Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3A03D426910511EEBC452274D25BE465.roa
File: 3A03D426910511EEBC452274D25BE465.roa (raw, json)
Hash identifier: weEDFsct/gPId2QY75aYR01KcdI3He/mPhIeI2WfHYs=
Subject key identifier: 86:CF:F4:6D:5F:A4:DD:9F:BF:BF:C2:9E:7A:12:C1:C1:5E:B4:E3:A2
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0E63
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3A03D426910511EEBC452274D25BE465.roa
Signing time: Sat 02 Dec 2023 11:23:33 +0000
ROA not before: Sat 02 Dec 2023 11:23:30 +0000
ROA not after: Tue 31 Dec 2024 11:23:30 +0000
asID: 834
IP address blocks: 102.129.184.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3683 (0xe63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 2 11:23:30 2023 GMT
Not After : Dec 31 11:23:30 2024 GMT
Subject: CN=656b13b5-6142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ff:6a:5e:42:f4:10:00:56:ee:e0:88:56:84:
03:34:f7:65:ed:d6:73:94:76:93:9b:ef:64:6f:1f:
66:f8:fd:99:4d:de:8c:40:3d:77:f9:e9:67:f1:af:
d9:41:c1:76:12:ff:51:64:86:78:59:d2:fa:3c:22:
d9:7a:5c:16:52:5a:1a:08:46:96:c7:06:a8:21:89:
24:ed:04:ed:97:e1:0f:08:e7:ec:73:95:49:14:c7:
c2:08:30:56:96:d0:6e:47:11:1c:4d:db:04:90:5a:
cf:d2:90:fb:52:6b:38:05:5e:60:f6:b0:5a:dc:95:
0f:82:1e:8a:ad:0a:e5:9a:80:97:2f:62:e6:a0:10:
a6:01:45:64:f6:24:4e:7b:b3:30:c8:5a:7c:52:29:
0d:78:e5:34:32:64:35:7b:e5:a6:30:59:d5:3c:b4:
db:88:30:19:64:ba:c3:32:0a:30:7e:b9:d1:79:03:
a5:d5:89:01:0b:20:f6:d4:05:2e:e5:a3:8d:ec:63:
e1:e4:1f:be:dc:b5:63:0b:60:50:27:3d:5e:bb:58:
ab:7a:a1:13:2d:42:1e:dc:81:a7:2f:89:bf:8f:a3:
3c:8e:67:e0:ac:90:7f:5b:4c:42:42:b7:a7:3e:e8:
21:47:69:5e:56:57:83:29:88:99:07:ac:25:43:0f:
78:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CF:F4:6D:5F:A4:DD:9F:BF:BF:C2:9E:7A:12:C1:C1:5E:B4:E3:A2
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3A03D426910511EEBC452274D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.184.0/24
Signature Algorithm: sha256WithRSAEncryption
48:19:51:c3:30:55:d9:27:28:07:3e:e1:93:ef:c0:99:2f:16:
b1:cd:86:b5:6b:fa:9e:1d:79:87:eb:0c:ae:1a:85:f6:7f:66:
b3:93:ab:3f:6d:8e:bb:dd:cc:87:ad:f5:fd:ca:9e:6e:74:42:
45:77:e8:f2:36:e9:50:56:ed:17:6c:30:9d:63:6d:e2:f0:9d:
bc:25:4f:9c:31:6e:d1:4f:7c:d2:32:fe:75:21:36:d9:4e:ab:
ea:20:ad:48:81:16:83:3a:68:ac:bf:03:55:d4:1c:e5:15:38:
84:df:c7:93:07:b6:8b:22:d2:4e:94:2a:68:7d:72:28:e1:ed:
30:8c:96:dc:3d:c8:23:7a:8c:38:5b:80:08:37:ca:e5:a8:8a:
a4:35:69:ca:d4:81:a0:2a:ed:69:9e:d9:7f:3a:37:10:4f:ec:
82:9b:c5:74:53:2b:4c:f7:f1:6b:d9:c5:5a:83:ae:9f:65:f0:
11:95:aa:15:9e:21:9e:d8:ec:57:b2:4f:a2:11:b5:e6:54:52:
3b:ad:fc:7f:82:55:39:86:6f:0d:c4:3b:e9:73:d9:75:58:ed:
91:8c:3b:f4:37:5b:25:62:da:97:e1:91:08:79:3f:f0:f1:f9:
d0:d7:37:62:3c:3c:67:ce:9a:75:77:c9:28:e1:0b:3d:64:eb:
b0:d4:12:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 12:31:00 2023 by rpki-client on console-ams.rpki-client.org