Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0D0A610C68CD11EE922102594AD9E6FC.roa
File: 0D0A610C68CD11EE922102594AD9E6FC.roa (raw, json)
Hash identifier: c3dIycu32h/mWImFk/5jY7SP0/R/arASvV+5P5gnpLo=
Subject key identifier: 9A:04:7E:4B:85:B7:AF:AF:28:18:4A:FE:88:51:FD:34:D2:07:6A:17
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0DCB
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0D0A610C68CD11EE922102594AD9E6FC.roa
Signing time: Thu 12 Oct 2023 07:00:39 +0000
ROA not before: Thu 12 Oct 2023 07:00:36 +0000
ROA not after: Wed 23 Oct 2024 07:00:36 +0000
asID: 834
IP address blocks: 102.129.216.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3531 (0xdcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 12 07:00:36 2023 GMT
Not After : Oct 23 07:00:36 2024 GMT
Subject: CN=65279997-02c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:67:93:98:40:bb:12:08:43:79:8f:cd:0e:fd:
32:ae:14:dc:18:50:89:8e:d3:5d:5c:1a:27:d7:e5:
2a:1e:7a:e5:10:27:23:e4:d9:99:e8:77:46:5d:d2:
cd:85:44:9c:41:9c:37:1c:dc:f7:6f:e2:5d:89:31:
bc:ca:f5:d0:41:3d:7a:18:1b:a1:e4:89:fa:7e:83:
80:a7:ce:e6:bb:16:9c:68:01:fc:ed:cb:01:a4:b4:
4b:a8:81:11:2c:6b:df:5e:96:5e:61:a9:d0:ac:e3:
08:b6:91:89:dc:a0:e4:08:7e:b8:8f:a0:05:a6:64:
b3:47:20:90:bd:f0:71:a8:30:e3:fe:b4:6c:2d:47:
cc:22:ec:ee:63:ce:cf:bf:6d:0a:82:bb:a0:ad:2a:
10:f9:b5:1a:75:d6:9b:ca:67:b7:4e:20:b3:2b:70:
06:8b:c4:5c:14:7f:20:91:37:98:19:47:e3:24:b8:
c3:22:48:fb:f2:de:3d:85:75:2d:e8:98:1b:68:35:
13:c9:60:14:a9:51:c3:12:80:d7:07:27:64:e4:81:
ec:e1:28:b3:9b:3c:ca:43:69:8d:b3:3a:6e:eb:fe:
ab:1b:aa:58:52:d7:63:cf:61:11:aa:5b:5a:07:2b:
dd:66:9a:20:f2:e8:a2:ad:ee:bc:3e:28:0a:85:73:
a6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:04:7E:4B:85:B7:AF:AF:28:18:4A:FE:88:51:FD:34:D2:07:6A:17
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0D0A610C68CD11EE922102594AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.216.0/23
Signature Algorithm: sha256WithRSAEncryption
95:d5:56:1f:c3:cb:db:57:b7:49:9c:6e:98:2e:e7:dd:8e:fa:
18:d9:b2:fa:47:3d:46:08:8e:f3:af:15:a0:e9:de:99:4d:f7:
5d:a6:65:25:36:ee:e2:22:7a:3c:0c:48:22:61:de:84:b2:d1:
2e:00:8e:2c:52:a7:b8:2a:98:98:fc:0b:d4:e0:53:68:9d:28:
de:82:df:3b:ae:91:56:12:f2:3d:6e:bc:58:4a:dd:ba:b7:ee:
ee:45:39:35:21:73:11:5e:d4:c2:13:a2:d1:3d:46:f5:34:c2:
b7:da:30:c1:b9:9c:81:68:d0:06:02:6e:4f:66:2b:7d:de:e3:
0a:c0:e0:38:79:fb:b1:ba:75:b3:22:50:62:86:db:bd:1c:7e:
3f:d7:9c:ea:ee:49:65:40:f7:d5:16:1e:0b:6a:86:6d:86:36:
d3:2f:ab:11:0e:8c:d4:ec:b5:e9:22:73:5d:7a:cf:93:98:d6:
9f:dc:ef:10:a4:e5:4e:ab:3e:95:b4:d9:25:42:2f:35:fa:81:
b8:ca:03:6d:3f:43:30:95:c1:24:05:ee:b4:2c:df:ec:db:25:
94:27:35:38:5b:3f:f0:79:42:e2:42:8b:f6:12:a6:b4:f4:19:
c2:fe:5b:f7:59:ea:b2:9f:fe:66:49:8c:08:41:12:c7:1d:e7:
5e:63:23:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 17 11:36:37 2023 by rpki-client on console-fra.rpki-client.org