Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F8DA5E9E493311ED99D0D382F1222468.roa
File: F8DA5E9E493311ED99D0D382F1222468.roa (raw, json)
Hash identifier: 8e+fI94A79XFUA8+/NsZcmXUzqZmE77Aob8DZy2ff6k=
Subject key identifier: 21:2E:24:C0:57:BC:2B:FA:6D:FB:50:D8:C0:8E:BA:36:AC:25:75:80
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0848
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F8DA5E9E493311ED99D0D382F1222468.roa
Signing time: Tue 11 Oct 2022 07:11:49 +0000
ROA not before: Tue 11 Oct 2022 07:11:45 +0000
ROA not after: Fri 11 Oct 2024 07:11:45 +0000
asID: 174
IP address blocks: 102.165.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Oct 2022 12:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2120 (0x848)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 11 07:11:45 2022 GMT
Not After : Oct 11 07:11:45 2024 GMT
Subject: CN=63451734-b702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:a9:9a:d9:78:e8:bf:04:de:5e:9d:66:43:
e7:db:ac:ac:32:e1:a8:37:8a:a0:2c:51:49:bc:f4:
0d:04:57:35:c9:73:4f:62:7d:b5:46:c8:7b:c1:bc:
87:e0:f3:25:83:e4:d0:83:3d:ed:85:a5:58:74:4c:
61:0b:5e:8d:f2:4f:bf:a6:f2:f8:67:11:72:53:7f:
e6:8c:3e:38:8c:79:ec:5b:4f:77:de:c0:a7:1a:c3:
61:03:03:f2:f3:65:26:e9:46:c5:48:d9:8f:34:f1:
ef:8b:d6:e6:aa:38:f8:c6:da:90:5d:1c:97:41:2c:
79:e6:46:24:c4:b0:b2:29:ba:08:e1:28:78:9d:94:
64:85:0b:3c:43:f9:23:e7:b8:b6:0f:3e:c2:28:a1:
fc:fe:c2:25:e5:d2:41:e8:b4:fb:ef:15:d8:9f:89:
02:09:c6:07:95:d9:12:30:7d:a8:6e:71:f0:7f:92:
80:18:aa:c2:9b:8e:21:50:13:6f:e6:22:d0:e4:a8:
2a:59:fd:94:a4:3f:9c:65:45:d3:e6:af:9f:ad:5f:
27:2b:2b:c5:a7:e0:98:0d:96:bd:85:2c:98:ff:53:
1f:5d:4f:f6:8f:3e:fd:94:de:1d:9e:b1:9e:c8:4f:
ea:de:a7:a4:97:2a:80:a2:13:18:ff:a0:a7:99:74:
9d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2E:24:C0:57:BC:2B:FA:6D:FB:50:D8:C0:8E:BA:36:AC:25:75:80
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F8DA5E9E493311ED99D0D382F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.48.0/24
Signature Algorithm: sha256WithRSAEncryption
79:cf:b7:65:15:27:e2:9c:eb:bc:41:03:e8:29:47:e4:31:8d:
22:0c:4c:49:3e:fc:37:fa:b2:73:88:a9:a1:fe:db:89:a7:80:
b3:40:54:ee:7c:f5:9a:0f:27:88:15:58:f8:9d:bd:3b:d4:d5:
50:7e:b2:bf:d8:72:9b:c5:dd:a1:1f:8a:7f:3b:ee:47:48:da:
7e:d9:86:95:8d:50:3a:d9:9b:ed:e8:e9:64:08:11:82:d7:31:
18:6d:9f:96:48:fc:cb:ef:4f:f0:d7:a8:6a:b9:67:8f:f8:bf:
85:21:a6:c8:a5:8a:73:bc:20:c3:56:21:39:93:57:09:96:eb:
86:0b:04:47:fe:4a:28:fb:4a:72:44:86:42:56:4a:ed:e6:a3:
94:3d:41:c9:ce:18:b6:32:13:9f:ff:83:75:f2:44:bd:48:2b:
74:7a:bb:c2:4f:d2:b0:89:ab:6c:17:0e:64:29:cb:51:41:28:
e2:c2:e0:78:cf:fc:59:d2:a3:58:a3:01:19:8e:22:b8:35:f8:
e9:52:65:73:fe:da:1d:4e:8b:ab:54:22:2c:71:79:44:37:12:
36:96:80:43:76:b0:ab:47:06:60:f6:69:b1:0a:42:f9:49:90:
cc:d4:5d:d7:82:6b:73:7d:01:68:99:08:c5:05:6c:f0:4a:cc:
07:9f:08:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:40 2024 by rpki-client on console-ams.rpki-client.org