Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/99FDE80CF09811EDBA71341E4AD9E6FC.roa
File: 99FDE80CF09811EDBA71341E4AD9E6FC.roa (raw, json)
Hash identifier: dIlc7bL0G5+4qXiVVO+RsNOU/iG1kM3nsu4hkeWr0Tw=
Subject key identifier: 8C:6A:D4:57:63:80:58:59:8C:58:39:72:35:37:BB:33:07:90:29:69
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0B6B
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/99FDE80CF09811EDBA71341E4AD9E6FC.roa
Signing time: Fri 12 May 2023 07:42:53 +0000
ROA not before: Fri 12 May 2023 07:42:47 +0000
ROA not after: Sun 11 May 2025 07:42:47 +0000
asID: 211585
IP address blocks: 102.165.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 Jun 2023 09:24:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2923 (0xb6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 12 07:42:47 2023 GMT
Not After : May 11 07:42:47 2025 GMT
Subject: CN=645dedfd-35ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:91:1d:a7:38:56:63:93:69:79:0f:2e:af:f6:
71:ad:24:8c:ab:08:0e:3f:dc:b3:ae:d6:10:b0:c5:
18:ae:07:a4:8c:05:e8:cd:89:62:61:34:a4:5a:76:
5d:50:1d:27:0e:43:74:af:b9:1e:ef:c9:df:7c:52:
9b:2c:6a:0f:8c:fa:41:85:65:a3:0f:00:0c:19:e7:
9b:d7:fb:3c:d8:8e:0f:bf:f1:d7:49:8c:b0:4c:d3:
5f:0a:b0:f7:90:01:46:5c:76:b6:ab:75:cd:29:60:
81:3d:6c:b1:e9:e2:66:aa:a7:eb:84:f0:36:70:ac:
85:b0:f7:3b:b6:2d:57:87:3b:93:07:e6:fd:a1:dc:
04:ec:22:6a:09:53:b9:31:e0:de:84:44:6e:00:69:
0c:f5:aa:f8:d0:dc:95:16:36:3a:c2:52:27:d9:36:
9e:e6:bc:18:f6:cf:85:89:27:e3:9e:d8:f7:00:80:
5c:be:a6:2b:ea:c3:9f:fc:53:4d:41:26:65:7f:d4:
57:ee:fa:49:81:44:99:d6:7b:8c:71:fb:c0:70:08:
35:0b:46:38:6c:2e:47:81:2f:17:33:30:ef:50:6c:
3f:88:72:8f:54:33:6f:7a:3f:2e:39:37:72:2c:1c:
bd:48:50:65:4d:4b:2b:15:75:97:ba:f7:bd:1f:a9:
c1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6A:D4:57:63:80:58:59:8C:58:39:72:35:37:BB:33:07:90:29:69
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/99FDE80CF09811EDBA71341E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.59.0/24
Signature Algorithm: sha256WithRSAEncryption
78:58:86:c3:e9:99:2f:02:83:b7:f2:ff:06:0f:b8:0c:fa:42:
20:4e:06:b3:b5:ef:04:95:1c:26:fa:c7:da:ca:24:f3:3f:ec:
87:17:37:16:23:1c:ab:ec:85:e9:b7:d7:71:b1:aa:3e:0e:ec:
2e:5b:6e:84:5e:ba:9a:3f:cd:6f:d3:27:75:0f:a5:3a:6e:cd:
45:0f:3c:3e:5e:b7:b3:1b:01:88:25:e0:ab:c0:44:68:f8:0d:
7f:93:aa:cb:bd:af:ff:b1:83:f6:24:6c:41:d6:93:42:88:e4:
06:b5:90:d5:dc:c5:e6:e5:6d:19:40:cb:ae:49:73:5f:82:2b:
b0:48:57:29:b1:8a:bc:32:10:2e:08:15:5b:1d:a2:09:23:80:
cc:e3:52:0c:df:58:eb:75:fa:93:71:20:56:ab:80:21:c4:16:
50:d4:e8:a2:9c:fc:2f:47:ef:d0:d1:dd:e7:7e:d7:72:aa:1e:
64:76:5d:60:37:62:f9:ac:5a:25:67:da:76:45:0d:86:51:00:
76:b7:db:8d:28:4c:35:b4:72:04:fa:6c:21:ea:de:b5:ed:b1:
c5:1d:18:cc:e4:3d:ef:eb:4b:14:44:e4:0b:ee:3f:df:6f:6e:
80:c3:62:e8:4b:38:04:ff:c7:e7:c0:38:16:bb:ac:08:9c:30:
96:2b:f3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-ams.rpki-client.org