Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9EB7B7B4496311EE87992A424AD9E6FC.roa
File: 9EB7B7B4496311EE87992A424AD9E6FC.roa (raw, json)
Hash identifier: 6k0HJpiTu5r0tn+UMuTzjbUInrCxqHX5sciJCjzFxYI=
Subject key identifier: F4:EE:95:95:04:E1:D9:D9:FF:F0:44:4B:DC:49:7A:15:53:F1:18:32
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0D0E
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9EB7B7B4496311EE87992A424AD9E6FC.roa
Signing time: Sat 02 Sep 2023 07:37:51 +0000
ROA not before: Sat 02 Sep 2023 07:37:48 +0000
ROA not after: Wed 04 Sep 2024 07:37:48 +0000
asID: 834
IP address blocks: 102.165.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3342 (0xd0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 2 07:37:48 2023 GMT
Not After : Sep 4 07:37:48 2024 GMT
Subject: CN=64f2e64f-264d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0c:fe:e9:be:ca:49:5e:d2:1c:a1:fd:e1:52:
8d:26:9d:31:67:54:66:bd:7e:16:99:a6:70:9b:d1:
9c:1f:8d:f2:6c:1b:95:d1:6d:b7:1e:6c:7c:3d:8f:
11:4c:9f:f6:8d:e5:77:89:b9:f1:68:c8:11:dd:23:
29:6e:60:bd:bc:cf:69:8a:b1:03:ec:29:03:b6:35:
da:f2:e8:84:2a:01:00:c0:75:d3:f6:da:8e:22:ef:
a6:48:e2:33:ec:ef:32:e8:d2:2f:b9:f6:c8:f0:b3:
5a:fb:18:92:0a:33:5c:5c:1a:fe:be:5a:fb:5a:01:
e8:27:17:ae:55:d2:a7:32:0d:cd:b1:4f:fc:13:fb:
32:43:ce:ee:4a:67:97:0a:27:d1:31:f3:78:95:7d:
91:cf:aa:19:4e:cf:0d:d3:65:4f:6c:22:36:a4:6e:
f3:45:3e:fb:5b:a2:00:cd:d1:e7:16:f1:f9:5e:42:
60:a2:cb:82:0c:4a:e7:60:6c:d1:3d:5f:ab:9f:fb:
63:1e:48:c4:4d:6a:7e:2a:47:b8:55:84:bf:83:fe:
99:ca:42:5a:a4:88:3f:7d:77:d7:59:ae:9e:55:c3:
f3:03:78:66:34:f8:ae:26:75:88:71:4a:90:a2:fe:
96:30:d2:04:15:ab:27:7e:06:11:cb:72:9f:f7:c2:
bc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EE:95:95:04:E1:D9:D9:FF:F0:44:4B:DC:49:7A:15:53:F1:18:32
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9EB7B7B4496311EE87992A424AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.45.0/24
Signature Algorithm: sha256WithRSAEncryption
68:03:90:50:ba:ac:3f:cb:30:46:12:6d:aa:66:b6:85:b4:8f:
bc:83:be:60:32:b7:01:5d:1e:15:c3:64:39:77:0c:83:e3:b6:
69:b6:35:2f:be:d9:7d:d8:a1:61:3e:09:32:b1:c6:c0:52:b9:
77:fd:01:54:8a:b1:f1:da:07:59:92:06:ff:8c:dd:80:4f:62:
75:fd:74:11:bd:50:2e:37:4b:95:e9:43:1a:38:93:0f:79:83:
2f:b7:56:ca:8b:85:a7:a8:c3:97:d7:c7:8e:3c:b2:0c:3c:86:
fc:10:7f:3a:55:04:b3:89:f6:f9:ca:79:3d:35:ee:18:e7:31:
2e:a4:0d:78:bb:17:be:3a:73:c6:55:34:80:ba:a3:a6:10:27:
73:99:ec:f3:42:d4:e4:4f:34:21:f5:72:02:10:43:41:5a:f6:
7c:5e:22:55:60:b5:b4:38:16:fa:db:1a:32:97:47:a8:58:53:
ac:05:42:d8:03:ec:ff:aa:38:1a:35:f8:2c:74:b9:83:9b:6d:
c3:a5:61:9c:94:e7:81:2a:ce:91:7c:fc:18:bb:01:a1:37:43:
fb:4b:a7:cd:24:24:88:dc:7a:45:1f:26:bb:a8:9b:cc:7e:e0:
bb:d7:88:0f:9d:72:83:39:18:75:b1:07:30:78:e2:53:5a:7e:
fc:ff:20:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 12 17:42:07 2023 by rpki-client on console-fra.rpki-client.org