Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F88F7A7E79AB11EEB3F6CA2E4AD9E6FC.roa
File: F88F7A7E79AB11EEB3F6CA2E4AD9E6FC.roa (raw, json)
Hash identifier: +/NqIbLTDorjHKIXx9CkvjFUlFqIpUD5gb0f2Cqlzic=
Subject key identifier: 07:92:FF:27:0E:0C:11:AD:26:5D:4E:21:7E:06:39:35:1B:88:E4:9C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0E21
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F88F7A7E79AB11EEB3F6CA2E4AD9E6FC.roa
Signing time: Thu 02 Nov 2023 18:16:41 +0000
ROA not before: Thu 02 Nov 2023 18:16:38 +0000
ROA not after: Fri 29 Nov 2024 18:16:38 +0000
asID: 13926
IP address blocks: 102.165.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Mar 2024 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3617 (0xe21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 2 18:16:38 2023 GMT
Not After : Nov 29 18:16:38 2024 GMT
Subject: CN=6543e789-3250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ad:95:fe:99:da:bf:c1:35:c5:34:83:6a:a2:
e1:62:91:8f:2e:5b:1a:d3:af:a5:5d:8b:09:11:f3:
98:e0:ec:21:99:50:ed:26:6b:ef:3d:40:2c:23:f1:
e6:5e:98:a0:48:a5:62:00:a4:d8:ee:08:60:21:a0:
21:e8:b6:b3:dd:e7:6e:13:f0:d3:85:c6:9c:41:fd:
aa:b1:8e:6c:81:5a:8d:58:ce:76:f7:b5:d0:fc:b8:
34:76:3a:be:e7:dd:ae:d5:1a:ff:24:21:2c:75:0e:
c0:15:dd:66:dc:a9:1a:bd:82:e8:46:30:55:be:a5:
77:75:b3:d1:35:3b:b2:c9:b3:77:a7:4a:18:71:56:
5a:2e:96:9a:88:ee:80:04:9a:df:43:f3:d4:fb:72:
11:00:14:8a:76:ad:df:d8:78:83:bf:df:65:bb:27:
57:73:5f:77:37:df:99:f4:e8:29:b1:b3:1b:bb:7a:
c6:7a:00:4e:03:4a:75:ce:31:36:05:10:0b:c7:46:
05:d3:aa:b6:0b:1b:39:c4:c0:aa:56:81:20:59:8a:
34:15:8e:05:13:3e:d8:b1:53:0d:18:1f:50:c8:9b:
14:e6:86:bd:d5:2e:72:67:85:9d:56:82:e1:cb:12:
33:2a:f3:6f:cc:ec:1d:c3:ed:b1:60:d3:4f:c8:aa:
92:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:92:FF:27:0E:0C:11:AD:26:5D:4E:21:7E:06:39:35:1B:88:E4:9C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F88F7A7E79AB11EEB3F6CA2E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.59.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:f6:13:8e:83:57:a3:ed:c7:4c:9b:f1:a0:de:86:37:19:d6:
cb:d0:67:28:b9:4a:5b:85:48:10:9a:5c:f0:e9:15:05:34:33:
61:c6:1d:20:5d:7d:0e:45:26:f9:20:e5:36:85:9b:80:db:da:
f0:bc:8f:ee:63:78:fc:71:1e:ed:9b:24:0e:9e:d6:c9:a4:c0:
84:56:f7:10:71:c2:4b:57:0f:72:fd:6b:07:c6:bc:fb:05:f5:
3e:13:a4:8b:b0:a6:df:00:1e:6c:f9:fb:26:7d:f8:ec:30:98:
f8:3c:8b:81:ec:f9:46:34:8b:a0:ac:c3:54:fd:d4:1c:3c:08:
e9:37:75:0a:1c:ba:92:e4:f5:45:58:3b:4e:0d:64:2e:21:2e:
f9:c5:91:66:82:bc:d6:f7:51:94:6b:f2:14:d2:42:c7:71:a2:
0e:74:df:7d:3a:3f:19:e8:f9:70:67:95:60:61:36:53:02:d2:
89:32:86:40:b1:2b:10:1c:77:54:5f:38:30:c4:b5:38:37:e2:
00:c9:d2:fe:0c:dd:00:e5:1a:34:a2:c7:a7:2d:11:f5:83:d8:
3a:6b:52:dc:f1:bd:63:25:d5:96:1f:e7:d6:d6:2f:1c:30:49:
49:36:e2:05:28:9f:eb:aa:2e:19:d8:d9:78:92:18:02:ee:aa:
53:74:b6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 2 19:43:24 2024 by rpki-client on console-ams.rpki-client.org