Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A6681C0C496211EEA842633F4AD9E6FC.roa
File: A6681C0C496211EEA842633F4AD9E6FC.roa (raw, json)
Hash identifier: 3iVQGwUx+zxyUMzpbMRywzvhIBa6jPznKvY2Jf2Qjiw=
Subject key identifier: 76:7E:04:4B:B0:C1:BE:D4:66:87:B6:0F:47:D7:10:15:F9:63:E4:A8
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0D0B
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A6681C0C496211EEA842633F4AD9E6FC.roa
Signing time: Sat 02 Sep 2023 07:30:54 +0000
ROA not before: Sat 02 Sep 2023 07:30:51 +0000
ROA not after: Tue 03 Sep 2024 07:30:51 +0000
asID: 834
IP address blocks: 102.165.43.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3339 (0xd0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 2 07:30:51 2023 GMT
Not After : Sep 3 07:30:51 2024 GMT
Subject: CN=64f2e4ae-a7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0b:4e:25:7d:f4:05:41:27:2f:34:16:69:b0:
31:07:dc:61:24:15:04:76:59:c6:3b:ad:a1:ff:16:
d9:0c:bf:57:32:97:ee:ea:c7:58:81:b5:fb:c5:00:
7d:bb:4e:05:f7:4b:a1:a3:3a:77:56:e1:ab:38:ec:
5d:26:24:0d:85:e2:ea:26:ec:f5:4f:94:06:a7:4d:
17:58:ff:16:93:12:70:91:64:24:35:5b:20:61:d3:
39:92:10:ae:ff:4c:2b:22:05:26:9f:ea:a3:56:f5:
87:5d:44:c4:54:21:51:21:a6:a2:7a:49:82:fc:04:
06:8e:f8:33:73:0f:d9:43:f4:1d:f2:c7:31:7e:ba:
48:04:da:73:2e:d1:a3:b7:c7:d3:6a:96:f6:3b:d1:
17:b2:87:e8:88:31:1a:58:67:88:d3:46:bd:4d:83:
09:be:20:e9:fe:d6:d4:f1:d6:fb:aa:b2:66:3c:5e:
b7:40:88:53:da:78:91:c3:23:31:4d:51:c1:f1:df:
55:a1:a5:d2:53:d6:b4:ee:da:75:08:07:93:c0:ee:
7a:b1:94:ed:d7:bf:67:0d:7b:35:ba:f6:71:17:97:
17:17:0a:65:e3:34:5e:8b:11:00:5d:5b:d9:62:06:
5b:95:20:cf:56:3e:42:0d:61:d1:d8:a7:50:9a:82:
46:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7E:04:4B:B0:C1:BE:D4:66:87:B6:0F:47:D7:10:15:F9:63:E4:A8
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A6681C0C496211EEA842633F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.43.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:6b:73:9b:d8:c7:87:b3:4d:b7:b2:fb:8d:2b:11:2c:eb:c9:
f9:98:1b:e9:ea:79:d1:54:b6:f0:4d:5f:35:bf:e6:25:55:fb:
70:eb:8d:fa:51:c8:2e:ee:86:87:75:45:3f:10:34:6a:92:8d:
44:34:c3:25:d9:b9:f5:47:2f:c9:9c:6b:ae:12:19:32:94:4c:
f2:cb:88:98:6e:73:cd:c0:be:af:ab:67:8b:7e:9e:bd:36:eb:
d0:66:46:32:75:a5:d7:c2:6c:ff:d9:50:23:15:fa:dd:c6:5f:
3d:a2:3c:63:37:f2:5c:b3:b4:0d:1a:92:0a:25:d1:b8:c5:9b:
6f:2b:ff:b3:c2:5d:f8:1f:2c:27:19:d0:8f:ee:6c:6f:c8:ca:
be:93:cb:7c:c8:6b:2b:85:91:22:6c:be:97:1c:da:73:5e:ca:
4e:22:30:9d:e2:08:47:20:31:9f:de:10:76:69:18:a0:f7:c5:
c7:a9:4e:11:1b:80:ae:3a:c9:f3:d5:97:c4:f8:7c:54:02:49:
e3:6a:79:ab:d2:42:01:68:cf:2d:2c:3c:85:80:83:ce:68:2e:
b8:8d:68:5a:f9:cc:be:08:b3:4e:d8:21:d4:d5:b1:00:95:73:
ec:fb:f8:34:a8:4f:b8:73:be:de:67:20:06:ed:f9:18:1f:11:
1d:47:5e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 18:38:31 2023 by rpki-client on console-fra.rpki-client.org