Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D86944C8EA8A11E9A6FA7081F8AEA228.roa
File: D86944C8EA8A11E9A6FA7081F8AEA228.roa (raw, json)
Hash identifier: 9TGH5b7HzhRD7Ra3Igc19qe+FOIl2raCI4iT6jElMNs=
Subject key identifier: 0A:9D:B8:23:F1:F7:28:D2:16:B9:FF:AE:DD:B5:04:C8:0F:63:CC:53
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: A1
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D86944C8EA8A11E9A6FA7081F8AEA228.roa
Signing time: Wed 09 Oct 2019 11:49:27 +0000
ROA not before: Wed 09 Oct 2019 11:49:23 +0000
ROA not after: Tue 09 Oct 2029 11:49:23 +0000
asID: 61317
IP address blocks: 102.165.33.0/24 maxlen: 24
102.165.34.0/24 maxlen: 24
102.165.35.0/24 maxlen: 24
102.165.36.0/24 maxlen: 24
102.165.37.0/24 maxlen: 24
102.165.38.0/24 maxlen: 24
102.165.39.0/24 maxlen: 24
102.165.48.0/24 maxlen: 24
102.165.49.0/24 maxlen: 24
102.165.50.0/24 maxlen: 24
102.165.51.0/24 maxlen: 24
102.165.52.0/24 maxlen: 24
102.165.53.0/24 maxlen: 24
102.165.54.0/24 maxlen: 24
102.165.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Feb 2023 10:59:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 9 11:49:23 2019 GMT
Not After : Oct 9 11:49:23 2029 GMT
Subject: CN=5d9dc947-7387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0d:c5:63:df:49:cf:af:3f:ba:f2:da:52:ed:
d9:41:f8:1c:72:3c:09:0d:63:db:69:ff:79:f6:5c:
0f:58:97:c4:ff:12:f7:19:ac:f6:e9:d3:73:27:cb:
f6:04:10:cf:dc:f3:c9:1b:07:d5:df:9e:47:62:82:
ec:02:f3:34:11:61:ab:fe:27:b3:6a:02:13:5d:30:
2a:e4:20:c5:f7:d0:d4:ca:8e:81:e4:42:1a:96:5e:
f6:30:29:ef:33:7d:94:e3:df:87:e3:9d:4d:3b:fa:
54:dd:3f:44:42:2d:7f:bf:52:f1:2f:59:6d:1a:f5:
b0:53:83:2a:29:97:d9:9d:57:42:38:bf:c8:d5:6f:
9f:4c:98:17:e4:7a:0a:b4:8b:15:6f:62:14:5d:b1:
64:d9:84:96:07:38:1f:7c:4a:90:e0:4c:36:a6:ec:
af:95:dc:47:e5:1c:b5:f0:01:fe:2c:b3:78:7d:6b:
35:00:a4:94:66:7e:37:e6:d9:71:58:3b:10:3f:e3:
83:e0:cf:53:8c:c8:63:ca:cc:d4:6d:01:d3:5d:8d:
20:ac:5f:01:94:97:bc:32:bf:28:ac:29:71:db:4d:
90:83:38:98:b2:71:9e:1e:b5:90:97:26:34:ce:20:
30:b0:91:a9:c6:14:f8:52:01:c6:56:3c:0c:c6:90:
27:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9D:B8:23:F1:F7:28:D2:16:B9:FF:AE:DD:B5:04:C8:0F:63:CC:53
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D86944C8EA8A11E9A6FA7081F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
102.165.33.0-102.165.39.255
102.165.48.0/21
Signature Algorithm: sha256WithRSAEncryption
33:a9:e8:0a:24:f4:44:20:bd:aa:a3:be:ae:02:23:ab:7b:99:
00:d6:79:24:0a:2e:54:55:c1:c0:33:08:77:15:81:b0:7d:6b:
da:01:9e:57:7c:d4:0c:5f:73:5f:fe:72:cf:3d:e2:5b:ed:b7:
aa:b2:cc:04:f0:75:14:5e:e5:ee:2b:bf:cb:53:7b:92:a5:95:
6e:57:ab:73:bf:39:a5:a2:39:09:81:bb:5b:14:27:e2:52:69:
d1:b4:0f:a2:bb:3c:6a:e6:43:67:bc:8e:6d:be:11:55:94:4f:
37:6d:db:6f:a2:99:f2:19:f2:62:90:a8:b3:d8:b7:be:64:bf:
e9:22:2b:a3:98:3a:71:99:32:95:2b:a2:32:4e:5d:64:3a:1c:
6d:88:a9:fe:7f:0d:32:60:51:f6:5e:30:fb:28:0a:a9:36:a7:
1f:25:81:75:b8:99:e5:b3:db:d7:5b:23:60:8b:46:c4:3c:32:
e5:5f:8f:f5:ea:ed:a1:c8:c2:06:24:dd:34:b3:7a:de:73:a2:
42:95:00:54:5d:3e:e3:c7:14:79:8e:cd:8e:f9:9e:ed:0a:56:
58:16:9c:f0:f3:7d:f8:36:93:4c:3c:98:40:e4:95:e3:22:21:
78:5e:47:24:d4:93:5e:ef:da:b3:61:60:94:5b:21:82:81:f6:
11:49:d5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org