Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ABF08EB4D8B611EEAF36D1B2775412E6.roa
File: ABF08EB4D8B611EEAF36D1B2775412E6.roa (raw, json)
Hash identifier: pYsy8yyCpbkmihfXGvWIcjYMG+cdkALkj+6t3OBUGwE=
Subject key identifier: F9:53:B9:14:C6:86:54:B8:67:70:BD:5B:43:2C:93:49:41:2D:FF:9B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0F9F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ABF08EB4D8B611EEAF36D1B2775412E6.roa
Signing time: Sat 02 Mar 2024 17:02:37 +0000
ROA not before: Sat 02 Mar 2024 17:02:34 +0000
ROA not after: Mon 02 Mar 2026 17:02:34 +0000
asID: 834
IP address blocks: 102.165.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Mar 2024 06:41:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3999 (0xf9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 2 17:02:34 2024 GMT
Not After : Mar 2 17:02:34 2026 GMT
Subject: CN=65e35bad-dfa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:65:6c:d1:95:6d:cf:f2:06:ff:79:a6:c4:6f:
fd:12:d6:71:83:bd:0a:e8:7c:e8:c5:96:2d:2d:34:
9b:7e:3a:dd:6c:14:b3:d2:48:c9:d1:cc:4a:c1:d5:
47:51:4c:2b:9e:07:b4:3a:75:99:db:81:3d:a3:6f:
51:37:5b:5b:6c:8e:6a:fd:2a:84:6e:97:fc:6e:ce:
60:5b:0a:ab:7b:88:7b:86:41:ef:0a:21:d9:33:a9:
8b:47:a2:dd:6e:43:6c:95:7d:ff:e7:3c:23:79:d8:
4e:26:66:a8:68:12:db:76:00:16:68:77:02:90:73:
e9:3a:ce:06:60:b4:f5:00:41:39:8b:59:66:7d:00:
aa:c0:dc:36:38:62:4a:9a:fa:87:34:33:bc:78:2c:
e9:1f:b6:88:d0:00:cc:dd:9e:ab:d9:87:66:8c:b8:
f3:f8:9c:6d:dc:f0:87:22:d5:02:45:8a:e9:40:eb:
ab:38:3c:4f:78:04:05:7b:39:ec:5a:06:93:c1:c7:
b2:63:5d:cf:1e:7a:2a:01:08:bf:ef:0b:6d:f0:9d:
c1:89:ec:df:ed:14:b1:68:77:c5:ab:fe:a1:11:21:
a8:5b:36:f3:b2:b6:c4:74:b7:ba:d4:10:d6:2f:1f:
9e:0c:70:f5:99:9b:5a:29:39:87:b7:83:51:91:27:
18:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:53:B9:14:C6:86:54:B8:67:70:BD:5B:43:2C:93:49:41:2D:FF:9B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ABF08EB4D8B611EEAF36D1B2775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.59.0/24
Signature Algorithm: sha256WithRSAEncryption
63:35:54:fd:97:e3:5a:65:68:89:8a:5f:f1:a8:5a:16:2d:16:
6e:e1:5d:85:af:9f:6e:df:9f:96:48:cd:88:dc:61:4b:84:ff:
37:bc:a6:d6:53:45:31:f0:fc:cd:b7:0c:e0:6a:e9:1e:95:58:
78:aa:83:ef:af:e2:be:41:73:d7:7d:c1:49:c2:f2:54:f9:40:
22:80:ee:86:a5:84:24:c6:d6:23:4b:43:1b:f0:33:8e:49:16:
14:d7:53:a2:a3:b3:92:12:b5:37:c7:77:0e:55:b8:06:83:3b:
8e:06:a8:e7:9b:a4:29:11:44:4b:87:66:2c:55:64:c5:fc:18:
37:5a:ee:d8:f9:10:1e:1e:d9:d0:16:d7:3b:c3:6b:2e:57:4b:
2d:0a:21:03:6f:2c:d5:cc:46:9b:62:8c:66:e6:ee:f5:08:27:
f3:98:17:c6:7c:11:d5:c6:15:d2:34:bf:b8:2c:8a:3d:28:e8:
25:dc:6f:54:02:cc:20:91:a3:29:85:67:77:c1:33:8c:a0:5c:
45:83:f6:24:5c:07:c2:b9:72:1a:a3:68:c1:dd:6b:22:32:18:
4a:ae:bf:8c:61:9d:74:21:8b:6f:7e:b9:c3:4b:85:a1:ab:a0:
89:f3:78:20:4b:dd:58:97:64:f0:44:bb:1f:7c:c3:4b:a9:9c:
a2:61:32:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 7 11:06:30 2024 by rpki-client on console-ams.rpki-client.org