Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/287EF4BE8C9311ED9B5B95F9F1222468.roa
File: 287EF4BE8C9311ED9B5B95F9F1222468.roa (raw, json)
Hash identifier: PEUmkdmeFzQw/H3qOk3jluTXtWJDknqmzwNPzq44SE8=
Subject key identifier: E1:B2:3D:A3:DE:6D:2C:97:8C:90:28:AC:C4:91:6F:EC:EB:6E:BE:B0
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 09AF
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/287EF4BE8C9311ED9B5B95F9F1222468.roa
Signing time: Thu 05 Jan 2023 00:51:59 +0000
ROA not before: Thu 05 Jan 2023 00:00:53 +0000
ROA not after: Fri 05 Jan 2024 00:00:53 +0000
asID: 10753
IP address blocks: 102.129.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2479 (0x9af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 5 00:00:53 2023 GMT
Not After : Jan 5 00:00:53 2024 GMT
Subject: CN=63b61f2f-1b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:61:e1:8d:f8:7f:85:95:b3:fe:47:c1:0b:
a3:4a:13:a3:9b:e1:31:74:d9:cf:03:01:a5:d6:1a:
78:2e:3b:a4:70:b0:52:af:39:57:80:28:47:fc:d9:
65:56:2f:73:26:c6:b2:99:d5:3a:57:55:d9:67:c9:
6b:8c:4b:97:68:a5:a1:61:20:5e:99:16:e3:37:0a:
75:fa:9a:fb:ae:19:0f:b1:8b:64:db:89:47:f4:c1:
ce:79:46:e3:2e:ea:f4:df:18:0f:77:a2:1f:34:57:
9d:b8:68:bc:90:24:3d:df:68:f2:17:88:da:66:54:
d1:d5:3a:7f:e9:d4:cb:cf:1d:0f:25:a0:f7:35:62:
5e:45:11:31:e7:76:7f:75:e1:c1:8e:e5:04:35:22:
4a:91:13:9c:96:a3:13:60:90:09:da:66:cd:00:8d:
05:48:0c:b9:e2:57:a8:2d:e5:8e:c1:3e:b6:b9:f2:
09:e3:5d:a2:80:12:e2:8a:4e:25:cf:ae:be:06:e0:
e4:e4:fc:f3:98:4e:3d:74:70:a9:cc:21:46:e0:05:
79:a4:67:db:e1:3d:ca:66:04:0c:c8:b2:c2:67:48:
50:de:b0:3e:20:f7:3d:3a:70:c5:f2:a2:69:d3:77:
ca:63:df:b2:93:3a:d4:77:14:11:c9:3b:ac:42:1f:
7a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B2:3D:A3:DE:6D:2C:97:8C:90:28:AC:C4:91:6F:EC:EB:6E:BE:B0
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/287EF4BE8C9311ED9B5B95F9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.176.0/24
Signature Algorithm: sha256WithRSAEncryption
55:36:84:76:65:67:18:7d:6d:15:8a:08:3a:26:26:26:04:43:
a6:11:8c:b0:ba:1c:67:4d:31:11:e6:18:25:98:61:c6:73:44:
8e:92:d1:3e:4b:81:27:b2:3f:8d:2a:84:ef:92:ba:e8:bf:ac:
2e:7b:b9:dc:43:57:c2:53:9d:be:e2:70:5f:2a:99:2e:eb:be:
85:df:e3:86:e9:b1:d5:14:45:4d:ac:0e:1d:8b:d8:36:23:29:
ae:f7:cc:61:ea:95:ab:ea:63:e1:14:21:a6:ef:93:3f:5c:a2:
b1:69:c7:04:d4:1c:c1:d3:a7:c7:43:db:27:83:5a:62:0d:bc:
97:f9:ba:1d:01:b1:81:8f:c2:bb:cb:93:c8:ac:a4:0f:ff:f0:
43:19:b0:d1:28:91:a1:2b:5b:7e:10:4b:14:20:1f:22:5d:92:
b0:09:2a:2b:fb:0b:21:09:24:92:35:4d:3d:5c:18:32:2d:97:
8c:03:0f:02:38:f9:81:7b:6b:90:54:0c:4f:71:2a:9b:52:3d:
09:cd:b4:d6:d2:e9:44:81:1f:29:b9:03:18:7b:29:71:ee:14:
b0:f9:96:0e:57:97:12:64:c8:87:79:75:4a:8d:ac:3d:9d:84:
ce:9b:56:c7:36:e4:2b:c4:70:30:e8:3d:1d:90:fe:2e:ad:be:
ab:45:65:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org