Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/90AC5B1C6BEF11EEBEB1EA564AD9E6FC.roa
File: 90AC5B1C6BEF11EEBEB1EA564AD9E6FC.roa (raw, json)
Hash identifier: QCU4ITB+sdxRUep9o/rxavsz4IIMWG4yj503RZMpX44=
Subject key identifier: 74:25:A5:B8:7E:55:AA:3E:29:FA:16:16:8D:58:7C:58:B0:98:7D:1F
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0DE6
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/90AC5B1C6BEF11EEBEB1EA564AD9E6FC.roa
Signing time: Mon 16 Oct 2023 06:45:16 +0000
ROA not before: Mon 16 Oct 2023 06:45:13 +0000
ROA not after: Wed 16 Oct 2024 06:45:13 +0000
asID: 62240
IP address blocks: 102.165.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 06:33:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3558 (0xde6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 16 06:45:13 2023 GMT
Not After : Oct 16 06:45:13 2024 GMT
Subject: CN=652cdbfc-f4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6f:cd:95:a6:29:df:a9:0b:38:2f:34:6a:c0:
dd:fa:42:a5:d2:e3:df:8d:60:ba:2e:82:35:ef:77:
5a:8b:b7:d1:6c:eb:ce:0e:db:d3:bf:39:33:3d:9f:
34:f7:ed:6c:44:e0:6c:13:91:a4:08:07:95:fc:f0:
69:f8:6e:3d:c5:59:d0:b8:8d:91:2c:c0:c2:2a:46:
0b:e3:c0:99:35:e5:26:f6:84:b4:b0:57:6e:d6:7e:
28:57:3e:09:36:dc:5c:0f:ab:a7:05:11:44:61:24:
a7:56:f0:f5:38:3c:1e:ee:3a:00:15:46:5a:8b:13:
89:7c:d0:4f:5a:c1:30:ab:7c:ee:24:89:3b:72:62:
63:2d:78:8d:56:32:df:cf:8e:93:80:54:e1:ad:31:
1b:1a:1b:b7:55:3f:08:bb:33:91:4b:9a:4f:47:5b:
0e:4d:ec:39:fc:ea:89:b4:b1:df:39:cf:76:8f:77:
19:76:d9:9d:ef:a1:b5:09:7f:1d:d6:6e:49:45:d6:
d9:20:e5:0c:4d:7f:57:16:ae:13:ef:65:48:5d:61:
40:b2:74:13:09:94:06:02:98:15:90:25:25:db:9c:
67:e2:15:ee:ba:79:8b:b2:47:72:d0:70:6f:b1:85:
7f:36:e1:14:8f:4e:02:fd:57:8d:bd:04:9b:55:26:
2c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:25:A5:B8:7E:55:AA:3E:29:FA:16:16:8D:58:7C:58:B0:98:7D:1F
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/90AC5B1C6BEF11EEBEB1EA564AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.43.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:ee:54:c4:1c:65:f5:9a:da:4b:a2:f1:a2:06:4c:a0:bb:ec:
d3:a7:df:db:5e:0a:68:89:4e:3a:e1:e7:78:f1:0d:6c:28:6d:
82:27:c2:42:93:36:e4:b8:5e:44:89:34:ef:f1:57:d4:af:23:
04:0e:60:33:f0:0c:84:39:22:8c:a4:64:7f:a8:d7:38:a1:09:
3a:70:69:1e:44:1d:c2:01:b6:74:6b:c9:29:16:48:66:c6:dd:
0e:8d:b9:1a:a9:6c:f2:ba:b7:c8:f1:ca:7b:e6:40:34:c7:c1:
df:da:7f:38:ce:dc:48:ed:2b:2d:de:f6:67:3d:86:2e:ad:8c:
0d:9f:b6:45:96:59:e5:4b:21:aa:4d:de:a0:33:7c:3b:30:7e:
04:07:80:62:50:e1:74:11:53:ad:3e:51:98:a5:49:26:f3:34:
6a:a7:3d:8a:60:6d:dc:cc:9f:37:ec:4a:0c:43:e3:5e:44:ce:
b1:26:db:de:f5:74:6d:08:5b:11:84:34:27:8f:13:f1:28:50:
71:0d:50:af:81:10:09:b4:ab:3a:95:04:55:b5:bb:25:ad:cc:
16:db:ed:f9:72:1f:38:9a:0a:1e:6e:77:6a:8f:89:1e:97:a5:
31:eb:cf:80:e2:ab:38:c0:52:9b:6a:85:2f:9a:6d:85:0b:fe:
52:7e:a7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 11:27:25 2024 by rpki-client on console-fra.rpki-client.org