Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/32F717C8045C11EEA008CF564AD9E6FC.roa
File: 32F717C8045C11EEA008CF564AD9E6FC.roa (raw, json)
Hash identifier: C/r4LodtPP+R9hGChjm2/W32t5HmMf1ZDJt7kUmd6rM=
Subject key identifier: DD:53:31:9F:C5:50:BC:FE:48:F2:CD:32:1D:43:6E:87:6C:C7:62:7B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0BC7
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/32F717C8045C11EEA008CF564AD9E6FC.roa
Signing time: Tue 06 Jun 2023 11:20:53 +0000
ROA not before: Tue 06 Jun 2023 11:20:49 +0000
ROA not after: Sat 07 Jun 2025 11:20:49 +0000
asID: 6939
IP address blocks: 102.129.189.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3015 (0xbc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 6 11:20:49 2023 GMT
Not After : Jun 7 11:20:49 2025 GMT
Subject: CN=647f1695-adf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:5f:50:03:9a:b8:44:3a:d1:63:e7:32:56:a9:
df:73:5e:c2:bb:4c:2a:47:7d:7d:a6:04:78:66:9c:
51:86:8a:eb:5b:02:7b:f2:04:f6:05:8e:ce:80:df:
77:21:bd:0e:70:7b:74:20:16:17:4b:6f:57:a7:7e:
a4:5b:47:d0:46:2b:6c:01:d3:34:96:48:81:de:32:
f7:d6:6d:5e:68:d3:71:d0:e3:29:a2:1c:cd:36:9b:
15:23:15:5e:d7:3d:99:13:27:90:a9:d4:aa:ca:f7:
e0:97:b4:c2:87:01:fe:f2:8c:be:bb:6f:a2:14:02:
8c:a9:d1:de:30:5a:ce:dc:6b:11:6e:8b:f4:77:0b:
53:bb:6a:f7:e5:c0:aa:55:d4:fd:1b:3f:45:da:9d:
24:fa:80:fe:fd:2b:85:d2:97:99:18:dc:44:e5:dd:
5e:03:c5:29:9e:56:e3:5c:24:db:b6:ba:ad:c1:cf:
b4:d6:16:40:78:44:44:7a:4d:47:ff:aa:73:71:34:
1d:31:87:20:7f:7f:f1:84:e8:1f:c8:ef:1c:ec:b0:
7d:78:d6:4f:f2:61:45:30:ec:82:e7:0c:f0:e6:63:
4b:6d:df:5f:14:98:cc:10:3c:17:6b:e1:5c:9f:0d:
59:f7:4a:75:d5:3a:bb:3c:bf:8e:16:89:b9:89:4a:
6d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:53:31:9F:C5:50:BC:FE:48:F2:CD:32:1D:43:6E:87:6C:C7:62:7B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/32F717C8045C11EEA008CF564AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.189.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:aa:24:b8:77:d4:f4:3d:44:28:56:36:d2:70:34:27:d5:74:
a5:5e:78:ba:c0:e3:84:ac:47:db:13:85:37:b3:8a:41:c1:25:
ec:71:bd:10:f4:52:67:4e:06:1a:37:f0:ef:0b:98:c5:55:89:
9e:c8:16:9f:b1:b7:cb:bf:0a:78:e5:bc:0d:7b:c6:20:d8:93:
45:a6:de:d7:6d:5f:e6:3e:40:b4:a8:13:cf:2b:93:23:f3:79:
89:b9:67:2c:f0:36:4b:dd:d2:1c:60:c7:c7:d1:ae:22:9c:49:
14:13:2e:ad:13:ad:76:e7:e1:19:fe:02:81:80:5e:84:ae:3c:
83:fc:21:af:14:4e:80:7a:6d:e6:96:05:74:6a:0d:d5:6b:3a:
fd:de:a6:8a:31:99:44:01:3a:21:79:25:d6:b8:06:0c:90:a3:
d3:0c:d6:3e:4a:35:7c:85:ee:fe:1a:79:b2:de:f4:c0:ce:66:
52:b0:df:78:8f:87:9d:8c:ea:98:4a:a0:e5:ad:da:7e:87:6e:
41:c3:fe:24:8c:7c:bb:9a:93:bc:df:b0:65:cf:54:76:c4:ad:
db:71:15:ca:44:d3:94:83:e5:b2:b9:88:c9:95:60:40:b4:d6:
91:10:c0:df:d7:af:65:88:a6:09:51:f4:af:a8:1d:5a:18:0d:
48:26:bb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org