Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D6030BA204CA11EE9DBDDA1E4AD9E6FC.roa
File: D6030BA204CA11EE9DBDDA1E4AD9E6FC.roa (raw, json)
Hash identifier: HuBwSG7Mruj31SDg2NpSz2G3g077Rkq89oVeIvHK9xo=
Subject key identifier: 52:A7:B9:67:C0:87:A1:E7:4D:46:7D:94:AD:1A:99:80:4E:E0:C5:06
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0BD6
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D6030BA204CA11EE9DBDDA1E4AD9E6FC.roa
Signing time: Wed 07 Jun 2023 00:32:52 +0000
ROA not before: Wed 07 Jun 2023 00:00:48 +0000
ROA not after: Sat 07 Jun 2025 00:00:48 +0000
asID: 834
IP address blocks: 102.165.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Jun 2023 10:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3030 (0xbd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 7 00:00:48 2023 GMT
Not After : Jun 7 00:00:48 2025 GMT
Subject: CN=647fd033-41cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8f:2e:a8:18:70:12:77:cc:7b:ac:a0:5c:2a:
4e:51:4f:ef:ab:b7:33:21:0c:7a:d6:67:03:0d:4a:
34:b5:bc:ba:ca:9d:7a:07:4c:a4:4d:a1:8e:0c:cc:
61:a9:21:99:c5:11:d8:f8:9c:78:88:48:12:d0:de:
4b:e2:a1:1a:a7:65:a2:56:c2:38:55:60:25:a6:5e:
03:67:e4:0e:ca:66:c4:16:75:50:64:46:06:ae:2f:
60:f3:8a:a2:f0:86:61:87:c5:8c:61:d8:cb:f1:00:
38:39:11:a4:53:78:11:6e:56:e9:2b:7b:13:5f:0d:
3f:02:45:02:74:76:53:8b:90:d8:31:40:60:57:60:
c9:48:b6:bf:9a:7b:52:08:6f:c0:cf:45:e8:8e:7c:
f7:67:b7:c3:9a:e6:bb:d0:cd:d4:8c:40:8a:c3:7f:
96:44:34:2e:a6:68:54:a7:f2:5c:80:92:80:34:7d:
60:aa:b6:fc:9d:0b:4b:a2:4d:39:f6:e4:a5:51:db:
c8:8f:b4:0a:7e:25:56:cf:b1:45:0e:02:d7:ae:94:
24:7a:92:98:16:0d:f9:73:01:5a:0f:80:58:f7:00:
1e:0d:bc:fa:f1:c1:65:ce:ad:43:5e:de:73:a7:85:
e4:05:2e:1e:5a:0d:79:cd:cc:ef:1d:b4:ea:ce:6c:
ac:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A7:B9:67:C0:87:A1:E7:4D:46:7D:94:AD:1A:99:80:4E:E0:C5:06
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D6030BA204CA11EE9DBDDA1E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.40.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:e9:a1:ff:17:2c:f7:f9:14:3f:7a:62:7d:cc:f1:09:7e:82:
58:a7:d0:68:5c:7d:44:2b:90:5a:a4:f5:fa:7b:12:6e:59:fa:
ab:39:36:54:19:81:89:2e:86:7a:0d:20:80:08:0e:42:c9:4c:
7c:83:3a:1f:cd:35:c3:9a:e9:69:fe:11:5f:d0:7d:9f:01:89:
f3:80:bd:ba:3b:5a:5c:a9:fa:e5:f8:cc:7c:36:92:b6:c4:ec:
29:c8:4f:b7:f5:31:d8:96:55:93:46:b4:3e:e9:26:66:ef:18:
24:2b:22:b4:34:5e:65:2a:4d:10:19:63:99:2b:2b:e1:37:a8:
e8:2d:12:51:47:37:0b:61:49:82:2f:82:3b:43:ac:07:0f:51:
1d:1a:05:43:e1:a5:3f:f6:7e:43:fd:f9:0b:b1:07:27:4b:8d:
d0:d9:58:fa:8d:fe:8f:68:aa:71:6f:64:3c:c7:67:1e:29:3e:
a8:e5:ee:05:72:9e:94:e8:9a:7e:e2:1a:8f:93:ab:1e:66:8b:
5a:ac:b2:f4:cf:ce:6b:63:dd:04:13:de:43:c6:f4:a4:5d:14:
ee:cb:c7:81:59:02:b4:e8:9d:f4:2f:8a:d7:5f:80:51:5f:7b:
ab:7f:47:d0:7e:56:76:39:6d:34:96:3d:a1:9c:77:6b:c5:ed:
68:39:57:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org