Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9297DE42C74E11EDB9E2F0EEF1222468.roa
File: 9297DE42C74E11EDB9E2F0EEF1222468.roa (raw, json)
Hash identifier: rioMGSEbAp9AkkQAYouA6eXdjlMZFtbXomEsxkih+wE=
Subject key identifier: FC:A6:91:18:7E:8B:CE:9B:90:B4:EE:B2:E1:35:97:D7:72:2B:AE:9B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0ADA
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9297DE42C74E11EDB9E2F0EEF1222468.roa
Signing time: Mon 20 Mar 2023 18:39:40 +0000
ROA not before: Mon 20 Mar 2023 18:39:36 +0000
ROA not after: Thu 20 Mar 2025 18:39:36 +0000
asID: 50225
IP address blocks: 102.165.57.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2778 (0xada)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 20 18:39:36 2023 GMT
Not After : Mar 20 18:39:36 2025 GMT
Subject: CN=6418a86c-40ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bd:90:46:a9:3e:d7:d2:45:96:b3:60:9a:4e:
20:23:fe:35:5f:dd:bd:3c:0e:0a:85:a1:84:62:04:
a9:93:15:d2:e6:7b:39:c3:4e:97:5d:cf:f9:1f:29:
3f:41:a2:9f:c0:da:48:2c:e0:83:a8:00:95:00:a3:
c2:fd:bd:0e:38:23:61:e8:c7:a8:94:44:53:79:7c:
68:25:e3:41:7a:1e:36:85:6d:80:8b:f4:53:ab:f3:
99:9f:42:83:29:a8:1d:87:3b:19:d2:f1:bf:45:8e:
99:f3:7b:80:16:1c:0f:ea:e2:5a:00:17:a8:b2:e3:
ea:d7:c4:a2:56:f5:84:e6:28:29:86:3f:8c:0d:4e:
85:dc:00:81:3d:e9:d2:d9:45:52:3d:f5:5d:1e:7c:
52:47:0d:d3:c0:fe:c8:22:b8:51:2d:50:25:c2:cc:
d1:fa:59:d9:35:50:cf:e8:48:5e:60:8d:fb:db:7c:
79:64:11:41:8f:d2:f6:13:e4:4f:6b:c2:89:3d:f7:
2a:ac:de:ed:c4:27:42:6b:7f:80:9c:92:92:e4:21:
e6:50:55:6c:b9:49:e5:36:4f:73:f6:e1:98:e4:89:
03:50:ed:ea:86:ee:5b:94:2e:c2:ca:32:cf:7f:27:
94:25:e0:47:c6:2b:14:f9:79:36:84:75:95:6a:a8:
92:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A6:91:18:7E:8B:CE:9B:90:B4:EE:B2:E1:35:97:D7:72:2B:AE:9B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9297DE42C74E11EDB9E2F0EEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.57.0/24
Signature Algorithm: sha256WithRSAEncryption
37:e3:33:cf:b9:21:76:04:4e:63:2f:f9:84:bd:8a:e6:b0:33:
52:29:26:b4:6f:37:1f:0c:3a:6e:e8:64:66:53:0c:13:47:d3:
71:fb:81:c2:dd:d7:7d:df:62:d4:e4:77:d6:dc:9a:a6:62:0a:
72:3b:d5:89:b1:78:48:90:2b:78:50:d6:3f:b2:39:67:9c:e4:
74:57:61:af:56:5d:e2:ef:e3:8a:29:80:46:b1:3e:5d:73:d7:
14:ca:2a:2b:03:cd:6f:97:6e:d7:a5:61:b1:f6:ca:64:25:a8:
d0:76:03:c0:22:d4:3a:1e:22:65:37:42:7e:7d:8e:20:3b:1a:
d7:7e:bd:c1:b0:d3:3a:54:a5:6d:5b:39:37:d8:9a:f7:00:d7:
81:ff:a2:07:9e:f7:bc:97:2b:c9:1a:1a:58:f5:3d:17:cd:eb:
39:81:37:7f:02:4c:c3:ca:74:01:8e:4e:03:7e:26:5f:c0:1c:
6f:d7:70:0a:fe:d3:73:9f:8e:62:0d:b7:9a:60:89:b6:b0:79:
67:12:48:ae:d8:7a:3f:c9:e9:63:f9:3d:86:fd:b9:0d:69:56:
f2:17:0d:6f:a6:cb:f8:03:be:90:f4:3c:b4:5f:82:ac:39:91:
e1:b7:e5:04:82:79:80:8c:b1:88:d9:69:e0:e8:a7:70:10:60:
a6:56:5e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org