Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1D694DEC6A3B11EDAC0E3A8EF1222468.roa
File: 1D694DEC6A3B11EDAC0E3A8EF1222468.roa (raw, json)
Hash identifier: Bj8GTY361UUuz95tVFQSuY4BIoG6/f+OIoamqAfJkTw=
Subject key identifier: 33:25:62:72:B2:AF:BA:F5:C0:7C:A7:E5:D9:56:0E:53:F6:19:77:F5
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 08FD
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1D694DEC6A3B11EDAC0E3A8EF1222468.roa
Signing time: Tue 22 Nov 2022 07:56:05 +0000
ROA not before: Tue 22 Nov 2022 07:56:00 +0000
ROA not after: Fri 22 Nov 2024 07:56:00 +0000
asID: 212669
IP address blocks: 102.129.166.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2301 (0x8fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 22 07:56:00 2022 GMT
Not After : Nov 22 07:56:00 2024 GMT
Subject: CN=637c8095-35b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c6:b4:1e:c6:66:51:4c:a2:e2:15:32:b3:e6:
51:6b:65:27:0f:c0:ed:4c:10:0c:b6:2d:79:18:d9:
1c:2a:de:77:ec:c9:01:08:7f:b3:91:db:e3:50:2c:
49:cf:06:5a:63:09:2d:ff:13:ed:6e:77:c2:83:8c:
03:76:3a:7a:5e:54:63:ab:42:4c:8a:e6:e3:ef:e3:
36:2c:02:c6:b0:16:5f:7a:9f:7b:f9:54:94:2b:a9:
60:c4:af:15:ed:bb:f8:27:d2:97:c2:1f:bc:e4:cf:
fb:a4:3b:e0:db:69:c6:85:b1:d2:e9:af:1e:1c:6e:
da:56:99:3d:8d:12:46:92:77:d2:64:37:17:95:fa:
81:e8:72:bc:43:e2:70:5c:13:65:06:fc:3f:52:ed:
ca:d2:7f:63:66:b8:10:e0:1c:02:09:83:14:92:70:
db:94:59:fc:f3:29:ff:84:ce:9e:6c:20:ab:e8:1e:
7f:9c:ec:48:9b:17:92:7c:b7:c3:a8:37:98:f1:01:
eb:9e:cf:43:c9:ea:d0:e3:70:68:c0:c3:35:fa:c1:
77:06:62:b9:0d:41:78:70:4b:56:42:94:ef:5f:07:
8e:ab:19:27:d8:49:e0:73:17:0e:fc:bf:4e:35:78:
4c:75:79:a2:07:c3:25:91:c4:c8:de:04:7b:92:3b:
c7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:25:62:72:B2:AF:BA:F5:C0:7C:A7:E5:D9:56:0E:53:F6:19:77:F5
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1D694DEC6A3B11EDAC0E3A8EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.166.0/24
Signature Algorithm: sha256WithRSAEncryption
43:4b:c9:0f:82:bf:10:dc:07:a6:a4:4a:01:07:4f:51:a1:9f:
48:46:27:2e:5a:48:4f:e6:f9:bc:a0:89:17:36:6c:b1:c3:9c:
0f:fd:88:23:ec:f5:d1:f7:d1:a0:95:98:34:13:e4:b7:88:d5:
4d:57:71:ae:57:6e:91:73:2e:65:38:b9:5c:54:01:e0:87:4d:
42:ae:be:52:69:8a:ff:c5:ec:63:a4:4f:f4:f3:d0:d8:04:c7:
47:4d:b3:01:22:2d:a1:eb:16:90:0e:a2:b4:d0:9b:be:d7:fc:
b9:d9:fc:db:b3:80:c7:d6:0a:e9:94:be:e1:0d:58:0b:c4:c7:
e5:69:37:24:d4:a0:6d:42:2d:7c:e4:e4:fc:d7:cf:2e:b4:2c:
b5:2e:93:35:d9:76:b6:e1:9a:56:eb:d8:80:d8:5a:54:c8:ad:
e1:47:46:33:c4:46:a6:94:cd:08:be:fd:6b:38:6d:3f:98:ce:
06:5b:c5:a7:b3:a9:3b:ea:d5:0b:11:0b:37:fc:50:8b:f1:57:
c3:f7:4f:78:2b:3d:e3:4a:bb:18:d3:78:e2:dc:6c:8c:c1:d9:
6d:4d:ce:a5:84:c5:e7:2e:ca:92:79:9d:f6:e3:5f:ff:79:72:
70:0c:95:19:61:4e:05:65:1d:3f:da:82:a0:b9:99:b8:45:6a:
0e:56:10:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org