Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6919C26689D011EE8DCEBC214AD9E6FC.roa
File: 6919C26689D011EE8DCEBC214AD9E6FC.roa (raw, json)
Hash identifier: mBRx5vl/NH5vWszIIzeWp4guZPAXDqqaK/hzm3e00yE=
Subject key identifier: 9D:D8:75:00:C4:21:C8:7A:0E:E9:5E:92:03:25:7E:BE:0B:7B:CF:F3
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0E4E
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6919C26689D011EE8DCEBC214AD9E6FC.roa
Signing time: Thu 23 Nov 2023 07:17:50 +0000
ROA not before: Thu 23 Nov 2023 07:17:47 +0000
ROA not after: Sat 30 Nov 2024 07:17:47 +0000
asID: 834
IP address blocks: 102.165.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Nov 2023 06:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3662 (0xe4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 23 07:17:47 2023 GMT
Not After : Nov 30 07:17:47 2024 GMT
Subject: CN=655efc9e-620b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1b:65:55:c6:8b:60:7d:45:94:93:c0:61:6d:
05:b7:f7:e7:9e:10:34:e1:73:cf:e9:95:58:cb:4d:
40:93:dd:2e:ae:39:de:f6:2f:24:6f:60:64:ff:a4:
c0:ad:0d:a5:5d:58:16:a6:28:10:1f:03:73:25:a3:
6d:bf:5c:36:db:25:31:d0:5f:b6:7b:98:12:6a:ec:
19:f5:f5:47:d1:50:23:d3:9e:e9:a4:8f:1c:82:99:
c1:c1:c9:5e:67:18:9c:f3:eb:33:02:79:5c:0b:da:
80:81:26:76:95:23:3e:8a:8f:07:30:e7:82:4f:1c:
0f:d2:bd:cd:c4:72:07:f2:fe:d9:a9:bb:6a:e4:7c:
eb:5f:31:d4:c1:62:15:fe:22:17:f5:50:cd:d1:b1:
d5:23:82:d4:51:54:83:da:eb:97:cc:a4:93:ef:76:
6b:60:c4:9b:4f:95:2b:23:69:8e:fe:2d:92:29:91:
02:f6:7a:c3:20:9e:b3:94:18:d0:1c:0f:1e:69:46:
01:d7:c7:52:a7:07:f7:22:c7:53:07:66:2f:ac:d4:
e4:98:35:64:40:35:a0:3f:b5:8b:15:85:e3:e8:b6:
7d:47:df:a1:b5:72:a2:0a:17:5a:ed:df:ca:73:38:
a8:8a:7e:1f:0a:2f:a1:98:6a:ad:c2:f5:ba:9a:63:
56:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D8:75:00:C4:21:C8:7A:0E:E9:5E:92:03:25:7E:BE:0B:7B:CF:F3
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6919C26689D011EE8DCEBC214AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.40.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:b1:17:b8:4a:0c:e2:55:c1:b6:3c:7e:a3:0a:dc:3b:df:f2:
8a:3e:a9:33:2a:a2:9b:94:7b:ec:a8:9d:23:8c:f0:d2:00:ef:
05:96:55:5e:ab:1a:71:07:03:a7:f8:33:e3:e4:7f:e8:3c:83:
bd:fd:a4:a6:74:0e:e2:be:f9:0f:3e:06:a7:98:73:a7:f8:4c:
ba:d1:98:9f:b9:eb:de:82:ae:94:79:c9:c2:30:c0:be:36:98:
01:7d:0c:ca:2b:c2:e7:69:e4:ab:45:7b:69:bc:9b:07:08:50:
bb:35:c2:6f:ef:7e:a2:8e:c0:a0:18:48:d2:e1:55:84:e8:0a:
01:7b:08:d9:1e:dc:1c:b2:37:6d:4b:88:77:8e:24:5e:e8:eb:
b1:9c:a7:30:4e:b1:d6:bb:a4:48:b9:de:9c:57:45:60:fa:4a:
a3:21:56:81:65:10:3c:3d:89:9f:96:84:44:44:d7:8f:67:f2:
b9:bc:02:b4:63:5e:06:1a:1a:2d:11:19:07:1a:1c:4d:29:fa:
3f:02:2a:60:77:dc:b1:01:76:fd:c0:13:f0:e7:ca:73:cb:8e:
b0:36:79:0b:d5:7d:d0:1e:62:31:a2:f6:9a:0a:99:0b:da:ec:
79:82:f9:a5:b8:94:e2:e4:75:2c:8f:46:8d:31:2c:c3:ed:f8:
ca:b6:78:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-ams.rpki-client.org