d6:4f:cb:c8:54:ce:03:f9:d1:
5e:a2:b6:d4:0b:c9:69:06:15:b7:83:74:5c:9d:97:af:8b:e0:
96:23:a1:3f:19:16:c3:34:88:94:89:7a:fe:f8:0d:9d:d5:59:
42:7c:e2:1a:e7:e6:9b:47:42:7b:31:c2:08:ab:b5:5e:41:d3:
5b:a6:2f:0d:e3:ae:ce:22:9d:75:72:cc:43:16:cc:5a:a4:d7:
55:44:0a:e2:0d:db:33:f7:32:17:bf:e0:16:0a:9f:68:50:eb:
aa:2e:14:f4:27:43:4b:9c:d9:4f:58:ad:41:a9:8b:ca:67:44:
1a:16:82:e5:b8:e9:0f:37:9b:4c:02:1c:47:4c:ff:60:de:93:
f3:b2:59:7c:63:7b:4b:53:7a:94:56:c4:f9:5e:aa:2a:f6:27:
e6:69:25:e6:36:aa:f5:ce:f2:99:af:46:fd:86:05:6e:91:8c:
0e:3b:ca:35:b3:43:18:9b:82:9b:2a:3f:85:f8:0a:5c:11:f5:
35:01:6c:0b:99:1e:96:21:f8:51:83:35:74:4b:42:e8:0e:90:
24:91:bd:28:03:dc:b7:bf:61:16:e0:23:50:4b:4c:4f:98:e4:
1c:e4:ad:ab:2f:75:c9:e2:fe:c6:90:35:77:0d:6c:08:be:40:
e0:38:54:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org