Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2BF33734F98D11EC8276E7A5F1222468.roa
File: 2BF33734F98D11EC8276E7A5F1222468.roa (raw, json)
Hash identifier: xMwfKAo1lJN/L1D4CVSU9IQWNBiC2DUV/lpnetDkx/U=
Subject key identifier: 58:3A:15:44:95:8A:E6:12:DF:ED:72:EF:39:5D:A6:62:C1:E8:C3:D7
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 06D6
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2BF33734F98D11EC8276E7A5F1222468.roa
Signing time: Fri 01 Jul 2022 22:28:47 +0000
ROA not before: Sat 02 Jul 2022 22:28:43 +0000
ROA not after: Tue 02 Jul 2024 22:28:43 +0000
asID: 43350
IP address blocks: 102.129.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1750 (0x6d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 2 22:28:43 2022 GMT
Not After : Jul 2 22:28:43 2024 GMT
Subject: CN=62bf751e-d615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4e:ac:ed:93:0d:2e:e4:ef:37:04:99:1a:2d:
77:bd:64:b5:82:2a:46:87:96:a7:76:8e:81:7f:94:
b7:17:98:f1:a9:c0:76:82:10:80:ca:85:8e:fe:96:
81:5a:fa:5e:8f:88:05:f9:eb:46:b5:4a:11:00:f5:
16:78:27:d0:4b:d9:55:67:df:f5:8a:f3:bd:52:b2:
d9:e4:45:73:d7:eb:32:a4:90:8b:6c:a7:f4:44:b3:
e4:90:2b:5a:19:c2:80:23:50:24:0c:13:0b:30:ee:
c8:5a:0a:57:7e:64:d8:3c:b4:7e:cb:fe:b7:20:87:
c4:d0:29:fe:64:80:18:55:f9:1f:a2:9a:39:94:56:
f0:1a:a7:dc:3f:e9:95:f8:18:be:fe:ec:41:cf:f2:
c1:3c:c4:e6:e3:7d:69:ff:cd:5e:6c:c5:f9:64:0a:
99:a6:4b:a5:13:8a:13:ee:6e:5c:07:70:50:66:26:
58:b5:9f:01:34:cd:57:5a:84:a7:1f:44:d9:28:40:
6f:25:ac:69:17:16:96:6c:db:69:39:b0:b5:79:e9:
2c:73:44:64:bd:9a:1a:10:f9:4e:b3:71:92:41:72:
d5:0e:1d:9a:ce:81:b5:71:44:f4:73:ee:89:ab:43:
d1:cd:0f:6f:51:09:28:93:7c:70:3c:ed:8d:95:2c:
0a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3A:15:44:95:8A:E6:12:DF:ED:72:EF:39:5D:A6:62:C1:E8:C3:D7
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2BF33734F98D11EC8276E7A5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.255.0/24
Signature Algorithm: sha256WithRSAEncryption
02:32:a3:83:e6:68:05:db:45:dd:25:a5:b8:39:cb:5a:0a:fb:
e0:92:80:b1:ce:b3:f1:7a:c2:05:77:8c:61:be:11:25:71:a5:
bf:ab:23:10:dc:91:ec:29:92:bb:a7:e6:23:5d:98:f4:29:53:
9d:0e:da:e8:f3:39:50:50:13:ce:f3:52:d5:10:79:6f:ee:03:
7a:8f:54:85:79:7a:53:ad:7a:dc:54:43:05:70:04:01:90:47:
cd:3a:bf:b8:bf:ac:06:be:16:5b:82:0a:78:94:07:48:85:28:
6c:ee:aa:36:3c:fb:21:4a:7c:7d:3d:b5:fd:90:ac:11:98:3a:
ae:46:92:4b:65:bc:4d:71:8b:59:33:0b:54:10:12:21:3d:d4:
17:dc:43:60:df:8c:31:63:bc:ae:0f:49:10:d3:14:78:c4:17:
d6:cb:cb:0c:9d:6d:6c:8e:e9:c9:da:cb:0e:61:ad:6b:b0:e5:
c7:54:10:6e:30:8f:89:c0:44:8e:46:cd:0c:2d:4e:d8:95:e7:
f9:1d:15:ea:37:0b:a9:14:9d:0b:06:71:fe:b8:f5:e6:fd:41:
ef:62:8b:b1:63:3f:60:7d:da:7d:ee:0c:96:f8:26:09:44:e9:
af:28:0f:a0:0a:04:bd:a3:31:2d:b5:a2:96:cd:01:f8:a7:66:
cf:ff:4d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org