Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1CC3CB6E8C1A11ED834E1FB4F1222468.roa
File: 1CC3CB6E8C1A11ED834E1FB4F1222468.roa (raw, json)
Hash identifier: idtldUU03skjrbtkJ79tTTtgSOXrXXC0eVtLVjMsXrw=
Subject key identifier: 2A:03:A3:85:21:B6:D9:B4:8F:43:DF:A8:EC:33:13:87:B1:1F:68:1C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 09A9
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1CC3CB6E8C1A11ED834E1FB4F1222468.roa
Signing time: Wed 04 Jan 2023 10:25:30 +0000
ROA not before: Wed 04 Jan 2023 10:25:26 +0000
ROA not after: Sat 04 Jan 2025 10:25:26 +0000
asID: 10753
IP address blocks: 102.129.177.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2473 (0x9a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 4 10:25:26 2023 GMT
Not After : Jan 4 10:25:26 2025 GMT
Subject: CN=63b5541a-1e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:32:b0:9f:b9:84:f4:16:e4:54:11:4e:85:9c:
d7:ff:da:0f:31:c3:70:14:e3:eb:31:69:e0:a9:f1:
dc:b2:5b:96:34:33:37:da:fa:c3:2e:87:96:1b:2e:
68:07:05:d4:30:a4:bc:18:48:46:55:c9:bc:51:2c:
8d:33:8a:5e:f8:22:01:53:e3:52:a7:6f:3d:ac:1f:
fc:1d:3a:1e:00:41:68:ba:ec:83:d7:71:5f:dd:26:
ea:3a:b5:34:b3:ca:48:2e:02:d6:55:ee:dc:14:46:
22:04:db:ff:d9:3e:83:ea:51:8e:1d:ef:26:47:d8:
b2:13:ae:69:c6:d9:e7:d8:f5:c8:9d:3c:41:bb:f1:
63:19:6b:bd:d0:e9:a4:c5:c4:e8:14:b8:38:7e:fb:
4c:a3:a4:0d:63:35:72:c5:e5:3c:e4:23:4e:7c:7a:
c7:b1:db:ae:d5:84:56:31:24:e3:05:59:06:cc:93:
4d:69:cc:68:b4:06:d3:34:32:27:47:54:46:2e:3f:
18:3a:75:66:0e:53:43:78:5a:86:0a:66:4e:44:1f:
31:4b:43:87:4a:84:07:19:c4:08:e7:9b:b2:3b:05:
82:da:e3:be:c8:1b:13:86:21:22:87:3d:d6:3f:0e:
5f:9d:82:44:71:c0:3e:c3:4c:af:94:32:ac:db:95:
88:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:03:A3:85:21:B6:D9:B4:8F:43:DF:A8:EC:33:13:87:B1:1F:68:1C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1CC3CB6E8C1A11ED834E1FB4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.177.0/24
Signature Algorithm: sha256WithRSAEncryption
73:70:97:31:a5:65:ca:67:4c:e5:65:46:90:a4:17:8c:c2:4a:
ed:55:6d:8f:0b:e4:f3:9f:4b:1d:5b:64:1e:2b:5d:ec:b2:12:
24:45:3b:ab:f2:f4:4e:85:ac:79:65:6c:cd:6b:72:c2:22:ef:
e6:39:72:a8:96:bb:e9:b6:d6:e4:dc:29:7e:0b:d0:62:45:50:
2f:68:73:15:f7:e4:8e:8b:be:2f:8e:b4:95:e2:8f:51:36:13:
4f:ec:cf:c5:f5:9a:8e:e8:be:1c:51:55:88:41:f3:4e:33:35:
91:fd:cd:93:bc:d8:0e:f4:1d:d4:ba:6b:8f:3a:14:35:5b:7e:
2f:c2:7d:40:13:9a:ee:f5:0b:23:a0:60:bb:af:a4:cc:3d:20:
87:ff:fc:2f:62:11:8a:e9:32:c2:ee:63:32:46:f1:2f:b0:4d:
e4:c2:85:6a:89:da:f4:fc:46:5e:a4:3a:0c:e3:02:7e:26:81:
54:4d:c4:5d:0c:73:a2:65:49:0c:0b:f1:a3:2b:24:8c:bb:b0:
3c:e8:0d:c8:24:f9:f8:1b:46:d8:fc:af:32:60:cd:1e:5f:c9:
10:13:da:53:2e:01:45:87:06:b5:35:4d:d2:4d:66:06:fb:2e:
8f:e9:14:df:3c:3a:f8:d0:ec:15:c1:24:e7:40:97:ec:19:5e:
a9:4a:b8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org