Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E6364E7CB36F11EE92A0B1C2775412E6.roa
File: E6364E7CB36F11EE92A0B1C2775412E6.roa (raw, json)
Hash identifier: XgZ4YV+zvE3cGr6Cs507NtvISkdn4xnth74k5DiuNNY=
Subject key identifier: AA:4C:60:C6:A5:FF:28:C3:BC:E4:D0:D5:22:BA:E0:C9:8D:97:95:4E
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0EEC
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E6364E7CB36F11EE92A0B1C2775412E6.roa
Signing time: Mon 15 Jan 2024 06:32:48 +0000
ROA not before: Mon 15 Jan 2024 06:32:45 +0000
ROA not after: Thu 15 Jan 2026 06:32:45 +0000
asID: 834
IP address blocks: 102.165.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 06:59:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3820 (0xeec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 15 06:32:45 2024 GMT
Not After : Jan 15 06:32:45 2026 GMT
Subject: CN=65a4d190-e512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:38:c7:0c:c4:f8:b9:8c:df:d2:b0:9d:f1:eb:
74:4e:f0:ec:4b:07:97:1a:da:fe:2e:fc:cf:95:6c:
60:44:cc:74:af:6c:70:f5:23:97:37:db:3b:05:62:
39:a7:49:25:1c:74:fd:a6:71:a3:a0:22:1e:53:47:
34:93:47:b1:77:b8:5d:b6:60:fd:e1:de:54:51:73:
41:d9:b6:65:db:a9:1b:1c:2a:b0:ee:fd:5d:ca:54:
e3:d3:64:b1:a1:65:5a:61:18:cb:fe:a4:7f:78:d8:
30:5d:1f:f2:9c:ef:c8:95:0b:ec:c6:9a:39:5c:5b:
7d:c2:f1:28:5a:e5:6c:e7:16:28:5b:3e:17:d9:1c:
4d:ac:eb:3c:9b:9b:1c:be:3c:00:81:41:a1:c3:dc:
2f:d8:fb:27:b3:44:d4:50:50:bc:79:4d:56:dd:16:
5d:49:90:95:ca:26:33:8c:b9:8c:37:d3:0a:08:08:
db:b3:a0:06:84:e2:bb:58:35:f1:2c:1a:21:c0:31:
df:f5:93:56:36:d9:29:72:72:ae:b8:52:43:49:10:
6a:32:45:a1:79:04:5c:62:d4:54:85:ba:7b:b4:60:
96:2b:e6:48:07:3e:94:ab:b4:4d:c1:e6:76:33:0f:
6e:2b:a1:66:e8:d4:e1:8a:6b:93:e9:a3:68:8d:68:
ed:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4C:60:C6:A5:FF:28:C3:BC:E4:D0:D5:22:BA:E0:C9:8D:97:95:4E
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E6364E7CB36F11EE92A0B1C2775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.44.0/24
Signature Algorithm: sha256WithRSAEncryption
67:77:a8:41:36:43:4c:73:b1:e3:9d:0c:57:0b:23:6e:6d:8f:
c4:1b:a4:6a:d0:42:43:72:3b:9b:0f:43:ad:78:6a:2d:5e:9a:
9c:38:09:03:bf:20:aa:c0:1a:d3:a9:8f:68:53:d2:d8:c9:ba:
2f:46:d2:89:0f:fa:9c:b8:fd:57:d3:18:16:02:a5:2d:47:42:
22:9d:48:fd:4b:e5:14:fd:fc:7c:46:1a:a9:32:ef:34:45:e5:
f9:eb:86:d8:0f:17:9b:8c:c4:f7:9a:e6:9b:0c:5c:6b:b7:8f:
e3:5d:7e:7e:29:de:7c:0d:ec:01:41:c2:79:e0:da:26:68:b8:
58:19:d2:03:92:e6:a1:e7:e0:42:93:e5:fb:bb:42:be:43:0c:
a1:16:57:6c:eb:04:bc:de:24:40:76:99:69:9d:02:81:6e:df:
9f:fe:da:12:4b:c0:70:6b:6b:66:d1:cc:e4:ee:19:5f:b4:07:
ab:1c:bd:ab:24:d3:70:29:a0:e9:f5:4e:1d:1d:8a:08:c5:7a:
1b:09:df:99:48:4f:ad:58:15:eb:f7:f6:09:4a:e4:97:1f:80:
57:11:97:1a:84:85:8c:0d:c5:82:cf:d2:48:c9:b9:a4:c4:7c:
01:08:ae:4a:4e:43:ee:4d:be:77:44:13:9c:7e:86:94:fa:29:
16:47:b0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org