Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/78E7ECF6D52411ED9BED3CECF1222468.roa
File: 78E7ECF6D52411ED9BED3CECF1222468.roa (raw, json)
Hash identifier: jJ8Ua+N/+nLpDhjRtMMJlR5fTg9pV424QVkmTb2OYuI=
Subject key identifier: 3B:BF:4B:92:04:D2:E0:07:06:46:B9:25:5F:90:6C:92:EB:A0:89:AA
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0AFC
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/78E7ECF6D52411ED9BED3CECF1222468.roa
Signing time: Fri 07 Apr 2023 09:13:34 +0000
ROA not before: Fri 07 Apr 2023 09:13:31 +0000
ROA not after: Sat 12 Apr 2025 09:13:31 +0000
asID: 328888
IP address blocks: 102.165.40.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2812 (0xafc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 7 09:13:31 2023 GMT
Not After : Apr 12 09:13:31 2025 GMT
Subject: CN=642fdebe-9cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:83:4f:a4:b5:bf:d8:3e:54:44:8b:07:96:f1:
08:8c:f0:ed:20:c1:76:69:65:63:66:c1:88:77:5e:
db:d1:16:eb:96:31:f4:b5:41:72:c3:40:57:6e:f6:
0f:d8:40:d0:5d:99:73:2f:6a:2a:c5:49:20:f5:33:
78:ab:2b:02:51:50:1d:36:d0:d9:a6:66:73:f8:04:
98:cb:88:65:03:ef:69:05:a8:7e:73:61:f0:48:a2:
1e:09:d1:6f:50:e6:89:0d:cf:0b:47:83:49:af:3e:
ab:27:72:99:92:36:c3:72:b6:4d:76:96:04:c4:15:
df:7f:03:ae:75:61:5c:1f:cc:28:6d:d1:96:c3:76:
94:bd:a4:40:cf:54:45:56:4b:25:68:b5:99:8a:8f:
46:ed:78:01:5b:09:88:09:cd:af:56:cd:59:af:c7:
71:89:2d:53:32:3c:2c:ec:c4:8e:03:f9:f5:5a:b7:
33:cc:81:b4:4c:71:21:5f:36:b3:6a:b9:06:b6:5d:
00:98:fd:04:d9:c6:c9:55:d9:cf:86:2a:2f:62:c9:
fb:e3:20:2f:2b:9b:ba:88:93:91:bc:22:b9:6c:15:
7a:05:92:39:3e:67:d7:09:36:e9:9e:18:d6:eb:8f:
11:89:c8:5c:ae:e1:6e:44:1c:2a:01:40:3e:26:8d:
a1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BF:4B:92:04:D2:E0:07:06:46:B9:25:5F:90:6C:92:EB:A0:89:AA
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/78E7ECF6D52411ED9BED3CECF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.40.0/24
Signature Algorithm: sha256WithRSAEncryption
73:e9:48:b2:f2:ec:91:90:67:11:4a:71:ce:11:66:15:e6:91:
09:34:1e:69:30:32:6f:1a:4c:de:4b:a3:60:ba:b5:b4:28:b1:
af:4f:5a:9d:74:ab:1b:83:c1:a0:49:53:b4:05:c2:e0:4b:22:
74:f2:7a:c7:37:31:d6:78:20:33:11:71:28:68:6c:ac:cb:39:
14:19:dc:71:92:49:53:f3:c9:ff:1c:a1:c4:68:66:ec:12:a7:
39:2a:92:75:4c:d4:3b:8d:3a:6e:5e:02:14:f1:36:cb:92:32:
31:52:08:28:6e:4d:cf:7a:22:cb:3d:4d:ca:fd:44:57:1a:2b:
0e:80:ea:e1:8f:7b:d4:47:be:dc:08:39:d0:12:da:02:ac:64:
ec:bc:16:fa:df:d2:fe:54:27:45:58:0f:41:78:67:cc:e4:b8:
e9:0d:39:1f:5b:c0:0b:a0:9c:d1:46:00:e8:8b:46:a0:fd:83:
ad:00:a9:28:13:67:65:c7:74:a4:55:0b:44:d8:3f:a0:70:81:
e3:3f:d1:88:90:ba:f4:df:78:15:2b:ce:e7:41:77:c0:46:44:
34:c4:12:30:be:ca:6b:ab:a8:61:bf:9a:dc:de:3c:9f:4e:cf:
0e:2e:66:af:12:22:ae:64:91:51:6a:2c:74:66:5f:4d:3e:e7:
0c:38:ad:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org