Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/74E2533CE73E11ECA7C6AA7CF1222468.roa
File: 74E2533CE73E11ECA7C6AA7CF1222468.roa (raw, json)
Hash identifier: jBBRFV1/++9hAxkXCKD9bBXHZd977EoKk68tCQk7O0w=
Subject key identifier: 90:A1:84:2A:63:C2:DD:38:74:6C:93:54:A2:53:96:01:6A:39:C8:51
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0689
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/74E2533CE73E11ECA7C6AA7CF1222468.roa
Signing time: Wed 08 Jun 2022 15:19:58 +0000
ROA not before: Wed 08 Jun 2022 15:19:54 +0000
ROA not after: Sat 08 Jun 2024 15:19:54 +0000
asID: 40676
IP address blocks: 102.165.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Jan 2023 01:27:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1673 (0x689)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 8 15:19:54 2022 GMT
Not After : Jun 8 15:19:54 2024 GMT
Subject: CN=62a0be1e-921c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:69:36:91:7c:84:8e:f1:5a:61:ce:8e:36:0b:
6c:a7:86:51:f1:c4:ac:8f:fd:be:ec:76:58:e4:ca:
80:fd:2a:4f:1f:3e:bb:4f:39:5a:1f:50:3f:81:1c:
4e:29:e0:f5:f2:ef:73:66:01:27:fa:a2:e7:bf:50:
79:22:5f:f0:e7:51:42:5b:79:7a:16:9b:87:77:7c:
86:fc:7c:12:ab:53:2f:45:95:66:b4:94:a6:10:3d:
a9:61:79:fa:2a:34:59:bd:58:36:1b:5b:45:8f:e2:
9a:2c:a1:f4:db:7d:ec:ef:a8:a7:37:22:ff:2c:c9:
36:42:1f:72:7e:3d:04:85:e6:1f:5a:a5:4b:8f:71:
d8:49:7b:1e:10:f0:d1:93:b9:ce:36:cf:ff:ba:fc:
f0:7e:cc:31:cf:ed:f2:80:4f:e7:16:36:46:3a:a6:
d7:5b:c6:f0:81:b3:f5:7d:de:68:92:8d:a0:26:ac:
86:ac:3c:22:19:98:9c:6e:85:d7:5a:ec:db:12:e6:
11:52:60:8d:db:b7:2b:5f:fb:e7:34:13:df:14:56:
98:ac:a4:ad:4c:a9:af:42:ee:74:dc:2d:3d:b3:74:
b7:21:9e:aa:da:73:c3:3d:8d:ee:14:bc:1d:e8:ea:
5c:ba:ab:e4:44:c1:22:31:9d:ff:61:b9:97:29:9b:
32:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A1:84:2A:63:C2:DD:38:74:6C:93:54:A2:53:96:01:6A:39:C8:51
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/74E2533CE73E11ECA7C6AA7CF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.3.0/24
Signature Algorithm: sha256WithRSAEncryption
75:ad:aa:55:a0:42:7b:04:3a:e3:50:b3:47:5d:d0:93:20:a8:
14:73:0c:5d:71:36:f6:e7:1b:e2:39:15:fa:d0:c3:39:d9:2c:
c7:26:cf:c8:de:55:65:00:3f:27:db:5f:04:a3:a9:69:2e:f8:
00:43:f7:34:c3:79:64:65:98:47:3f:79:6a:56:c8:b4:25:e1:
1b:33:39:57:6c:e0:11:e4:bc:cb:a3:d6:04:05:1a:64:15:96:
d2:00:6e:05:5f:d6:4d:40:5a:ba:8b:92:b6:7f:a1:c7:47:63:
9b:e0:e9:9d:a3:63:e3:3b:54:c9:a9:47:1c:6b:30:a4:58:dc:
4a:49:f9:92:4b:ea:a8:c7:ea:51:c7:70:a8:19:12:d7:57:b3:
04:c4:f0:6a:44:7b:31:1e:bf:49:7e:d9:19:36:65:d1:33:19:
25:43:bb:fd:94:0d:10:bd:3b:f9:42:9f:91:44:04:40:c8:76:
10:71:2a:50:d7:66:66:24:c1:15:c6:03:21:9c:c4:a2:56:82:
a3:5a:47:f0:2c:d8:81:32:1c:2a:c7:e2:48:18:d1:93:dc:fa:
a6:f1:ca:eb:d3:62:cb:09:43:0e:59:4a:92:f6:63:bb:5d:32:
af:ae:6a:81:4b:6c:1b:07:12:7b:5c:c1:35:64:e6:1e:71:6f:
e2:13:fc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org