Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/21AF46660BAA11EEB7AF3B5C4AD9E6FC.roa
File: 21AF46660BAA11EEB7AF3B5C4AD9E6FC.roa (raw, json)
Hash identifier: qDRachbd3xE6OH9g8UifnMAsrou+KK3WI79/j8zu2B0=
Subject key identifier: 1A:6E:45:47:3F:2E:D7:B5:BC:A5:58:20:C7:65:6D:57:42:0B:64:AA
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0C06
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/21AF46660BAA11EEB7AF3B5C4AD9E6FC.roa
Signing time: Thu 15 Jun 2023 18:26:23 +0000
ROA not before: Thu 15 Jun 2023 18:26:19 +0000
ROA not after: Sun 15 Jun 2025 18:26:19 +0000
asID: 48678
IP address blocks: 102.129.206.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3078 (0xc06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 15 18:26:19 2023 GMT
Not After : Jun 15 18:26:19 2025 GMT
Subject: CN=648b57cf-fb0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2c:b7:99:fc:92:6b:22:11:ad:eb:fd:fa:2d:
80:6d:1e:1c:d6:36:f1:29:dd:0d:11:2c:e1:b3:68:
2f:c6:d3:47:16:b3:87:14:b0:61:47:29:c9:af:5b:
54:e3:0d:fd:7c:9b:7d:b8:b1:64:38:4d:25:06:fc:
7a:75:d2:de:a4:60:c0:bb:5a:0a:45:44:2e:70:ed:
75:51:32:0a:a1:bc:bf:62:28:f4:ff:6a:30:55:a1:
0f:b7:f7:02:72:0a:b9:de:38:dc:ec:03:a7:2f:6e:
7c:8b:06:ac:36:74:3c:16:0f:37:d7:c4:8e:ad:ba:
e8:8e:3d:5f:8c:5a:e2:05:5b:4f:e4:b5:98:9f:e9:
42:6b:dc:83:6e:84:31:3f:da:72:16:db:c1:77:b4:
b9:79:88:bb:c3:d8:c0:b9:78:07:0c:75:f3:c3:48:
e1:c2:97:d4:0b:de:4e:81:b7:1c:07:09:f0:a7:59:
fa:4c:a2:7a:bd:41:99:c6:a8:5d:93:58:0b:14:2b:
91:d7:9a:9e:15:f1:81:08:af:6e:1b:b0:8e:03:d9:
1b:67:33:e6:b5:d2:90:6c:4f:77:f7:21:81:6e:f3:
8e:84:66:54:9f:c6:1e:75:f9:62:58:10:c9:07:ad:
85:4e:b5:e3:e1:f0:75:66:13:b8:5f:da:54:a3:7e:
c6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6E:45:47:3F:2E:D7:B5:BC:A5:58:20:C7:65:6D:57:42:0B:64:AA
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/21AF46660BAA11EEB7AF3B5C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.206.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:fd:16:4d:d1:d1:9e:f2:b5:7a:0c:fa:39:6e:ed:4d:aa:fb:
ec:21:20:e5:c0:3d:91:a4:f5:d7:68:c0:7d:82:04:d8:14:e6:
54:b4:47:b4:20:a1:0b:8f:32:df:1b:97:b8:3a:be:bb:26:aa:
45:ca:b1:35:24:96:5c:f1:db:89:5e:ea:e0:c6:0f:33:f7:70:
b4:b3:24:11:30:0c:32:1c:b3:46:bb:74:55:d0:a0:89:a5:c7:
e0:1f:c5:3b:54:36:08:cb:1f:f0:6d:1a:a2:c3:ec:f9:6b:e5:
3b:12:88:cb:07:ac:41:09:30:7b:7d:4a:3d:c8:e4:b8:dc:d7:
2e:9c:c8:f1:b8:9a:20:cb:c1:8f:62:61:dc:c8:4d:cd:ae:9b:
45:10:41:16:f5:d5:06:99:56:a2:b3:1d:d7:53:25:67:90:cf:
1a:0a:bf:54:a2:ee:b2:0c:d8:9e:f6:2d:d1:28:14:d7:69:bc:
08:49:9d:69:a4:6d:9e:a0:9a:5a:fb:2d:b6:3d:00:11:27:f1:
1e:e6:02:be:4c:c8:86:2a:fe:01:8c:59:5a:40:68:16:bc:7a:
e4:6b:e8:f8:2f:cf:a4:2b:67:c5:c4:e0:23:a9:a9:5d:21:eb:
5d:ae:0b:6f:f9:f2:eb:3e:3d:44:7d:e4:4f:d9:7b:88:df:70:
b6:90:8a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org