Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5DED8DD6FB9311EC8CD5519BF1222468.roa
File: 5DED8DD6FB9311EC8CD5519BF1222468.roa (raw, json)
Hash identifier: e6KzT+AY3EnRe4GVE5tNAJCR/z9iNQ6BhXFIN4i76z0=
Subject key identifier: 21:6E:6A:1A:AA:A6:31:E1:08:DC:D4:F7:03:82:3C:78:4A:2C:46:D1
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0703
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5DED8DD6FB9311EC8CD5519BF1222468.roa
Signing time: Mon 04 Jul 2022 12:18:10 +0000
ROA not before: Mon 04 Jul 2022 12:18:06 +0000
ROA not after: Thu 04 Jul 2030 12:18:06 +0000
asID: 61317
IP address blocks: 102.165.0.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1795 (0x703)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 4 12:18:06 2022 GMT
Not After : Jul 4 12:18:06 2030 GMT
Subject: CN=62c2da82-1f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:67:e5:4f:b5:52:9b:8c:cf:db:cc:0b:b3:b2:
c1:b1:35:90:82:b1:23:60:10:20:35:e8:c1:48:27:
7e:30:76:d9:c8:1d:25:87:14:07:ad:8f:d4:7b:4d:
97:b1:f3:cd:78:f3:ea:fe:5b:e8:2d:5c:69:bc:92:
0c:bd:f8:62:5a:09:ea:74:bb:47:3b:e3:31:c4:49:
6e:96:03:05:ca:b1:e8:7f:e9:2a:da:f9:44:cd:a3:
38:79:57:36:aa:e6:e4:4e:9a:cd:36:02:1b:b6:94:
55:bf:b6:66:8c:6e:d1:20:6e:2d:41:a8:76:d1:0e:
f7:6d:23:1a:76:53:99:77:29:28:75:92:76:f0:bd:
76:5f:dc:2c:48:2e:5f:05:70:7d:e3:56:e0:50:ad:
34:45:ed:7b:61:30:36:8a:c6:8e:9b:8f:a7:ec:94:
7c:e7:ed:e8:3d:df:a9:6b:b2:aa:0a:21:51:12:86:
80:4b:8d:9e:49:75:85:95:b2:70:c5:4a:04:41:d3:
53:50:a5:35:bc:9f:84:4f:5c:88:86:f7:01:53:3c:
2c:0a:6a:a3:9e:b3:80:ed:d1:33:1a:8d:52:87:01:
e7:32:2c:bd:40:3c:57:97:56:6a:7c:74:72:03:9c:
47:f8:57:56:ad:5f:e7:f3:0f:7f:cc:18:41:35:7f:
5f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6E:6A:1A:AA:A6:31:E1:08:DC:D4:F7:03:82:3C:78:4A:2C:46:D1
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5DED8DD6FB9311EC8CD5519BF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.0.0/18
Signature Algorithm: sha256WithRSAEncryption
46:dc:fa:8a:46:ad:3c:90:7f:03:55:d0:18:1a:c2:37:d9:ac:
b8:86:af:bd:6c:e2:85:2e:49:85:c8:a5:4b:b9:82:79:c1:6b:
42:f2:67:cc:04:25:56:02:0b:78:01:9c:6b:ff:a9:36:ce:51:
02:5c:31:96:f2:1b:0a:df:21:2c:13:a7:4a:a9:65:8b:08:36:
83:5b:34:67:a0:91:75:8f:10:64:c9:49:fe:cf:a5:27:f1:2b:
d4:0b:67:4a:0f:49:82:8c:d6:1b:31:5b:49:80:26:96:d0:a9:
e9:e9:c1:13:02:3e:f1:6d:9e:58:98:da:49:c5:e2:50:ec:16:
c0:b6:57:95:56:e7:e0:df:61:a3:e6:87:fb:f5:e5:e4:6a:d8:
d8:55:51:2c:8b:0f:51:eb:6f:66:83:43:71:fe:c5:2e:c1:ea:
c4:ec:cd:a0:3e:df:f0:59:26:57:70:fc:cb:55:1f:91:4e:6a:
ae:f8:1a:f6:6c:9a:d8:0c:c5:6a:84:df:65:98:33:d9:b2:b7:
2e:01:4e:20:be:00:8f:5b:76:27:47:57:f6:b7:db:e6:93:84:
a1:a3:67:b1:5a:41:7e:c9:67:a1:0f:7c:67:60:75:8f:61:63:
aa:ad:6d:af:19:de:16:bb:39:39:0d:87:55:8a:62:32:bb:03:
2c:34:a4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org