Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2E2A174AF61511EDBDDC11744AD9E6FC.roa
File: 2E2A174AF61511EDBDDC11744AD9E6FC.roa (raw, json)
Hash identifier: YNG7Q87TiYDI/RKKOsnGLA0T6sdHD2xBawpOHN4MOVA=
Subject key identifier: A8:C0:20:1E:5F:D9:13:C1:C4:79:D2:C5:E3:12:8C:8B:77:FA:63:22
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0B87
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2E2A174AF61511EDBDDC11744AD9E6FC.roa
Signing time: Fri 19 May 2023 07:17:15 +0000
ROA not before: Fri 19 May 2023 07:17:11 +0000
ROA not after: Sun 18 May 2025 07:17:11 +0000
asID: 834
IP address blocks: 102.129.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2951 (0xb87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 19 07:17:11 2023 GMT
Not After : May 18 07:17:11 2025 GMT
Subject: CN=6467227b-a110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2c:d9:ea:92:09:fd:01:72:d0:cd:ec:dc:fd:
79:ba:ab:a7:9f:35:f0:92:e6:50:d4:74:66:9b:23:
b5:d6:33:6d:c0:95:e4:80:3f:a4:b4:74:2a:49:21:
87:3c:7a:1b:2f:27:88:97:ec:ea:29:af:00:25:e8:
58:17:28:f4:93:eb:f3:13:81:2d:a9:1d:43:59:3c:
36:74:5e:5d:47:fb:f4:4f:01:b0:92:bf:be:e9:c9:
fd:f9:74:59:07:61:42:58:9e:18:31:f1:03:8f:5b:
77:2b:6e:21:d9:32:c1:89:10:63:3e:0f:28:a1:a3:
e8:e5:06:b0:bc:a9:4b:5d:6c:b5:57:27:36:ee:14:
a3:ac:b8:d4:6d:5a:c8:35:d2:b2:a0:11:13:58:e5:
60:ac:13:a8:6d:37:4d:1c:e5:12:6d:9b:ee:6e:15:
bc:01:d3:8d:52:24:a2:12:91:8d:ca:d9:f7:96:6d:
ef:bf:91:e7:66:9f:09:05:69:02:f6:fa:c1:cf:6d:
6d:1d:95:a8:27:2d:a9:55:a1:6e:fe:6c:b6:4d:54:
e6:eb:66:31:80:0f:e5:f1:9d:9f:77:ea:f7:8b:d2:
48:69:ab:23:01:52:7a:80:b0:98:7d:b6:f2:8b:c4:
c5:4b:18:a4:d0:ba:14:51:1a:7e:bc:75:05:66:65:
c5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C0:20:1E:5F:D9:13:C1:C4:79:D2:C5:E3:12:8C:8B:77:FA:63:22
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2E2A174AF61511EDBDDC11744AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.225.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:42:95:4c:8c:f6:46:54:f6:11:dd:71:dc:39:0a:2d:30:66:
b1:ed:42:db:71:8d:c7:37:ad:42:4f:df:23:78:53:96:fc:e0:
23:66:50:7e:a9:cc:2d:5f:9a:f1:45:ed:96:eb:58:21:f1:78:
8f:83:d9:df:d8:2d:47:b8:88:f2:8c:1d:cd:cc:d1:ea:81:aa:
d1:66:8d:8b:2b:fb:62:0d:90:80:52:9d:67:e1:d5:16:cb:74:
dc:b9:7d:51:f8:29:3a:43:e4:88:ce:dc:9a:fb:4d:32:3a:47:
b8:24:ed:8b:22:89:1a:53:ec:e4:dd:64:03:ef:3a:91:87:eb:
0f:12:8e:e5:5b:3d:72:80:4c:a8:fe:03:bb:38:c7:6b:0f:1f:
64:37:54:5c:c9:5d:97:e1:2f:47:b1:ac:32:5c:3c:b1:26:1f:
b6:b2:81:19:e5:ec:b8:65:73:45:a5:a2:61:ed:cc:a9:5e:b4:
de:0d:6f:e4:da:26:23:16:b9:ec:47:88:a4:05:43:94:09:ab:
d1:72:ec:4a:36:dc:69:17:cb:09:e2:e4:04:84:9f:96:6c:d6:
01:3d:a8:d8:ca:38:f0:89:8a:b9:17:9e:04:50:82:7e:0b:39:
5f:f8:dd:1d:6f:ef:bb:77:95:16:ef:80:42:5a:5a:99:51:ed:
fc:2f:f3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 06:55:19 2023 by rpki-client on console-ams.rpki-client.org