Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/068A80CC844911EEAFBF0A284AD9E6FC.roa
File: 068A80CC844911EEAFBF0A284AD9E6FC.roa (raw, json)
Hash identifier: 8KQYRXape+48t8yDB8EkPVoTJtYDAgSyEjhu3AoZ6Gw=
Subject key identifier: F0:A8:43:4D:D9:9E:D2:95:7F:5E:A6:12:96:14:43:FC:5B:4A:2D:42
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0E38
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/068A80CC844911EEAFBF0A284AD9E6FC.roa
Signing time: Thu 16 Nov 2023 06:26:07 +0000
ROA not before: Thu 16 Nov 2023 06:26:03 +0000
ROA not after: Sun 16 Nov 2025 06:26:03 +0000
asID: 834
IP address blocks: 102.129.179.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3640 (0xe38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 16 06:26:03 2023 GMT
Not After : Nov 16 06:26:03 2025 GMT
Subject: CN=6555b5ff-9f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e1:44:a5:96:3c:ed:e7:3f:1d:ae:c1:c6:0f:
70:cf:1f:73:f3:c6:21:1a:14:2d:b5:4c:6b:9a:42:
5e:3e:fb:21:08:31:75:ba:bd:82:2d:0b:e0:22:2f:
47:78:45:0b:dc:8c:ba:43:30:e1:39:3c:91:a3:7c:
76:59:f9:31:7b:c6:8a:d5:0b:b5:a2:a7:a1:db:ab:
9d:ff:f4:0a:83:0e:d9:b9:b8:6e:ac:10:b3:e8:55:
0d:ea:e1:31:d0:cf:ba:62:51:9e:48:a3:df:15:6a:
71:c1:29:d2:8a:08:ad:38:06:c0:3b:50:30:de:9f:
c8:40:f9:36:26:3a:b5:f6:e0:c6:50:12:96:c9:0d:
94:61:f6:9d:24:62:97:d4:1f:2b:f5:fa:3f:56:36:
73:18:65:30:dc:02:08:c6:85:95:56:bd:50:9e:2a:
e2:59:a3:f8:08:0a:80:db:ac:c0:6d:42:62:54:81:
41:c7:47:48:ed:96:7f:b6:fb:4e:f6:b7:f2:2e:2c:
70:1b:ea:c5:8d:98:80:d4:84:0d:6f:46:da:1e:aa:
a6:e9:52:42:bc:43:f5:f1:0a:bb:77:e3:8d:12:a7:
12:1f:d0:cc:8c:78:b7:57:6b:7a:b3:03:ac:09:50:
4b:5d:6e:e6:c6:5a:25:e1:af:65:77:92:57:e5:d1:
fb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A8:43:4D:D9:9E:D2:95:7F:5E:A6:12:96:14:43:FC:5B:4A:2D:42
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/068A80CC844911EEAFBF0A284AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.179.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:55:9e:a3:3e:db:65:3c:59:e6:fd:05:cd:88:ce:d1:29:37:
9e:a4:0f:19:0b:85:5a:32:79:bd:04:78:c9:61:96:44:89:b9:
23:85:53:41:49:82:e1:e3:f7:b6:9e:2c:53:ba:10:a1:b6:41:
8b:d2:56:45:40:4f:f8:fa:61:54:b4:d7:08:ea:51:27:b6:61:
4b:f9:75:ce:25:7c:85:4c:8c:ce:0f:67:f6:00:e8:5e:12:56:
42:c3:45:99:25:31:95:a4:b6:27:66:75:b3:d2:d6:22:48:43:
85:3f:05:22:47:6e:65:eb:49:f9:0f:6f:b4:a2:d5:ba:cf:72:
d3:9d:1e:44:0d:cd:7f:72:31:da:5b:80:82:fd:f5:b7:78:a7:
d2:34:d7:61:18:90:1e:eb:2b:f3:b2:b0:5c:a1:ef:fe:dc:03:
9e:74:c5:1f:9e:b6:28:cf:69:fc:f0:42:67:15:ee:43:af:d7:
95:86:6d:8e:00:66:a3:4a:76:34:f8:c1:2b:a2:3e:7b:10:9d:
d1:b5:3e:82:52:c1:48:31:a0:12:29:15:50:9a:c3:35:c9:d6:
35:89:48:5a:37:a4:0e:dc:ee:ae:01:18:a4:48:39:b7:80:fe:
aa:f5:9d:51:da:df:36:43:38:ca:1f:0e:79:09:c0:fa:13:8e:
ef:82:cb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 17 19:38:54 2023 by rpki-client on console-ams.rpki-client.org