Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1A5A04AC528E11EEBA02F86A4AD9E6FC.roa
File: 1A5A04AC528E11EEBA02F86A4AD9E6FC.roa (raw, json)
Hash identifier: tzq9m6UBqS+yWAc6o4udCVd7rbJY0pLNQ2tOI41ApWo=
Subject key identifier: 92:A2:A3:3B:C4:A1:69:F1:D4:7C:E7:D5:17:64:8A:52:DC:15:29:07
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0D53
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1A5A04AC528E11EEBA02F86A4AD9E6FC.roa
Signing time: Wed 13 Sep 2023 23:34:38 +0000
ROA not before: Thu 14 Sep 2023 23:34:33 +0000
ROA not after: Sat 14 Sep 2024 23:34:33 +0000
asID: 23470
IP address blocks: 102.129.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3411 (0xd53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 14 23:34:33 2023 GMT
Not After : Sep 14 23:34:33 2024 GMT
Subject: CN=6502470d-4ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:8e:30:65:ad:87:5a:cd:c2:3b:48:d1:99:
49:77:9b:61:e5:03:06:0a:f0:c7:19:25:05:9f:3d:
bb:c2:58:ee:27:f9:6e:5e:61:75:be:48:c8:d8:42:
54:ca:24:bc:17:da:95:f5:b6:65:96:3f:cd:3c:9f:
91:00:84:4f:7e:c3:f2:48:f7:ed:30:27:54:69:b7:
72:59:8d:9d:82:97:8a:59:dd:23:74:ec:20:18:ce:
f8:44:ef:c4:4d:76:36:8a:f5:39:c7:0d:99:59:83:
4f:7a:61:cc:cc:f9:93:04:94:a9:f6:32:10:d8:cb:
bf:c9:02:5d:7b:1f:3c:fd:86:99:a4:75:8a:63:76:
48:53:87:9e:e3:8e:52:a8:12:da:92:c2:72:63:82:
93:ae:31:32:cc:80:b4:57:9e:a8:d2:82:42:83:df:
78:52:d2:91:1d:ad:e0:7b:53:d8:97:e1:e2:54:41:
0c:c2:29:a6:3e:a8:41:07:22:78:30:9e:73:48:a5:
1d:75:5e:cc:4c:54:5e:25:67:1c:e1:50:fd:b2:b0:
79:c6:5e:41:98:76:e9:ff:0a:a7:e8:38:c0:64:84:
f5:1c:8c:1c:69:e6:c6:45:4f:78:6d:6e:8f:90:93:
77:8a:d0:08:d0:83:04:a8:1f:5f:57:ec:ee:00:0b:
5d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A2:A3:3B:C4:A1:69:F1:D4:7C:E7:D5:17:64:8A:52:DC:15:29:07
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1A5A04AC528E11EEBA02F86A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.255.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:1c:00:71:7a:b0:de:d5:71:37:7c:69:f5:6b:92:c7:1b:d5:
b3:97:8f:2b:49:07:60:9c:60:53:74:78:a0:ca:e9:f4:0d:c7:
d5:b0:1a:43:0e:3b:56:05:81:2f:2d:d8:2e:d9:af:34:24:89:
d8:0d:59:59:93:a4:58:38:e4:9f:a3:ca:59:90:01:d6:49:60:
9e:d0:91:7f:24:29:5d:c5:7c:fc:52:85:12:3a:56:bf:c0:2b:
84:04:a5:fd:45:6e:77:e7:95:22:d6:88:f2:df:be:c5:58:0c:
82:c5:7c:57:aa:49:e4:c8:07:25:c8:3f:e8:93:01:aa:71:8d:
02:56:e3:1d:1f:f5:8b:10:f5:9e:31:bc:1d:69:90:f2:35:43:
85:1b:8c:3f:f3:ed:e0:3f:b1:b0:d1:4a:71:e6:60:f2:b8:a5:
93:f4:d9:0e:e3:b7:6e:1c:4b:22:a0:80:f6:8c:17:f6:8f:d7:
7c:b4:bd:df:06:79:29:dc:b3:f8:90:8a:53:26:d8:aa:eb:fd:
d1:79:34:84:04:c6:31:1d:e3:28:21:23:b3:3e:5a:16:e5:f4:
98:66:84:65:f2:b4:fe:68:60:80:e1:d0:cf:0c:85:af:52:5e:
56:46:88:49:9b:9f:e8:fa:2d:44:8d:8f:e0:8b:3f:a7:c9:67:
44:08:a3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 16 14:08:49 2023 by rpki-client on console-ams.rpki-client.org