Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8EEDAFD2D0AE11EEAE911D73775412E6.roa
File: 8EEDAFD2D0AE11EEAE911D73775412E6.roa (raw, json)
Hash identifier: FFtm3Lp4aP6YXXVmHwOrODWowuHpue5iaY3Ogo8gi8s=
Subject key identifier: DF:4D:4B:1B:1B:E6:3F:F7:E2:FD:C7:57:6B:13:A1:7F:DA:8F:60:67
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0F73
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8EEDAFD2D0AE11EEAE911D73775412E6.roa
Signing time: Wed 21 Feb 2024 11:44:24 +0000
ROA not before: Wed 21 Feb 2024 11:44:20 +0000
ROA not after: Sat 21 Feb 2026 11:44:20 +0000
asID: 61317
IP address blocks: 102.165.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Mar 2024 16:36:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3955 (0xf73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 21 11:44:20 2024 GMT
Not After : Feb 21 11:44:20 2026 GMT
Subject: CN=65d5e217-0352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:37:67:68:53:7c:e4:10:9d:e5:4a:26:d7:12:
74:97:14:a0:64:00:44:42:b7:d7:b3:af:73:ae:36:
50:88:84:50:93:c0:68:b1:02:ee:7c:38:89:b7:83:
64:80:37:58:96:83:9f:e9:ee:4c:0a:68:cd:25:15:
52:4b:e9:5c:65:c8:ff:d6:50:c0:ff:7e:b9:40:c8:
c5:f2:45:8f:7e:ba:6d:d0:5b:47:bf:74:89:ec:78:
a5:eb:c9:65:6b:6d:0d:fc:e4:76:54:dc:a2:de:87:
a0:23:73:c9:0e:a1:49:84:cb:d6:04:53:e1:2c:d2:
68:fa:87:37:fe:28:0a:22:6c:c3:89:81:b7:52:7e:
0c:76:ac:9a:6f:49:84:3a:dd:f0:a6:c1:f4:f3:ce:
2e:59:0d:1d:04:ed:65:8c:95:92:e4:02:3e:35:97:
59:14:85:50:1a:77:24:44:75:a9:39:da:a5:0e:dd:
76:b2:16:de:1a:31:33:bb:9e:94:d6:4d:89:10:eb:
58:c6:10:f1:34:b2:73:b6:27:8a:b6:d2:a8:5f:0d:
9e:83:0a:83:ac:45:96:95:30:3b:ae:af:06:62:9a:
a8:7e:08:60:7b:92:71:41:ca:93:66:4c:c8:19:9b:
ac:7b:75:6c:0d:24:77:a7:d1:37:c3:ac:11:31:1c:
d1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4D:4B:1B:1B:E6:3F:F7:E2:FD:C7:57:6B:13:A1:7F:DA:8F:60:67
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8EEDAFD2D0AE11EEAE911D73775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.38.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ec:f0:f2:09:35:76:9f:e1:13:9f:1d:41:3a:04:f2:89:15:
aa:be:e8:ba:2b:7a:c1:b0:67:cf:30:45:f8:c5:c4:bb:6c:3b:
25:f3:40:63:69:1a:98:33:ba:e8:58:fb:f8:fa:8d:b3:d2:14:
0d:2d:ce:eb:85:fd:f8:c3:95:7f:e3:de:61:33:88:ed:b0:37:
de:c8:e6:6e:9b:06:db:93:da:66:e0:ed:8b:c6:88:47:d0:51:
22:c4:c5:6f:4f:59:60:45:31:19:3f:43:a3:28:44:a5:48:06:
73:a2:fc:86:53:fa:0c:d2:d6:17:11:9a:02:57:7b:5a:af:94:
97:06:5d:4f:80:54:b3:43:cf:f5:f0:ea:87:b9:6a:5b:de:ed:
05:34:d3:e3:50:fc:89:2d:72:1f:16:da:df:93:74:e4:b3:bd:
eb:93:cf:fd:fc:bb:5b:02:39:d2:20:6c:44:41:e9:bd:4b:7d:
12:c3:94:2a:17:2b:28:00:17:c4:4d:c5:2c:5b:c8:a4:a0:5e:
a0:66:39:89:e3:43:b0:e7:dc:c8:75:34:89:a9:48:ff:68:d0:
53:19:4c:52:3e:bd:17:3c:ed:30:ee:2d:ad:da:3d:76:85:1b:
ce:6e:fd:a6:a0:a0:a2:46:5f:1d:29:43:e5:d0:03:c0:a5:b8:
77:42:76:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-ams.rpki-client.org