Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FF3D60FCB69711ED9EB4BBC8F1222468.roa
File: FF3D60FCB69711ED9EB4BBC8F1222468.roa (raw, json)
Hash identifier: AmV41UKlW1DFMfenR7R5sr7QUqta4SbaF89tviqHr6Q=
Subject key identifier: 9E:75:41:2B:8A:4B:B8:62:56:DA:50:44:76:59:81:89:1A:7F:00:21
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0AA7
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FF3D60FCB69711ED9EB4BBC8F1222468.roa
Signing time: Mon 27 Feb 2023 12:12:26 +0000
ROA not before: Mon 27 Feb 2023 12:12:22 +0000
ROA not after: Thu 27 Feb 2025 12:12:22 +0000
asID: 834
IP address blocks: 102.165.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 29 Apr 2023 11:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2727 (0xaa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 27 12:12:22 2023 GMT
Not After : Feb 27 12:12:22 2025 GMT
Subject: CN=63fc9e2a-f645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:85:27:5a:b4:0c:79:16:9a:3b:38:db:cb:2d:
fb:fb:63:67:24:77:73:09:6a:02:a2:fc:a0:a7:be:
51:83:50:e8:aa:49:d0:6d:35:a4:00:ed:41:13:25:
be:72:db:b8:e2:63:1e:34:98:08:7f:dc:40:0b:35:
cb:c3:67:38:4e:3d:c2:9d:1a:06:c9:6a:34:c5:0b:
61:c2:0a:73:45:c0:e9:f3:f0:98:f1:e7:3a:38:6e:
c2:13:fe:84:36:89:3e:ac:0c:2f:e2:cb:98:35:d7:
c2:ac:fb:01:09:65:2b:10:ad:9d:61:0c:ea:28:11:
8f:96:3c:c0:51:5b:64:6e:04:4f:a8:be:20:61:c9:
67:28:35:49:26:3a:0d:ed:9e:37:f5:a9:1c:45:c8:
b1:73:d0:0d:05:ed:e9:f4:58:57:5c:54:86:12:7e:
b1:38:3e:e3:01:63:00:0d:27:a5:3c:be:f3:c7:49:
08:28:b0:76:49:b7:79:bc:8d:be:b9:e2:4e:26:82:
00:6c:e9:19:0e:ba:b4:b9:c6:06:8c:38:78:93:89:
a6:8a:e0:5b:f1:06:63:1f:18:25:9e:e4:4b:36:68:
56:02:f8:7b:95:fd:84:8a:9e:4b:40:b2:46:ef:67:
b1:b9:ff:fe:7d:20:44:30:c7:c4:35:e9:a5:06:4d:
03:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:75:41:2B:8A:4B:B8:62:56:DA:50:44:76:59:81:89:1A:7F:00:21
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FF3D60FCB69711ED9EB4BBC8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.47.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:31:32:52:59:29:66:76:1d:3e:54:ce:39:95:3c:e4:05:f6:
bc:23:86:61:b3:f6:80:7f:4b:06:23:71:a8:dd:df:4e:a6:3d:
ab:b2:cd:43:b8:d7:b3:a1:b4:d9:8c:90:79:35:bf:56:59:d8:
59:76:a8:d3:dd:b1:5e:29:35:a8:98:a3:bb:c4:75:bf:8a:ef:
7f:c5:b2:ec:48:f3:18:f2:25:c8:d1:20:ee:a0:77:16:fd:b7:
a2:c7:10:ba:f4:1a:4c:5a:4f:e0:4b:11:b6:2f:27:39:19:c6:
7a:66:e3:f7:12:94:1d:8f:68:4c:f9:50:c6:c6:59:13:8d:96:
e9:6d:44:16:7d:2e:e7:02:08:d7:69:6d:c3:eb:27:0d:81:72:
7d:ac:88:42:6f:53:08:51:88:c8:33:aa:cc:8b:88:7d:a5:14:
8a:96:6a:79:09:65:d2:32:97:4c:81:56:08:ee:11:b3:64:c7:
66:61:c3:79:13:db:25:ce:8d:a0:6b:32:c0:4c:7e:50:e2:99:
1a:00:11:6a:99:af:6e:60:ae:cb:9b:92:2a:7d:21:6b:a9:5b:
d1:79:04:05:95:39:67:f7:5b:a6:0b:a7:d0:cc:5c:46:8f:6c:
39:78:f9:61:37:34:d7:6e:8f:2d:7b:56:f0:76:e6:e0:bd:1f:
d3:6b:6e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org