Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B1CEFC8CDDAC11ECA28B2EC3F1222468.roa
File: B1CEFC8CDDAC11ECA28B2EC3F1222468.roa (raw, json)
Hash identifier: x3qR1F9NWTCTFPQeo5fvfJLkEb5+3p11TJMTj+3JrGE=
Subject key identifier: 09:5C:87:BA:8C:BC:D6:77:91:D9:EB:DF:7C:B5:D0:E4:6C:C3:89:49
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0673
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B1CEFC8CDDAC11ECA28B2EC3F1222468.roa
Signing time: Fri 27 May 2022 11:03:53 +0000
ROA not before: Fri 27 May 2022 11:03:48 +0000
ROA not after: Mon 27 May 2024 11:03:48 +0000
asID: 61317
IP address blocks: 102.165.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Mar 2024 16:44:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1651 (0x673)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 27 11:03:48 2022 GMT
Not After : May 27 11:03:48 2024 GMT
Subject: CN=6290b019-72d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:4e:98:ad:ee:ca:85:d0:ca:b1:b6:fa:0c:c7:
f1:40:43:7f:9c:c0:ed:53:66:8c:f2:c7:7f:13:95:
b7:bb:33:9f:2d:15:9c:45:60:04:54:d6:a2:fa:33:
02:59:e6:03:ca:7f:94:ec:03:05:b9:c4:eb:ad:0c:
33:6a:40:7a:ad:26:26:ed:55:a0:04:39:e9:b5:0f:
18:09:6d:1d:1d:66:b1:05:7b:22:29:3f:b4:f1:34:
79:19:84:20:13:fb:02:6a:99:db:1d:e1:7d:8a:8f:
07:e0:03:f3:30:ca:fe:fe:1e:e8:a8:d2:94:28:88:
91:5d:19:a5:1a:7d:92:4f:c5:8e:73:de:db:c8:9f:
0d:b6:2a:d0:36:79:bd:19:8f:4e:c8:bb:d2:98:b7:
f4:a6:38:7f:7b:c6:85:c0:63:6e:3a:53:96:5b:e4:
8a:fc:dc:34:72:69:89:55:5a:68:87:aa:20:50:04:
3f:09:20:d0:f7:69:6d:3a:88:83:a1:be:55:57:ae:
06:05:10:89:6e:ea:e5:5c:88:ed:ff:d0:e8:56:bd:
0c:da:a5:e6:11:88:ca:d0:47:2e:74:c3:42:32:45:
bf:73:72:06:30:d7:bb:12:70:b7:b5:87:6f:86:17:
62:77:0d:26:37:39:0f:c2:7b:19:59:bb:df:12:af:
0a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5C:87:BA:8C:BC:D6:77:91:D9:EB:DF:7C:B5:D0:E4:6C:C3:89:49
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B1CEFC8CDDAC11ECA28B2EC3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.15.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:50:54:a1:c0:e0:f4:08:73:18:b6:d5:5c:e6:8d:7e:77:a5:
43:e6:bc:46:b6:f8:3d:50:ad:0a:c7:2a:96:ac:40:aa:0f:af:
7d:c0:ce:e4:31:36:ef:e2:82:8d:c8:7f:50:92:df:05:13:27:
1f:50:94:5d:98:16:b3:ac:e7:f5:a0:31:bc:95:c3:57:d9:65:
b1:51:80:31:8c:8c:78:0b:e6:e6:01:c0:89:0d:68:38:9d:4d:
8b:d3:ed:cf:47:74:7c:84:8c:02:ec:72:a2:cd:33:36:9f:64:
d0:36:4c:37:7b:ee:41:4c:e6:a2:36:8b:6a:d9:e9:0b:cb:c2:
2f:40:be:55:94:76:ed:e9:88:9f:c6:bf:68:30:61:7d:83:2e:
ab:50:a4:bb:eb:83:08:8f:9f:22:89:d8:a1:95:ed:73:8c:fc:
2d:d8:b2:7f:be:4d:aa:0c:60:90:5c:5d:16:a4:5e:6d:35:52:
7b:f5:1d:63:76:03:0c:2e:4c:84:77:e6:83:ce:a9:f7:81:e4:
ee:7b:09:32:0d:24:1b:4a:d9:77:2d:0c:60:84:05:05:15:be:
ff:4e:7b:e9:11:10:70:5f:84:8f:20:be:7b:93:e1:bb:9e:73:
07:54:1c:24:37:44:10:a0:61:16:84:8e:d3:1b:80:f9:b0:d0:
15:63:f8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 26 20:00:21 2024 by rpki-client on console-ams.rpki-client.org