Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/DFDF1E382D0E11EEAA362D7A4AD9E6FC.roa
File: DFDF1E382D0E11EEAA362D7A4AD9E6FC.roa (raw, json)
Hash identifier: QckxFNh1SbpdBDOVwbNl5GnBfanC+JjO9j5dKio5GVw=
Subject key identifier: D2:EE:16:DC:37:DF:DE:9F:19:64:C1:30:BC:25:D4:8F:41:1B:F7:86
Certificate issuer: /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial: 02AC
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/DFDF1E382D0E11EEAA362D7A4AD9E6FC.roa
Signing time: Fri 28 Jul 2023 06:20:40 +0000
ROA not before: Fri 28 Jul 2023 06:20:37 +0000
ROA not after: Wed 27 Jul 2033 06:20:37 +0000
asID: 37725
IP address blocks: 102.220.125.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 684 (0x2ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Validity
Not Before: Jul 28 06:20:37 2023 GMT
Not After : Jul 27 06:20:37 2033 GMT
Subject: CN=64c35e38-9fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:95:db:26:46:30:f6:3b:b8:40:08:b1:3d:71:
4d:56:5b:79:f9:67:ab:90:22:b9:9e:db:9e:73:b2:
79:a8:88:4b:d5:4d:45:3e:86:4b:98:3a:8e:b2:da:
70:09:8f:31:f7:24:c3:3c:df:fb:ae:a8:26:64:b2:
42:4a:f4:7e:59:a7:42:95:35:3a:a3:0b:a9:a9:d0:
33:47:88:67:f0:56:d7:d8:2a:80:80:f1:95:40:cd:
bb:fc:75:fe:81:06:70:41:00:2b:48:cc:c2:26:3f:
51:74:78:f5:8c:3e:95:ea:76:ff:1a:54:24:0f:77:
cf:2c:89:c0:86:16:e9:a0:36:1a:f1:fa:72:96:00:
29:9c:29:c1:b2:ba:f2:88:47:27:f1:fa:6a:65:9c:
e4:10:90:21:74:25:fa:24:20:ad:76:2a:83:37:67:
94:55:2e:0e:e1:f7:99:25:84:f6:b1:f9:48:45:bd:
b8:34:26:a2:84:00:b5:e4:32:f5:69:6f:f8:55:25:
36:d5:f1:92:98:0a:d5:dc:64:22:57:16:f8:b9:3a:
62:c8:9f:20:dc:c2:c8:0f:d5:aa:86:af:72:62:95:
1e:8b:8e:6b:a9:ca:81:a8:54:72:3a:6e:d9:98:cd:
29:fb:30:39:18:6d:21:ee:b4:d9:15:64:9e:c3:2c:
67:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EE:16:DC:37:DF:DE:9F:19:64:C1:30:BC:25:D4:8F:41:1B:F7:86
X509v3 Authority Key Identifier:
keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/DFDF1E382D0E11EEAA362D7A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.125.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:3b:57:e7:eb:0e:be:96:e6:f5:87:b1:f0:d2:4b:9c:b4:89:
7b:d2:c9:1d:25:02:3d:48:7d:3a:02:43:55:6d:97:ac:eb:1d:
f3:ff:9a:b1:57:2f:6e:f9:ff:ad:f5:cb:19:a3:69:71:6f:18:
3c:9e:15:79:1b:e6:b1:6c:78:90:4a:cf:62:da:8d:b5:2a:61:
5e:fb:01:3c:11:ca:85:97:2e:66:df:9b:ed:0b:23:32:0a:f0:
c5:bb:cd:fc:37:cf:db:79:b0:9c:59:0a:ff:1a:6c:4b:78:75:
f8:ef:b0:a4:6e:87:af:40:1b:b4:45:dc:ed:6c:dc:ef:9d:85:
86:cb:41:c4:d2:40:05:8b:3d:f1:44:a0:46:21:c2:df:ad:fa:
53:4e:25:3f:be:19:fd:45:0c:99:4b:f6:d0:08:30:fa:f4:64:
85:98:4f:1c:4c:38:ab:51:56:03:3b:eb:d9:58:c7:c5:96:a6:
af:48:80:b5:3e:bf:9f:3b:21:79:7d:3b:a0:fa:e4:e2:ba:48:
83:47:70:a5:ff:98:f6:8b:d4:13:eb:85:df:cd:33:c4:06:f8:
25:ff:82:eb:56:f3:54:fd:9b:44:a7:ae:84:b2:6b:a6:81:82:
f6:9e:12:3d:a2:88:0d:17:ac:af:91:28:a9:9b:d1:49:e6:ad:
29:4b:c6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 23 13:29:33 2023 by rpki-client on console-ams.rpki-client.org