Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C1206A50083911EE9188227D4AD9E6FC.roa
File: C1206A50083911EE9188227D4AD9E6FC.roa (raw, json)
Hash identifier: RbtEey6qJlPbo6rDz61aUNpK18Q9nhTYMTteWsGtH4o=
Subject key identifier: 10:90:27:4E:04:99:85:CA:B2:92:24:76:4E:E9:29:39:B4:A9:D9:97
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0BF2
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C1206A50083911EE9188227D4AD9E6FC.roa
Signing time: Sun 11 Jun 2023 09:24:24 +0000
ROA not before: Sun 11 Jun 2023 09:24:21 +0000
ROA not after: Wed 11 Jun 2025 09:24:21 +0000
asID: 834
IP address blocks: 102.165.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3058 (0xbf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 11 09:24:21 2023 GMT
Not After : Jun 11 09:24:21 2025 GMT
Subject: CN=648592c8-4104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e5:48:40:0c:d2:23:b7:ea:bc:9a:5d:77:97:
e1:37:2e:c7:e8:dc:3a:ac:fd:a4:d0:21:ca:a1:8b:
79:e2:7b:35:19:aa:e5:60:76:d6:f2:61:64:11:ba:
96:85:87:8a:5d:ce:ca:06:61:15:02:74:00:e3:16:
c5:4a:fd:a6:53:6d:ed:f3:8d:c6:6b:67:77:83:26:
03:3d:e6:9c:1d:dd:aa:98:8f:ae:fc:e5:39:83:29:
ce:da:e4:30:34:fb:6e:0a:7d:bc:45:53:86:14:7a:
ab:54:ea:6e:44:d3:e8:cf:2d:0f:64:1f:c7:b7:21:
5a:af:4b:6d:a2:8a:da:60:37:a1:f2:cf:11:3a:ae:
19:cb:7f:a6:54:d1:8d:9b:61:f5:ed:59:5a:1d:3c:
1c:51:9a:7c:98:94:89:ce:b5:75:a4:aa:cc:d8:75:
d3:c9:3d:58:06:b4:cd:80:8a:16:d5:cb:5a:58:1e:
2e:0e:d2:9a:8d:69:68:5b:f2:70:18:df:d2:44:ec:
31:db:47:a5:c4:8f:71:46:cb:7f:8b:a8:60:f2:69:
2a:f0:94:bb:0b:51:6f:50:cc:29:75:cf:c5:d4:02:
35:60:e5:32:e0:df:dc:e4:da:38:c5:f8:f7:a6:64:
53:7a:c4:1a:1f:a5:01:4d:6c:bb:49:08:16:2c:37:
a0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:90:27:4E:04:99:85:CA:B2:92:24:76:4E:E9:29:39:B4:A9:D9:97
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C1206A50083911EE9188227D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.59.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:cc:b4:e7:1a:d9:99:10:4f:b1:bc:18:06:fd:b8:32:97:2d:
56:fd:db:1a:ba:1f:0f:5b:00:a3:84:30:3b:18:41:29:de:23:
0d:b2:bb:18:d9:37:17:97:f1:54:81:5f:73:1c:ed:25:5a:39:
30:b0:8c:75:05:00:03:8e:f4:cd:59:c3:ec:62:9d:67:16:ed:
a1:39:4a:db:20:f1:4a:78:b9:dc:a6:f7:0a:59:4c:e1:c3:e6:
4e:a9:da:93:58:27:e8:91:57:f1:a6:99:32:fe:0c:3d:24:0e:
fc:50:49:be:de:43:18:fb:59:18:10:bc:56:27:d1:96:56:dd:
45:52:26:10:1a:19:44:e8:26:f4:52:f8:3e:d0:a7:8c:28:ad:
36:42:3d:4e:03:1d:4e:08:44:ad:6d:66:b2:a3:1f:e3:16:86:
4b:a6:b0:a4:c2:08:66:f5:01:81:35:1d:dc:09:81:cd:83:e5:
01:e0:70:f4:2a:49:2b:26:65:e4:c2:8b:92:69:d8:7c:3d:fb:
5b:e3:43:cc:94:5b:bc:c3:7d:3a:1e:0c:9c:71:8a:ec:b2:b0:
85:98:4c:28:94:23:75:27:ac:d4:8f:18:a5:a2:c2:ac:1e:42:
79:f1:b4:2a:e2:c8:98:ee:78:66:8d:8d:84:8a:b6:77:74:98:
92:b0:4f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org