Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A18AF646C1BC11EE9BF3C267775412E6.roa
File: A18AF646C1BC11EE9BF3C267775412E6.roa (raw, json)
Hash identifier: NOwiF4eCXGh8xbm0LoOG7PpPm4iLbij1LVWBWEo/W/A=
Subject key identifier: 34:C5:25:AD:44:52:BA:92:22:E3:B7:D1:6B:31:28:89:43:A8:BF:9A
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0F2E
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A18AF646C1BC11EE9BF3C267775412E6.roa
Signing time: Fri 02 Feb 2024 11:17:20 +0000
ROA not before: Fri 02 Feb 2024 11:17:17 +0000
ROA not after: Mon 02 Feb 2026 11:17:17 +0000
asID: 834
IP address blocks: 102.165.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Feb 2024 08:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3886 (0xf2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 2 11:17:17 2024 GMT
Not After : Feb 2 11:17:17 2026 GMT
Subject: CN=65bccf40-1094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:38:fd:3f:75:f2:7c:2e:c8:ea:11:dd:01:8d:
63:5a:8d:f7:15:d3:ff:a7:08:5f:f7:b9:cb:6b:7d:
ae:32:9b:0c:6d:73:d0:38:80:0a:90:6c:ed:79:0e:
bd:dd:0f:11:08:7e:d0:c0:7b:85:91:de:db:a1:d0:
f9:a6:64:f7:8e:1e:c1:e3:63:c6:1f:c5:4d:75:e4:
07:e9:58:a6:38:cd:5a:ca:a8:40:6d:95:c0:9d:be:
5e:da:3e:af:d8:c0:b7:f9:0d:f0:f8:a9:16:2f:d6:
44:8c:dd:91:7e:40:d0:0b:6e:79:ff:07:3b:3c:f1:
a0:f9:5a:a5:91:6c:42:e1:0f:ac:91:69:93:3c:56:
83:4a:0c:d2:c1:8a:c8:b6:c9:f7:23:20:39:61:5f:
5c:55:b0:66:c0:b2:16:f3:2c:e9:52:f6:3d:c2:54:
2f:53:ec:f0:a7:1c:54:99:cd:49:15:19:e8:7e:6f:
07:0c:77:bf:99:dc:e3:37:bc:ee:35:29:f7:ce:1a:
a9:bb:ec:0e:41:4f:82:0d:03:4d:97:d7:df:75:e9:
80:dd:2f:87:e0:3e:a2:a2:d1:b4:eb:92:2c:e5:54:
c8:55:b4:25:a6:fd:97:90:0a:09:7f:bc:c7:13:80:
c4:af:f7:38:a9:7d:e4:2a:00:c2:c4:5d:b2:bc:0a:
22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C5:25:AD:44:52:BA:92:22:E3:B7:D1:6B:31:28:89:43:A8:BF:9A
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A18AF646C1BC11EE9BF3C267775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.45.0/24
Signature Algorithm: sha256WithRSAEncryption
57:81:bf:bd:ea:20:90:f1:f9:07:bc:84:f4:f9:f9:b3:89:79:
50:f2:84:16:f0:89:7b:57:cf:3c:02:37:eb:16:50:d8:2d:19:
3b:c0:52:d3:19:e8:ef:10:03:6f:b1:9e:52:3e:84:43:23:4d:
01:81:55:10:53:be:05:b4:b3:4a:3c:86:56:b5:0b:7d:c7:bd:
02:95:78:e5:5b:da:7c:36:22:50:ab:81:ed:f6:d5:14:6f:68:
79:75:5a:59:81:80:ec:99:e7:34:7e:b5:7e:58:36:4d:83:0e:
fb:4b:ed:e4:bd:11:ac:bc:76:6a:10:a1:a4:fb:37:64:af:3c:
5b:a8:88:b7:61:00:2a:a8:5b:2f:0f:42:37:6f:dc:35:1a:7d:
eb:db:29:bc:f8:ac:e9:bd:c4:9c:57:60:95:c4:5d:c2:af:29:
71:ad:31:0b:94:f3:dc:d3:90:71:c2:0b:c7:fc:dc:ce:4a:a3:
29:81:03:a1:15:6e:75:2f:e8:f7:23:12:17:19:a3:1b:83:e7:
8d:33:56:2b:df:9d:6f:f1:f1:04:b5:99:73:3e:f5:28:0d:ac:
39:e8:66:6a:b2:26:86:0b:0e:2e:8c:39:1f:bf:7d:cc:dd:83:
ad:cd:39:ab:b5:45:a2:70:a4:74:3d:a2:56:0e:b0:be:01:e1:
5c:6b:3c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 5 11:36:18 2024 by rpki-client on console-ams.rpki-client.org