Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A3345F184D7311EE98BE97334AD9E6FC.roa
File: A3345F184D7311EE98BE97334AD9E6FC.roa (raw, json)
Hash identifier: iXetFzhdK5LqpTcccKg3T9wczq9iJuZ1IeoBSeL6gHM=
Subject key identifier: EA:55:EE:A7:F8:FD:8D:4A:D0:D4:4C:C5:7B:F3:A4:2E:1B:D8:09:2E
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0D21
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A3345F184D7311EE98BE97334AD9E6FC.roa
Signing time: Thu 07 Sep 2023 11:42:35 +0000
ROA not before: Thu 07 Sep 2023 11:42:32 +0000
ROA not after: Sun 07 Sep 2025 11:42:32 +0000
asID: 834
IP address blocks: 102.165.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Sep 2023 12:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3361 (0xd21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 7 11:42:32 2023 GMT
Not After : Sep 7 11:42:32 2025 GMT
Subject: CN=64f9b72b-9fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:82:2f:21:3d:b9:9a:78:81:72:c0:00:77:cc:
fe:12:ac:24:da:21:ee:30:41:c7:41:ad:07:e3:21:
3a:44:2b:ae:4a:63:e4:6b:7c:1a:dd:3a:6d:c6:ed:
0a:e2:f9:b9:c2:a0:e9:89:59:79:34:56:5c:a1:ea:
ce:86:a3:b9:e6:fd:46:aa:a1:a6:81:9a:36:ac:ca:
9d:d2:96:6c:a0:93:1e:c3:6c:6b:9b:76:fe:18:46:
26:05:2a:2d:27:a6:b5:cf:e4:7d:38:b8:f1:f9:9a:
d2:81:c3:11:4c:e0:65:cf:b6:d8:72:9a:08:ba:fe:
b6:33:53:76:c8:d6:1e:2f:28:ea:da:04:f1:29:20:
6f:d0:bc:0e:40:3d:b3:dc:45:38:b2:44:16:af:93:
24:95:fd:ba:49:d2:98:a2:4b:fe:92:48:be:ff:76:
e4:fc:11:15:d4:f8:7c:3c:65:f4:ca:4f:a8:b8:82:
f5:6c:12:67:2a:3f:11:29:be:f9:da:fe:c3:7e:2e:
f6:17:7c:7b:27:f9:47:c1:54:15:fe:18:fb:bd:06:
2d:97:1a:1d:ad:06:0b:56:2b:b7:1a:74:bf:85:49:
1f:c9:26:04:d5:50:63:af:9c:fd:61:87:39:61:00:
3a:d8:04:11:06:79:b4:02:95:bd:94:a0:72:5a:2c:
9c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:55:EE:A7:F8:FD:8D:4A:D0:D4:4C:C5:7B:F3:A4:2E:1B:D8:09:2E
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A3345F184D7311EE98BE97334AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.57.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:b6:b7:1a:eb:f0:b7:32:0c:81:4e:04:96:50:05:0f:9c:c4:
65:e3:e0:70:87:a4:b0:b6:25:6a:55:57:fc:79:f3:65:80:46:
93:d4:47:31:23:c3:6a:3f:89:45:fb:ea:48:57:0c:19:a0:54:
00:2a:3d:ee:9a:81:e0:d5:6c:31:5d:d3:ab:9b:e7:e7:3b:ab:
55:28:49:da:82:b8:43:2d:5f:dc:3a:b2:67:32:4f:19:d1:86:
63:a3:dd:ee:53:ec:9e:59:29:7a:5a:9c:16:52:b8:d4:69:9c:
53:ae:22:28:5e:e6:88:7e:d1:e9:00:6b:b8:2f:3c:84:39:7a:
2b:bb:a0:be:26:13:6f:cc:6e:1e:b2:f4:ae:2d:dc:45:5b:ee:
07:c0:71:a3:eb:e0:67:55:c8:5e:65:3b:a2:c2:7d:81:f8:7f:
ec:ec:8d:17:7e:69:1e:b2:37:49:2c:ab:31:ec:ae:6c:bd:13:
27:d1:05:27:29:d7:28:3b:b2:aa:5d:fa:a9:11:d6:cb:74:17:
ec:73:7d:b6:e3:23:4a:5b:08:fa:31:61:0a:f1:62:60:53:64:
ec:88:0c:2f:d4:36:9d:68:0f:c4:eb:87:41:8c:b4:2e:28:1a:
4b:c5:86:d0:8c:ca:37:e3:2b:87:b8:28:5a:da:67:b3:5f:3d:
6c:17:1f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:40 2024 by rpki-client on console-ams.rpki-client.org