Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/72CD0282F61A11EC994A2FB5F1222468.roa
File: 72CD0282F61A11EC994A2FB5F1222468.roa (raw, json)
Hash identifier: SARTGUr596ifTKO5XUhjd+E0F17yqLzHPpKaEtrnIzE=
Subject key identifier: 5A:E0:EE:96:32:A3:50:E8:1B:52:F6:FC:AE:A2:4A:83:01:9B:55:D2
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 06C0
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/72CD0282F61A11EC994A2FB5F1222468.roa
Signing time: Mon 27 Jun 2022 13:10:00 +0000
ROA not before: Mon 27 Jun 2022 13:09:56 +0000
ROA not after: Thu 27 Jun 2024 13:09:56 +0000
asID: 40676
IP address blocks: 102.165.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 Dec 2022 07:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1728 (0x6c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 27 13:09:56 2022 GMT
Not After : Jun 27 13:09:56 2024 GMT
Subject: CN=62b9ac28-8860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f6:00:fa:bb:19:1f:46:bd:4a:d8:13:b1:d2:
12:bf:98:0f:a2:0f:da:c4:36:4c:f0:56:7c:e7:ef:
98:bc:71:50:fb:49:a5:95:8a:99:02:d3:fc:53:b5:
00:13:de:2f:89:a9:bb:94:33:77:99:0e:1c:54:8f:
e2:e7:e7:8d:14:ba:9c:5d:a2:35:95:28:97:50:69:
2d:f5:c5:d3:17:15:41:e6:02:34:a7:fa:0d:41:24:
76:b5:11:cf:a4:71:26:2e:48:64:99:71:df:77:71:
a8:47:94:f0:12:9b:2c:ea:83:98:06:01:d0:4a:79:
6b:19:78:4f:4f:38:bf:de:98:8a:ff:0a:39:81:14:
44:60:a4:09:76:6c:a8:8f:f9:96:79:7f:c2:a8:28:
c6:23:30:a9:67:d1:d0:4a:c7:a5:96:34:15:24:83:
79:a1:6e:0b:4d:fe:17:83:ea:b3:8a:d5:f6:27:bb:
71:5a:fe:85:08:ac:e7:fb:c9:83:4d:9d:44:bd:c1:
63:2f:10:5c:74:8a:44:c7:99:b1:8a:9f:6a:4a:8b:
21:ea:02:80:0e:69:f7:9f:f4:29:9a:47:2f:3e:27:
47:d6:97:2a:e1:b0:78:34:ed:4f:23:54:cf:48:ab:
17:43:d7:62:75:aa:67:c4:f0:64:64:7e:1c:e0:c9:
cf:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E0:EE:96:32:A3:50:E8:1B:52:F6:FC:AE:A2:4A:83:01:9B:55:D2
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/72CD0282F61A11EC994A2FB5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.44.0/24
Signature Algorithm: sha256WithRSAEncryption
83:81:f2:30:5e:9d:cd:98:3f:1f:95:76:aa:6b:49:a0:f8:9d:
3a:a6:b7:23:36:5d:ea:21:62:49:65:9c:1a:ac:6e:ff:21:a1:
ea:19:4a:56:e4:bb:70:14:f6:f0:11:ce:9a:5b:83:4e:cd:03:
9a:14:31:fe:ad:d1:ff:a5:ab:85:a9:10:b3:ef:2c:c2:6d:51:
a3:89:7d:90:3a:d5:fc:d8:5e:77:23:1d:d1:cf:0a:13:66:50:
8e:66:46:bd:e4:2b:8d:83:30:eb:fa:ef:5d:33:a0:1e:43:14:
09:38:69:57:80:6c:3e:9b:4f:26:88:fd:9a:40:e7:21:d9:ba:
aa:37:f8:a7:3d:ef:ed:11:7d:16:1a:8f:b0:04:aa:f0:a4:e9:
7a:01:7d:fd:d4:73:d9:07:05:9e:0b:06:20:c0:83:90:9d:1d:
f9:07:3f:b5:40:49:74:b1:1a:1c:3f:36:92:e5:61:b9:e4:96:
68:7f:90:c2:5a:b9:48:fd:0f:0e:ee:f4:5c:e0:ad:4c:6d:b2:
e0:6a:7d:bf:7e:d6:2f:a4:24:89:82:81:3f:ab:0b:1b:4d:f3:
95:25:6c:af:fb:00:ca:1a:e2:ec:bf:ca:f7:0c:81:c6:da:02:
74:2e:2b:70:d2:87:7b:f1:44:70:ef:05:fd:18:a8:1f:1b:b7:
bf:4e:05:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-ams.rpki-client.org