Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F358638E045F11EEB0B5F0624AD9E6FC.roa
File: F358638E045F11EEB0B5F0624AD9E6FC.roa (raw, json)
Hash identifier: AcsG60Vpu6kX8fQhV1+MohzBYqrWh+3uZBDsueG3QJw=
Subject key identifier: 42:65:DA:23:9A:5E:03:46:C2:41:EC:47:2F:6B:B7:3C:5E:FE:29:F3
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0BD2
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F358638E045F11EEB0B5F0624AD9E6FC.roa
Signing time: Tue 06 Jun 2023 11:47:45 +0000
ROA not before: Tue 06 Jun 2023 11:47:41 +0000
ROA not after: Mon 09 Jun 2025 11:47:41 +0000
asID: 6939
IP address blocks: 102.165.57.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3026 (0xbd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 6 11:47:41 2023 GMT
Not After : Jun 9 11:47:41 2025 GMT
Subject: CN=647f1ce0-fc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:54:10:3b:e7:45:21:9e:b8:63:33:5d:01:e6:
41:a3:5c:77:15:d3:61:87:ef:51:4c:1b:74:d6:7d:
ab:7a:2b:d0:ee:d3:03:b6:d1:97:a3:37:bf:02:62:
ee:a9:be:81:6e:6b:c8:91:3e:e9:5d:5b:c4:2d:30:
2a:69:77:8a:e4:49:ba:14:79:d8:bb:a9:95:55:f4:
e8:62:3d:8b:8a:e5:a4:e6:46:56:fa:04:a1:d8:ba:
1d:42:0c:c9:ea:0a:5e:c2:f8:ba:93:b3:a9:19:9a:
b6:07:65:ce:cb:c7:b6:68:7c:5e:b7:69:03:73:7b:
5b:60:47:f2:4a:4c:13:f1:5e:84:af:7f:14:2b:14:
a3:a1:fd:86:76:a0:ee:0e:86:c1:56:b2:7f:0e:66:
73:5f:ef:d4:55:4f:60:1f:70:8e:4e:39:37:be:2b:
8a:60:51:e2:bf:f5:12:af:5f:1a:3d:e2:49:7b:e1:
1f:e3:d3:c8:17:28:9a:b2:2b:fd:c5:99:72:ba:55:
43:8d:b7:70:f4:80:07:67:af:f3:14:71:ca:ea:cd:
3b:f4:db:6e:1c:29:80:30:19:f3:8d:b8:8a:eb:75:
b8:d2:cc:bb:85:51:8d:eb:38:f8:21:ac:21:d5:e6:
e5:16:d2:7c:54:3d:86:c5:51:84:4b:f7:c3:d5:17:
df:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:65:DA:23:9A:5E:03:46:C2:41:EC:47:2F:6B:B7:3C:5E:FE:29:F3
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F358638E045F11EEB0B5F0624AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.57.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:4c:e9:0a:18:be:3d:db:a4:cf:e7:75:1b:fb:bd:d3:e3:d1:
2c:21:8c:a3:6c:f3:9f:bc:ad:93:f4:51:44:b1:e3:1a:a8:9a:
57:38:2e:de:a1:3b:aa:95:9f:ce:ce:87:66:52:dc:30:9e:9c:
cb:2c:74:18:83:8a:39:a6:2e:55:cf:73:02:91:a8:a2:9f:2e:
b6:36:d6:cc:52:4f:32:21:3a:ed:03:53:27:c9:e4:38:2f:53:
f4:46:47:dc:e8:e6:06:3f:48:f9:9e:8a:a0:56:b1:b3:18:be:
02:c0:5f:cf:d3:e7:d6:e1:e0:10:79:69:77:51:23:1a:2f:a7:
8a:32:ba:9c:90:f0:d7:1a:7e:85:02:52:51:e0:6e:72:67:b6:
7d:c5:8c:f0:34:93:09:92:99:d4:99:a9:15:3e:39:b4:ea:b3:
ef:0c:62:44:c5:0d:72:79:f6:17:10:e8:d0:81:9c:3a:46:02:
d7:ce:5c:c0:82:d9:33:43:a8:52:ae:0e:ff:ab:eb:27:23:3b:
e1:25:9b:54:c8:1c:8f:5a:a6:1f:62:48:4c:b2:69:fe:c5:2c:
c3:ec:6c:82:7d:03:ef:0e:0f:cf:3a:66:82:59:dd:1f:44:f5:
08:3e:8b:16:4b:0a:1c:fc:14:c1:ef:2e:77:ff:0f:a6:27:9f:
7b:35:47:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 7 12:10:54 2023 by rpki-client on console-fra.rpki-client.org