Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/33840AC27FBC11EDBE48F6ADF1222468.roa
File: 33840AC27FBC11EDBE48F6ADF1222468.roa (raw, json)
Hash identifier: TYUxlCZ8CKz/4XrWdB+dr1bPbBIMALOGgB0Nva0XwEo=
Subject key identifier: C5:AA:D7:9D:20:63:54:AA:84:E0:3F:C2:05:27:32:88:32:B8:45:97
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0972
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/33840AC27FBC11EDBE48F6ADF1222468.roa
Signing time: Mon 19 Dec 2022 16:43:01 +0000
ROA not before: Mon 19 Dec 2022 16:42:57 +0000
ROA not after: Tue 19 Dec 2023 16:42:57 +0000
asID: 7018
IP address blocks: 102.129.246.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2418 (0x972)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 19 16:42:57 2022 GMT
Not After : Dec 19 16:42:57 2023 GMT
Subject: CN=63a09495-e049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c7:b9:4a:89:78:0f:d8:4c:36:76:75:36:4c:
95:4c:93:c5:03:cc:c5:8d:ba:3d:22:d2:07:9e:06:
73:37:66:10:0d:60:74:cc:38:f9:c4:3c:9d:76:da:
d3:7b:0a:e7:e2:11:1f:3c:4f:f7:3e:c8:5f:03:55:
35:6e:11:e0:f2:d0:29:33:3d:4c:af:3a:92:a0:de:
0d:83:13:7a:72:71:f5:e8:d9:a1:8e:ff:b4:76:70:
c5:63:a2:38:58:24:05:14:cb:81:96:1e:ee:cd:d8:
2d:e5:48:11:42:07:fe:4a:37:25:06:9f:a8:17:b5:
c4:59:b3:56:f9:95:f4:8b:31:81:77:e7:07:48:c6:
94:fd:1a:e1:b2:28:ec:4c:79:ca:05:26:cf:4d:4d:
29:4f:4c:ce:61:19:15:74:83:94:bb:74:91:b0:8b:
6d:a1:35:48:cb:8c:67:65:db:b8:33:06:0f:86:4e:
c0:75:6c:36:f0:b8:79:1c:5d:ab:8f:d1:0b:b6:5a:
4a:82:20:e1:9d:ca:82:89:d4:9c:86:d4:e8:f5:47:
1d:24:29:6e:16:b2:67:79:dd:03:d0:6b:d8:ad:8e:
2a:82:7a:ad:fe:c2:7d:a9:39:17:00:5e:a0:9b:09:
cb:91:0b:c7:c7:f5:45:d2:b5:56:26:53:cb:79:99:
82:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AA:D7:9D:20:63:54:AA:84:E0:3F:C2:05:27:32:88:32:B8:45:97
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/33840AC27FBC11EDBE48F6ADF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.246.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:04:4d:73:b1:af:96:2c:24:dd:84:9e:87:ca:d8:a5:09:15:
cd:1e:ab:52:8b:c0:93:11:2b:94:04:ec:01:2e:7a:b9:b9:b4:
83:b1:c8:9f:37:49:3a:b7:09:50:f2:8a:bc:20:72:82:41:2a:
5b:e0:8f:d0:eb:79:ae:74:0f:38:f4:8b:a5:e8:cb:8c:03:82:
0a:c2:89:38:9e:d4:19:39:f1:99:14:44:50:91:07:1d:d8:92:
59:0b:b3:da:45:17:f1:14:e4:0a:ff:73:72:33:12:18:c8:52:
73:1b:26:0f:05:d9:a6:82:91:6c:81:59:f8:f7:cc:3e:2a:b2:
6c:f0:2c:87:2f:1a:67:63:91:65:5f:d1:a3:aa:fd:15:93:47:
23:ed:6e:73:de:32:cd:c6:9b:2b:27:11:c1:ec:d1:3c:e4:d3:
01:c9:dc:14:64:50:21:0d:69:c8:18:50:fb:4d:bb:b2:af:f3:
e8:f7:bb:9f:85:f0:9e:a6:e0:36:f9:fb:a4:f1:28:da:c9:3e:
95:b8:54:84:b5:92:56:c4:81:66:fe:fa:2b:fb:40:e6:ae:ba:
66:79:97:d8:92:34:1a:a3:0d:63:53:fb:bf:85:aa:6e:aa:75:
ea:9e:af:56:d6:d7:8d:8c:c5:a1:e9:ee:39:fa:98:90:1d:06:
61:91:7e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org