Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9EC8DC7E518411EDA799EA94F1222468.roa
File: 9EC8DC7E518411EDA799EA94F1222468.roa (raw, json)
Hash identifier: dA+dXiCmS/RBDdxKNUggWEjIC5dlcEgtqf+q3RkpPMo=
Subject key identifier: F5:E4:0D:FA:73:00:32:81:7E:A7:3A:94:F1:A9:C0:8E:87:8F:05:C0
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0866
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9EC8DC7E518411EDA799EA94F1222468.roa
Signing time: Fri 21 Oct 2022 21:09:16 +0000
ROA not before: Sat 22 Oct 2022 21:09:12 +0000
ROA not after: Tue 22 Oct 2024 21:09:12 +0000
asID: 212238
IP address blocks: 102.165.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 10:54:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2150 (0x866)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 22 21:09:12 2022 GMT
Not After : Oct 22 21:09:12 2024 GMT
Subject: CN=63530a7c-f3c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:be:4f:1f:83:c3:d8:d0:dd:bf:65:c7:96:11:
da:2d:e6:ee:75:f0:76:2f:75:b9:83:da:c0:16:6d:
8b:03:5b:ae:5d:00:94:23:2e:73:98:49:e9:08:7f:
1d:96:f0:a0:f0:4f:2f:1d:21:bb:0d:49:17:ce:34:
a8:bd:b0:3e:fc:6d:fc:e5:b1:21:fd:9f:fa:fe:f9:
77:28:e3:c4:06:e2:06:85:02:53:c4:13:2e:b8:8b:
6a:ae:fe:f6:bb:50:58:82:73:2c:60:c5:42:cf:f2:
4f:49:e3:78:12:d6:f8:7a:af:43:51:89:5a:c3:ec:
46:79:ba:03:7c:d3:8d:10:ea:ff:a4:07:0d:a3:d0:
26:c4:c7:66:45:c8:6a:2e:4f:01:39:1e:a5:db:40:
79:f0:f9:77:1e:6b:08:20:23:eb:2b:5f:fd:81:69:
d8:1d:10:df:9f:74:b1:15:a4:58:3a:d5:b2:99:c3:
cb:2d:98:d5:81:08:db:92:eb:6a:4d:8d:28:ab:b1:
63:9c:61:de:75:53:79:f7:4f:de:ae:21:80:e4:bd:
ea:12:5b:3d:c3:65:eb:95:1b:5a:d1:71:47:2d:0d:
33:98:f6:9f:a3:4c:7e:77:8e:97:fa:f4:08:5d:dd:
54:18:d8:e4:f3:e7:86:6a:44:22:3c:88:48:cb:e8:
2c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E4:0D:FA:73:00:32:81:7E:A7:3A:94:F1:A9:C0:8E:87:8F:05:C0
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9EC8DC7E518411EDA799EA94F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.29.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:8e:27:02:e2:0d:08:be:62:b9:af:c5:6a:34:a4:fb:ff:28:
bf:59:f8:ff:cf:d7:ec:90:e2:d2:5a:6d:3f:da:7a:ea:5f:94:
b4:dc:fe:8d:a0:88:06:d6:7a:85:32:02:56:72:07:77:0b:76:
eb:40:8f:95:4b:95:c8:02:dc:51:21:1e:d7:3e:fd:6d:d4:01:
61:71:dc:c6:7e:b1:58:05:2b:1b:3b:63:dd:45:84:0c:53:5d:
54:c3:32:4b:bd:56:93:5d:05:cb:9a:0c:df:a5:87:02:f1:cf:
f7:0e:46:7c:4a:98:f7:bc:16:9b:c9:3f:5f:be:d0:d8:67:7d:
8f:7b:65:59:23:11:4a:94:2b:64:3b:77:a1:b1:cd:3b:f1:c1:
b1:06:99:62:14:18:8d:49:84:97:ee:e5:5f:72:f4:99:51:7b:
53:c3:6a:da:88:d8:ed:d6:d3:8e:18:77:27:bc:3b:46:87:02:
c7:12:7f:80:84:ff:81:e4:0c:76:b0:91:61:9f:65:dc:7d:28:
33:da:95:80:12:2c:7e:2a:c2:92:0b:13:51:14:28:00:8f:81:
ed:f3:3c:58:d1:ba:a5:f8:ca:af:f7:40:de:8e:65:28:81:28:
ec:27:9f:9c:77:95:03:0d:51:4d:19:fd:e5:03:ce:36:7f:f4:
45:6e:d4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 17:14:54 2024 by rpki-client on console-fra.rpki-client.org