Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/98250EDC2BE611EE9932B16D4AD9E6FC.roa
File: 98250EDC2BE611EE9932B16D4AD9E6FC.roa (raw, json)
Hash identifier: t6ZkW+Y21vkArTcetYHLIampcdIQbyGWAm1evjve6io=
Subject key identifier: 6F:67:01:2E:F7:CC:C5:E5:BC:93:3E:21:76:74:B5:4D:A8:AC:B0:4B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0C99
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/98250EDC2BE611EE9932B16D4AD9E6FC.roa
Signing time: Wed 26 Jul 2023 18:59:49 +0000
ROA not before: Wed 26 Jul 2023 18:59:44 +0000
ROA not after: Sat 26 Jul 2025 18:59:44 +0000
asID: 13876
IP address blocks: 102.165.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Oct 2024 06:52:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3225 (0xc99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 26 18:59:44 2023 GMT
Not After : Jul 26 18:59:44 2025 GMT
Subject: CN=64c16d25-c019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cb:19:12:cc:71:79:8f:df:64:71:f7:9f:5b:
13:85:73:8a:5b:90:7d:59:c3:10:35:38:9f:2a:13:
26:d8:de:a4:1a:43:c6:13:4a:27:de:26:d4:b8:dd:
32:d1:b7:b5:0f:e0:0a:18:63:41:ae:75:7e:03:07:
45:22:1e:02:d1:5e:36:0c:85:49:cb:0d:5a:39:9c:
98:47:84:1c:b3:9e:9f:b2:7e:94:9c:83:a1:28:19:
e7:80:7f:32:28:c1:b3:99:07:8c:78:d3:2b:58:2c:
f8:2b:3e:33:b3:c1:64:49:2e:dc:09:25:a8:2c:7c:
9b:0f:5b:20:db:41:20:44:95:6b:b0:88:0d:c6:6a:
be:4d:2e:8f:23:93:99:d2:16:f0:2f:6d:4f:bf:0a:
6f:f6:66:46:28:78:9d:47:12:ae:66:7d:09:81:cf:
58:53:f6:e7:7f:93:8f:7f:fb:8b:5d:73:c0:02:b5:
ba:eb:45:7a:fc:4a:91:f9:be:61:7f:70:9d:07:7d:
4c:a0:9a:e8:e6:49:4e:6d:fb:cf:77:75:55:0d:7c:
c3:85:13:c4:93:16:aa:9a:7f:29:61:ef:2e:1d:31:
61:b1:0b:7e:69:a4:af:d0:1a:91:da:02:d7:74:f7:
8d:70:4c:07:75:05:84:11:aa:89:6d:27:d7:e6:e0:
aa:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:67:01:2E:F7:CC:C5:E5:BC:93:3E:21:76:74:B5:4D:A8:AC:B0:4B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/98250EDC2BE611EE9932B16D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.24.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:07:ad:47:fb:a8:54:11:97:8d:a3:01:14:ec:2f:82:40:83:
fe:8b:09:b1:81:67:b3:c3:ed:59:8f:54:d6:2b:0c:f9:26:8c:
41:3b:38:6b:02:51:bc:28:83:34:65:8a:1d:7e:e8:80:a1:58:
45:a8:c5:39:7f:95:1e:cd:be:b8:80:01:6a:05:21:2c:af:8f:
ac:fb:49:85:bb:b9:71:4d:e5:6b:0b:68:fc:9a:ce:34:9f:b0:
00:06:ce:c9:57:f4:d0:f4:bc:1d:43:15:0e:cb:06:cd:ca:f1:
f7:9e:65:8d:85:c5:a3:8c:1c:bd:77:49:85:29:55:0f:b7:bb:
ed:42:69:db:2c:96:5f:33:67:c4:68:91:8a:79:12:24:17:c7:
03:e3:8f:e4:c1:32:69:91:6f:3e:09:ff:09:36:10:03:85:c7:
c9:7a:dd:95:fa:ee:27:b6:34:ff:cd:ea:35:86:5f:6b:34:8c:
39:b9:50:10:4f:7b:d0:1e:0e:76:40:e0:a4:92:e6:18:b0:35:
df:28:06:f0:7d:51:0f:a0:c7:ce:c7:b7:fc:84:82:52:a2:4d:
1f:d4:18:48:ab:df:48:7d:11:f3:ad:30:7f:2e:95:0a:ac:89:
84:52:20:0a:ed:8b:fb:26:62:68:e7:6b:c4:c9:c4:93:25:54:
98:15:60:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 08:53:00 2024 by rpki-client on console-fra.rpki-client.org