Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/35989A7A09B511EE9A5C2A714AD9E6FC.roa
File: 35989A7A09B511EE9A5C2A714AD9E6FC.roa (raw, json)
Hash identifier: lkcAxTrkrFoPYy70G8RPqV6y0lxBBJCimD+c0My/oyo=
Subject key identifier: 63:47:36:BC:CA:C6:37:96:47:9B:D8:0B:E7:D8:55:B8:88:90:B7:78
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0BFC
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/35989A7A09B511EE9A5C2A714AD9E6FC.roa
Signing time: Tue 13 Jun 2023 06:40:39 +0000
ROA not before: Tue 13 Jun 2023 06:40:35 +0000
ROA not after: Thu 12 Jun 2025 06:40:35 +0000
asID: 834
IP address blocks: 102.129.206.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 13 06:40:35 2023 GMT
Not After : Jun 12 06:40:35 2025 GMT
Subject: CN=64880f67-221a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c5:4f:33:38:a9:43:0c:b7:ef:be:bf:2c:22:
51:de:e0:2c:e0:3f:c8:18:54:8c:2a:3d:a7:31:2d:
cd:d2:c3:b0:82:95:c8:68:58:77:17:56:8e:f2:9c:
d1:43:e0:a1:c4:73:aa:8e:9c:b8:ce:fb:ca:7d:7c:
7e:7d:9a:70:2d:a9:cd:08:c9:6d:0c:08:90:3d:7c:
37:c0:4b:a3:73:8a:cd:ce:24:81:06:c3:e5:dc:bb:
0c:20:3e:30:57:12:e8:2d:d4:ed:4f:69:9b:d0:e1:
38:f9:a0:20:f2:70:08:03:f4:90:fb:a1:47:3f:0d:
8b:26:27:fc:9e:18:49:b5:ee:98:bd:e2:80:43:7b:
77:55:4b:22:1c:5a:d1:7a:e8:52:74:d7:0c:48:6e:
c1:5f:4a:02:0d:fd:f3:aa:a6:2c:66:5f:f0:a8:4b:
69:99:97:5a:48:5c:39:65:6d:12:1a:85:a6:ea:2b:
ef:26:77:ff:3c:30:8c:3f:e3:8a:39:0b:3e:47:6d:
b2:ab:c0:cb:63:1a:a6:df:7d:df:4c:3a:40:95:5b:
25:ed:a5:5c:07:3e:ef:9c:f1:53:c9:d4:aa:34:db:
d2:09:e4:53:e1:09:d4:88:e4:bf:e9:d0:16:f8:51:
92:18:17:f9:8f:79:84:3f:00:e0:00:69:e6:c9:a9:
18:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:47:36:BC:CA:C6:37:96:47:9B:D8:0B:E7:D8:55:B8:88:90:B7:78
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/35989A7A09B511EE9A5C2A714AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.206.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:f9:4e:7c:df:70:c1:2e:d0:86:f2:05:20:dd:d4:1b:20:20:
94:8b:c5:bc:7f:e3:43:45:2b:90:b1:31:87:06:c8:de:cc:26:
cb:71:05:3a:f1:5c:5a:af:68:a4:11:6f:bb:e0:12:5f:b1:3d:
73:18:e5:2f:7d:c9:47:2a:ee:dc:24:56:31:d5:5f:b6:23:61:
9c:85:2e:d9:17:84:5a:c1:d9:92:10:7b:f7:41:f9:d0:04:7e:
77:5e:72:d4:bd:54:2f:51:29:dd:9f:4d:af:22:83:a3:84:8b:
82:bf:2a:5b:a5:cf:10:3b:96:51:4f:f6:ce:ba:84:5a:e4:5f:
bf:13:43:92:ea:f7:94:f6:59:c4:24:71:b3:e9:2f:de:fe:20:
0a:4b:13:8d:79:c6:78:9f:6c:b8:a6:94:a0:8d:60:76:5c:15:
33:f1:08:30:4c:13:88:99:46:28:a1:2a:2b:10:f5:17:94:4c:
dd:4a:54:24:94:20:d3:db:e3:b9:74:d5:9a:36:72:87:5e:51:
b1:20:bb:65:64:53:0c:0f:f0:3c:28:c4:51:0f:4f:1f:f8:dc:
ee:3c:81:7b:8d:c7:f5:65:4f:5b:0f:e9:54:0c:07:b0:08:f1:
06:16:55:5c:0d:76:e3:fb:a9:01:bd:a9:8b:0f:46:f3:e7:32:
41:57:02:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org