Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/22D0E826368211EEA6AE35734AD9E6FC.roa
File: 22D0E826368211EEA6AE35734AD9E6FC.roa (raw, json)
Hash identifier: RIDnRT5PggMzUVafrM1Gsu+Ne9W0Q6GnYDQqaCUfiZ8=
Subject key identifier: D5:BD:0B:8A:CB:96:C3:6E:99:3B:40:A9:4E:2A:CD:86:F3:60:CD:BF
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0CBA
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/22D0E826368211EEA6AE35734AD9E6FC.roa
Signing time: Wed 09 Aug 2023 06:58:25 +0000
ROA not before: Wed 09 Aug 2023 06:58:21 +0000
ROA not after: Wed 07 Aug 2024 06:58:21 +0000
asID: 834
IP address blocks: 102.129.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3258 (0xcba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 9 06:58:21 2023 GMT
Not After : Aug 7 06:58:21 2024 GMT
Subject: CN=64d33911-fbe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5d:a3:34:54:4f:72:0a:23:37:21:47:8b:1a:
3d:21:04:b4:18:0a:e2:32:83:df:10:52:53:14:67:
e5:00:a5:ac:77:e1:e3:da:1b:22:d2:7e:9b:8e:41:
5a:ef:0c:a6:46:61:ec:87:b7:9d:4c:73:76:6e:19:
c2:99:97:eb:9e:f7:81:ca:ff:62:5c:d1:6d:be:68:
bb:e0:b4:41:c2:3e:05:22:00:12:eb:a0:61:8e:7a:
81:67:66:8e:a4:b6:e2:79:83:0d:1d:b9:d2:eb:81:
2c:58:a8:f3:c6:c0:7b:63:72:c2:e5:e5:f3:a3:c1:
16:4b:04:c0:7b:d7:63:aa:60:a0:df:bd:9a:85:99:
fc:93:01:60:9d:14:19:29:b9:22:3c:df:5d:cc:19:
f3:08:3f:ae:87:39:a4:b4:90:72:4b:c1:de:9a:3c:
58:a3:cf:d5:09:0b:ec:b1:c7:b7:ac:88:da:4a:dd:
1e:0f:3e:01:fb:6b:58:00:87:80:52:8b:ab:60:62:
75:bb:fc:7f:1c:bf:ee:94:68:d6:f9:33:3a:b3:db:
5d:7d:46:1b:a0:56:50:2d:f7:87:4d:55:74:dc:17:
50:09:e3:b6:67:83:1a:c5:e5:ac:96:63:33:73:01:
6f:83:a2:f0:1c:92:8d:0b:2a:a2:96:05:bb:74:ad:
41:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BD:0B:8A:CB:96:C3:6E:99:3B:40:A9:4E:2A:CD:86:F3:60:CD:BF
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/22D0E826368211EEA6AE35734AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.157.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:9b:07:cb:bb:9a:8b:7c:d6:3e:8f:ad:14:34:33:5d:34:5e:
e4:da:a4:5a:ce:97:21:95:7c:e9:d0:df:d3:69:17:75:d2:9b:
68:b6:af:33:b3:be:d6:13:c6:69:04:a0:24:30:6b:32:1e:1a:
3b:7a:47:bf:9f:e5:1f:bc:58:93:f9:70:94:fe:b1:65:54:59:
1b:05:98:18:65:e6:2f:f4:2c:b3:a7:c3:0f:96:b1:b0:39:35:
d1:24:d6:88:79:8f:d8:98:b1:5c:02:4e:50:49:64:de:7e:be:
b0:50:29:a1:bb:21:b2:10:7d:d6:6b:17:10:90:c6:4e:62:64:
f7:33:78:32:e5:d4:f3:e8:af:f6:cc:a7:8a:1e:38:27:26:7a:
51:a9:3e:77:c8:cf:62:22:7f:87:22:2a:82:6c:27:be:5d:7e:
79:ec:e9:03:54:fe:d8:93:85:50:5e:ac:b3:a0:a4:02:91:49:
14:2c:d9:72:b4:07:04:7d:38:44:98:87:bb:c6:e1:ee:46:48:
7d:24:13:f4:99:30:68:c7:20:1d:05:b9:14:91:33:00:3e:6e:
a8:4e:26:04:ed:ae:14:4d:5f:be:b2:ea:bf:31:20:3e:02:21:
2f:f9:ab:e1:ae:cb:ff:ee:10:49:37:76:55:ac:84:41:3e:03:
ee:9f:3c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 11:18:04 2023 by rpki-client on console-fra.rpki-client.org