Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D3493F30B63611EE86BA7F56775412E6.roa
File: D3493F30B63611EE86BA7F56775412E6.roa (raw, json)
Hash identifier: FkPQYeo8NIT0lClJIGch5OJba6o12rnJoi8dUT5yGmE=
Subject key identifier: 76:1B:AB:75:05:04:BC:08:89:87:4D:2B:E8:36:F3:BD:DA:4D:C7:35
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0F0F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D3493F30B63611EE86BA7F56775412E6.roa
Signing time: Thu 18 Jan 2024 19:21:49 +0000
ROA not before: Thu 18 Jan 2024 19:21:43 +0000
ROA not after: Sat 17 Jan 2026 19:21:43 +0000
asID: 197842
IP address blocks: 102.165.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 11:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3855 (0xf0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 18 19:21:43 2024 GMT
Not After : Jan 17 19:21:43 2026 GMT
Subject: CN=65a97a4c-5527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e4:d1:27:c2:87:e4:30:f3:be:61:00:e9:c3:
f3:0d:b0:68:ec:59:9d:7e:6e:e5:df:7a:71:c0:c1:
e4:cc:85:7d:0c:9c:9c:9a:f6:eb:2d:af:cb:f2:f0:
55:7f:29:dc:3a:5a:32:44:56:7d:d6:7f:d2:4a:6a:
1e:7a:cd:eb:a5:30:3e:10:47:19:b8:ed:70:91:90:
c3:01:f5:df:fc:96:64:7f:6e:a7:61:aa:3d:15:e3:
29:b8:74:52:7b:ca:f9:b7:23:6c:53:10:01:c7:2a:
d2:d9:be:2f:16:4d:fc:8b:67:09:0e:c6:06:73:31:
f0:58:f4:50:47:f3:96:8c:a9:17:30:12:75:ff:d5:
8b:e3:70:67:b1:aa:ba:57:4c:d7:f7:af:60:e0:be:
37:3f:af:87:c7:48:87:9b:05:12:5d:28:39:01:bf:
e9:0a:90:bd:f6:17:2f:a0:60:56:e1:b0:78:45:75:
b0:02:17:fb:72:1a:0f:af:95:5f:85:a0:e1:84:5b:
09:5a:be:ff:3a:59:96:c5:eb:70:8d:85:48:87:d8:
82:a4:59:93:4c:1c:ff:13:d1:0c:6c:27:ea:33:bc:
a2:01:3f:d5:08:24:85:18:f0:3a:5a:ce:bc:53:4b:
82:16:c4:29:69:9a:b8:99:1e:1d:de:0b:e4:9d:f3:
e9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1B:AB:75:05:04:BC:08:89:87:4D:2B:E8:36:F3:BD:DA:4D:C7:35
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D3493F30B63611EE86BA7F56775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.45.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:7c:39:33:8a:97:ff:d3:2c:9e:e5:f8:b1:27:c1:ef:3d:51:
51:70:59:71:c3:55:14:45:78:68:19:87:81:6f:89:00:44:2e:
58:ea:2e:7f:eb:76:9f:b3:15:b9:c0:81:53:61:47:66:8b:09:
1f:3e:1b:e1:ab:77:15:bb:57:ec:9a:e5:90:06:a5:5d:28:18:
d4:11:f1:e0:7c:52:79:1f:37:09:9b:5c:66:83:10:f8:15:60:
87:be:e6:c4:9d:8c:fc:f3:7a:19:2a:98:1c:87:c1:5d:22:fa:
62:bb:90:b1:f5:d1:fd:72:5c:33:a6:f1:07:8e:e2:04:93:1b:
c8:62:40:bd:08:cc:9f:cb:12:3a:27:40:b7:a6:4b:55:49:0c:
45:65:3d:1f:b7:85:88:3d:aa:95:26:44:11:e2:77:81:42:4b:
6e:6b:81:69:b9:66:5a:05:41:8c:a5:d5:64:2a:14:94:a3:ff:
c6:26:50:db:21:45:3d:7d:3f:1a:98:40:32:e6:87:75:c9:33:
60:1b:99:6c:0d:f2:76:9b:98:15:8d:2e:8d:93:4d:9e:ee:59:
f4:42:63:2c:78:d4:6f:48:ac:f1:d4:80:bf:b8:71:45:14:c2:
4f:dd:0c:07:2a:b6:42:fd:d4:e3:f2:8e:2a:d9:4c:4a:46:e0:
83:47:43:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 14:46:16 2024 by rpki-client on console-fra.rpki-client.org