Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/990151E8B36E11EE9E7064C0775412E6.roa
File: 990151E8B36E11EE9E7064C0775412E6.roa (raw, json)
Hash identifier: TUVBAXOYkFiTjKm10X+1/ryp0ldMcQXvq0BlZXhbufI=
Subject key identifier: 88:6A:19:E1:4B:1C:EA:BB:83:D7:F1:B4:88:90:E2:DF:55:4A:DE:1D
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0EE6
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/990151E8B36E11EE9E7064C0775412E6.roa
Signing time: Mon 15 Jan 2024 06:23:29 +0000
ROA not before: Mon 15 Jan 2024 06:23:26 +0000
ROA not after: Thu 15 Jan 2026 06:23:26 +0000
asID: 834
IP address blocks: 102.165.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 19:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3814 (0xee6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 15 06:23:26 2024 GMT
Not After : Jan 15 06:23:26 2026 GMT
Subject: CN=65a4cf61-2e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bb:6a:7b:96:98:5a:db:78:4d:93:0d:ce:79:
59:c8:7e:86:d6:a9:59:e5:38:d1:51:df:0a:b7:27:
be:f7:39:7d:4b:62:ed:0e:19:fd:34:00:c6:24:0a:
5b:7e:36:cb:63:a2:6f:1f:8a:43:48:2d:2f:5e:df:
6a:48:3e:29:1d:71:4b:eb:c1:74:56:55:81:e2:29:
24:04:a8:a4:b2:fb:87:ec:20:f6:88:14:b2:8b:ae:
79:cf:24:c8:ee:18:b6:da:7c:b6:12:82:82:b7:9b:
56:ea:d9:27:9f:1f:79:98:1d:e7:59:c5:53:aa:4f:
06:90:ab:68:e1:e2:9a:40:cf:86:08:3b:a5:e2:d3:
ff:a9:b4:f9:1a:cf:b9:52:c3:e6:09:39:e5:25:f5:
cc:eb:12:50:e3:cc:1e:17:d1:14:33:86:cf:9f:d5:
29:7c:16:b1:16:78:04:72:26:7a:b4:f1:04:f2:dd:
dc:a2:1d:a7:ce:0a:0e:82:d0:af:10:32:96:cf:7a:
ba:08:d0:22:33:c1:99:de:60:4f:e8:39:5e:9f:a3:
bd:2e:98:08:3d:81:18:81:7f:27:7c:4f:75:f7:a3:
21:b6:83:d0:7a:51:50:f6:c9:c3:66:ed:dc:cc:ac:
00:dc:e6:0f:9a:9d:40:51:07:fa:5c:e3:c5:a7:41:
72:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6A:19:E1:4B:1C:EA:BB:83:D7:F1:B4:88:90:E2:DF:55:4A:DE:1D
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/990151E8B36E11EE9E7064C0775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.45.0/24
Signature Algorithm: sha256WithRSAEncryption
37:2d:51:c1:8d:ca:ea:93:e2:95:bc:c2:91:33:f8:f1:64:fc:
2f:13:85:b9:b6:21:5a:02:9a:75:e6:20:22:16:5e:97:7d:19:
19:75:98:6f:20:44:f9:36:0a:c6:2a:00:07:8a:9c:89:ed:95:
94:e8:53:ad:b9:8a:10:2d:25:6a:60:5c:60:de:02:9f:80:73:
2a:25:81:1f:8d:02:a7:f5:d1:5e:fa:50:4d:06:e5:4d:a9:1b:
a7:dd:8c:bc:6f:9c:3f:b5:f9:a4:3a:16:25:3d:69:19:19:8d:
6f:bc:6b:7b:5d:47:bb:3b:37:59:d9:6b:4f:90:70:49:a7:a6:
ca:f2:ed:38:b9:2b:f7:32:9a:53:70:7b:ba:0d:ce:6d:5c:e5:
3c:46:05:10:ab:ba:b7:47:fd:44:a9:8c:8d:0e:f0:d0:60:16:
4d:50:e6:83:50:80:ed:f8:e4:f9:8e:c8:69:8e:46:d4:e6:90:
d0:75:7b:37:89:59:e3:9f:dc:19:fe:a4:b1:99:71:ac:b8:69:
cd:89:b6:4c:a7:08:cd:c7:75:2f:17:df:50:8e:c7:fd:d7:4f:
4f:9e:81:70:66:69:13:04:cd:30:bf:b7:04:bc:bd:28:b9:96:
54:ae:3d:e4:14:66:fd:ad:78:d8:d1:b6:26:6d:83:15:11:57:
c2:e5:70:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 22:06:19 2024 by rpki-client on console-ams.rpki-client.org