Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1F05C22826E911EE8940C65B4AD9E6FC.roa
File: 1F05C22826E911EE8940C65B4AD9E6FC.roa (raw, json)
Hash identifier: RRQcuXPvuJ8DQccjW19CaLeb8hUO/d4WXXQuae1c5jU=
Subject key identifier: 4D:15:CA:F9:BD:1D:B2:7A:DF:3B:DC:72:12:65:AB:EC:66:B3:F0:72
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0C87
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1F05C22826E911EE8940C65B4AD9E6FC.roa
Signing time: Thu 20 Jul 2023 10:35:18 +0000
ROA not before: Thu 20 Jul 2023 10:35:15 +0000
ROA not after: Sun 20 Jul 2025 10:35:15 +0000
asID: 834
IP address blocks: 102.129.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3207 (0xc87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 20 10:35:15 2023 GMT
Not After : Jul 20 10:35:15 2025 GMT
Subject: CN=64b90de6-ffb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:63:a3:3a:af:4f:5a:9d:a5:7c:22:e8:7a:50:
0a:1d:67:6b:d7:70:74:ec:fe:17:44:bf:33:1f:f7:
9f:98:00:d1:79:c3:27:4b:b4:a0:59:b5:c8:3a:bd:
23:d6:5b:40:17:7b:c7:b5:0f:1a:b3:94:f5:be:ee:
40:d1:cd:f4:28:29:97:16:63:51:ea:62:ef:52:9e:
83:24:3d:42:49:d4:c8:f4:de:74:9f:e6:55:aa:c5:
a5:a0:e7:77:e9:77:00:51:7b:ee:31:db:66:8b:5e:
01:44:64:ab:a6:0e:a6:89:c2:3b:25:0b:b1:46:16:
4d:fd:0e:2a:5f:9a:66:a9:2e:52:57:06:e0:95:fa:
13:96:05:1d:24:06:6e:65:28:59:ae:de:1c:00:e9:
74:04:60:68:64:a8:d9:21:a3:d2:8d:e8:e0:24:af:
4e:dd:16:37:28:e2:3b:35:b9:f9:f9:1c:4c:db:00:
49:af:73:de:94:6f:1b:65:8d:6e:95:c1:51:39:e3:
24:28:11:3b:e0:67:ad:a1:32:4c:bd:fa:d3:11:2b:
82:1f:c2:e2:85:0d:f1:ed:15:12:aa:29:84:80:f8:
13:63:3d:63:60:11:81:e6:b9:6f:65:48:1a:13:e1:
a5:f8:dc:0a:3f:45:eb:40:8b:4c:1c:d6:0d:25:0c:
14:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:15:CA:F9:BD:1D:B2:7A:DF:3B:DC:72:12:65:AB:EC:66:B3:F0:72
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1F05C22826E911EE8940C65B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.190.0/24
Signature Algorithm: sha256WithRSAEncryption
51:23:c8:39:75:7a:f9:58:e2:d5:17:7b:1b:b0:52:d1:43:2e:
a1:04:f5:80:a2:f0:66:69:a5:e9:f2:03:2f:49:0f:14:cc:6a:
1f:f2:73:df:47:e2:f0:ee:28:15:cf:70:8b:bc:12:99:63:cb:
e3:dd:6d:33:4f:c5:f8:65:76:5d:c0:f2:11:73:96:68:8b:4d:
a5:62:64:6c:4b:36:5c:ce:6e:0e:01:7a:27:90:32:7f:ac:64:
f3:a4:ed:1f:0d:fc:69:97:ca:6a:ac:ea:bd:82:65:0a:a2:d5:
58:b7:0c:d5:75:c8:82:d1:d1:5b:d3:3d:3a:f5:6d:da:ca:fb:
c4:90:6a:a1:41:3c:99:a0:06:3c:99:95:93:84:0c:c4:44:aa:
a7:58:ac:6e:bb:cc:cc:1c:e1:17:fc:eb:5d:14:3d:f8:77:63:
44:af:e6:2c:52:29:a2:ee:b4:7d:17:8f:72:09:cf:ec:9b:c5:
8a:e4:71:a7:14:33:6b:50:6c:56:84:db:4d:a7:bb:e2:e8:25:
4c:5c:42:ea:c9:1b:77:86:5b:a9:01:98:d0:04:e8:5c:79:4a:
3c:f5:8c:35:98:07:1d:08:bd:76:65:b5:9f:4e:08:e9:5f:18:
46:d1:19:bb:b9:46:aa:73:fc:d0:06:d1:47:d3:5a:24:80:d1:
4f:91:f5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 07:13:33 2023 by rpki-client on console-fra.rpki-client.org