Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/118F5E0AADCD11EDBA9DD5D6F1222468.roa
File: 118F5E0AADCD11EDBA9DD5D6F1222468.roa (raw, json)
Hash identifier: eT5XyIPgEZqJCiVZT4/SJLYrehlIkCjB+Y+RiioSkwA=
Subject key identifier: AF:A4:4A:03:C1:68:BC:10:6E:1D:FA:63:2C:CA:B6:BC:51:67:6C:18
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A1C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/118F5E0AADCD11EDBA9DD5D6F1222468.roa
Signing time: Thu 16 Feb 2023 07:39:39 +0000
ROA not before: Thu 16 Feb 2023 07:39:33 +0000
ROA not after: Sun 16 Feb 2025 07:39:33 +0000
asID: 35916
IP address blocks: 102.129.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2588 (0xa1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 16 07:39:33 2023 GMT
Not After : Feb 16 07:39:33 2025 GMT
Subject: CN=63edddbb-dee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:97:c5:a3:98:82:28:6f:90:0c:71:59:a2:84:
f6:09:66:14:d5:e8:67:70:f3:1d:78:f1:2b:c7:89:
47:6e:42:bc:9a:54:5b:76:74:fa:2e:75:b6:d5:66:
e4:5a:2a:12:f6:f3:2b:96:88:49:b4:48:b7:9e:b0:
e0:d6:0a:e4:42:ce:53:50:ee:de:fd:1a:6f:c2:b9:
4a:96:a2:f8:fa:89:88:a7:05:6f:4e:27:24:3f:21:
19:0d:11:7c:71:dc:4d:8b:fb:d4:f1:40:12:c8:47:
f4:30:8e:e5:79:2d:7e:7a:c1:5d:d1:88:ac:86:48:
f2:32:8a:73:61:04:18:0b:e6:ea:a3:25:23:46:2f:
6f:07:52:99:4d:88:5a:4c:ae:80:a7:6d:aa:06:95:
01:89:c0:97:16:3d:c3:27:73:b7:14:eb:14:a0:ed:
e6:be:c9:43:0a:44:d1:b5:26:61:4f:26:37:85:8f:
8a:de:14:73:00:fd:ba:8f:49:59:ec:7b:59:07:a2:
27:6f:c4:d7:9e:98:de:03:a0:e6:31:cc:29:b0:fd:
a0:dd:c9:70:1b:57:cf:47:4b:91:65:24:e4:33:6c:
81:d3:ff:fb:0f:ed:48:fa:0f:3f:41:59:ae:ee:a0:
75:2e:06:6f:55:a3:52:ff:ba:1a:ce:cc:96:ed:f8:
7d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A4:4A:03:C1:68:BC:10:6E:1D:FA:63:2C:CA:B6:BC:51:67:6C:18
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/118F5E0AADCD11EDBA9DD5D6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.148.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:c3:ce:ea:69:aa:2e:e1:1c:5c:a0:94:c7:84:82:2a:03:83:
ee:79:3d:12:94:b7:14:a8:3e:7f:21:4a:c3:28:01:d1:bf:26:
79:1d:ae:a7:b7:a4:15:37:ea:c8:f9:20:87:14:d9:9d:22:e7:
a6:e3:f6:3a:17:72:55:ea:ce:a1:c5:5b:5a:e4:5f:5d:e0:df:
d4:63:52:8f:c1:8f:29:7d:ad:fb:9a:ca:07:16:30:e2:8a:36:
9f:26:41:0e:d5:85:07:88:40:04:1b:b3:e7:fe:da:4c:2a:09:
c2:df:ab:48:c1:de:6c:6f:1a:f7:c2:c3:50:7c:23:7d:57:2d:
49:a1:17:7a:d9:11:23:3f:dd:b2:9c:1f:cf:a0:38:13:e1:af:
dc:15:5e:bd:30:f8:8c:1b:76:25:83:39:d0:8e:98:f1:6a:ae:
85:8f:83:9d:46:8c:8a:77:01:38:47:34:be:71:41:30:a9:0a:
42:f1:19:c2:c5:34:a8:ae:1c:a0:39:3a:a6:ab:bd:73:37:11:
01:9d:13:7e:03:05:e7:bc:d4:5f:8d:4e:ce:46:c9:dc:9c:58:
35:1e:46:63:70:8f:0b:91:d8:49:07:2f:68:cc:f6:d6:12:dd:
eb:98:f1:ee:87:1d:ee:22:d1:0e:8c:72:4f:f7:e1:f9:ea:f4:
a7:af:af:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org