Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2F27EBBA69E111ED8300888EF1222468.roa
File: 2F27EBBA69E111ED8300888EF1222468.roa (raw, json)
Hash identifier: 2NiU/p5y4+v3OH36Bog/5thSWptc86jzH8/p2vdaLWk=
Subject key identifier: B7:85:DD:C5:C8:9D:33:4D:6F:8E:8E:4B:20:06:A7:8C:EB:3B:D9:BB
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 08F9
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2F27EBBA69E111ED8300888EF1222468.roa
Signing time: Mon 21 Nov 2022 21:12:20 +0000
ROA not before: Mon 21 Nov 2022 21:12:14 +0000
ROA not after: Thu 21 Nov 2024 21:12:14 +0000
asID: 147287
IP address blocks: 102.129.150.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2297 (0x8f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 21 21:12:14 2022 GMT
Not After : Nov 21 21:12:14 2024 GMT
Subject: CN=637be9b4-449c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:10:21:f4:ec:23:4d:e4:89:d9:96:dc:13:0e:
96:b6:31:e8:87:cc:d3:ce:6e:5c:02:96:63:8c:56:
f1:c7:a8:6f:f4:e2:bf:ec:bd:60:3e:ec:40:c0:f5:
c4:da:ee:b3:88:1c:a0:71:16:4b:10:17:ee:92:55:
d5:9b:3c:63:83:04:d1:7f:ad:09:0c:a9:b4:3a:76:
5a:e1:0f:ef:d4:fb:71:4a:b1:9f:51:8b:29:8f:08:
81:58:8f:59:df:e0:d2:88:dc:e7:09:88:24:e3:dc:
b5:4e:c9:46:27:df:28:9a:5f:c6:8e:1b:38:03:36:
71:d6:4f:2d:ea:32:df:b1:6d:7f:9e:02:21:be:6f:
35:c5:4b:8d:58:7d:71:59:22:18:34:95:ba:a7:8f:
85:aa:7f:76:61:96:21:fd:98:8a:78:5a:98:3f:40:
be:af:33:98:f3:0f:c9:ec:9c:68:6f:92:eb:84:a3:
dd:2f:da:76:21:5a:00:21:94:ea:3d:06:3f:72:0b:
c3:13:6e:46:15:a2:76:8b:15:23:51:eb:2d:3a:f2:
ed:dd:36:67:39:c4:37:3c:0d:f1:10:79:de:13:a9:
1a:76:85:c0:3c:0e:78:33:50:d7:47:8d:b4:44:81:
6f:17:93:d1:8d:4b:e6:fa:60:7b:a6:2b:8c:d2:02:
85:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:85:DD:C5:C8:9D:33:4D:6F:8E:8E:4B:20:06:A7:8C:EB:3B:D9:BB
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2F27EBBA69E111ED8300888EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.150.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:69:ba:ea:ee:e1:be:fb:0a:41:55:e2:14:39:91:f1:4f:cf:
03:dd:60:b8:f1:d0:94:ec:a8:c7:81:73:ac:2f:50:9e:6d:07:
f3:0f:04:a8:ff:a5:87:bb:ab:bc:f7:17:dc:d0:1e:55:93:9c:
cc:e7:da:51:6f:17:32:99:8a:b8:28:ed:a2:ce:c8:2a:f1:a2:
7c:33:ef:61:c7:e9:c1:4d:1a:1c:a3:ff:bf:c8:94:d3:24:97:
81:58:c0:60:aa:28:c3:2d:51:62:d1:e8:66:db:ac:44:58:96:
50:d4:6e:8f:04:48:96:ea:9a:ac:fe:30:44:00:ff:b7:4d:8a:
88:52:02:dc:e7:93:00:0c:84:07:8b:9e:bd:22:d9:ff:dd:01:
0c:8e:c4:97:57:eb:9f:8d:62:c3:ce:cf:13:9a:1f:66:24:98:
e4:1e:19:bd:7d:17:c8:24:65:01:4a:e2:14:34:0e:43:21:4c:
41:26:cb:29:46:1d:f3:8b:c4:90:ff:74:88:44:31:5b:4f:e2:
98:5b:1e:cc:14:cf:e9:15:5d:43:31:9c:e1:02:2d:bc:d8:25:
78:98:54:9b:77:46:8b:ab:e9:07:f9:82:79:bd:a2:9b:77:be:
8d:63:1a:e3:26:e7:8b:f1:d0:9c:79:64:b1:21:a9:3d:00:1f:
c5:d9:68:bf
-----BEGIN CERTIFICATE-----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Generated at Fri Jul 21 01:05:15 2023 by rpki-client on console-fra.rpki-client.org