Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3A0AE22638E911EEA9FE30684AD9E6FC.roa
File: 3A0AE22638E911EEA9FE30684AD9E6FC.roa (raw, json)
Hash identifier: DeVP87EJkKfA79mjWfem+MhSOndkpX9LcSCBeqZJecA=
Subject key identifier: 12:03:CB:21:39:CF:8F:98:2A:7E:08:45:BC:7C:7F:18:E9:BD:34:07
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0CCA
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3A0AE22638E911EEA9FE30684AD9E6FC.roa
Signing time: Sat 12 Aug 2023 08:21:25 +0000
ROA not before: Sat 12 Aug 2023 08:21:20 +0000
ROA not after: Tue 06 Aug 2024 08:21:20 +0000
asID: 834
IP address blocks: 102.129.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3274 (0xcca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 12 08:21:20 2023 GMT
Not After : Aug 6 08:21:20 2024 GMT
Subject: CN=64d74105-78a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0a:21:fc:50:b7:ae:b3:9a:c4:70:c7:8a:62:
90:a1:8a:1c:7d:a3:74:c3:99:ca:59:6f:fb:64:bd:
53:33:b8:18:33:22:19:13:fd:0d:0d:6e:82:aa:a6:
99:20:19:ed:6a:25:8b:7d:36:f5:b9:f0:5c:cf:2f:
4d:bc:e9:30:b9:2e:5d:9f:8f:0e:e2:65:85:b3:4b:
e2:3c:7a:81:60:a2:4c:75:55:8e:56:b5:88:f1:14:
08:9f:e6:21:f1:16:fd:36:97:48:03:3d:34:2e:c8:
37:71:db:79:08:e6:07:fd:2b:54:15:b0:10:a0:d3:
61:8e:2b:71:d7:85:f1:76:d0:18:57:84:ee:5c:0d:
b5:02:dc:d5:ab:d9:e6:73:e2:1e:a4:72:93:31:6b:
2f:47:d3:ed:26:58:64:6e:67:01:90:a2:31:d3:d8:
25:f7:e3:cf:2f:1f:3d:67:83:f9:79:07:17:6d:e9:
64:4e:f1:3e:73:6c:f8:7e:dd:f6:8d:54:a8:c7:00:
59:f9:ad:2b:7f:13:28:26:d7:e1:2b:8c:08:90:35:
15:52:a3:e2:f7:0e:c0:37:17:0c:30:e8:33:72:f6:
0f:62:45:bc:72:a8:07:ae:96:90:8e:8d:35:19:80:
ef:ab:4d:23:4e:66:bb:1d:ec:9c:ad:99:6d:34:d7:
45:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:03:CB:21:39:CF:8F:98:2A:7E:08:45:BC:7C:7F:18:E9:BD:34:07
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3A0AE22638E911EEA9FE30684AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.208.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:ee:12:2a:43:02:2b:15:d9:38:e6:af:e1:05:81:69:36:9d:
01:d5:c4:f6:26:c0:84:f3:f0:94:3c:fa:4c:ff:37:41:10:e8:
4e:fc:13:d9:eb:6e:e1:ce:26:99:fb:4c:3d:b9:36:f3:75:2e:
83:67:37:eb:3f:35:74:c5:56:32:aa:41:b6:26:04:ac:b6:1a:
24:db:73:7e:e5:b0:7d:d5:da:71:a2:c1:ae:33:49:ce:91:a2:
55:c0:5f:1c:41:61:20:1f:6d:79:9b:57:f4:73:12:97:4b:58:
f9:45:06:49:61:d4:60:09:11:f5:41:d6:59:87:a4:26:15:e7:
e5:3b:55:7e:87:32:58:79:10:c7:10:c5:af:78:09:8e:a1:10:
94:5c:2c:3c:a7:1b:0f:af:a2:4b:05:99:3f:28:9e:8a:6d:39:
8e:a8:5e:44:4a:50:1c:16:82:54:4c:2d:2b:62:6e:4d:20:5f:
72:53:68:3b:d5:7d:fd:e5:77:6e:1a:b9:a7:74:98:6c:a8:9c:
80:a5:90:4c:e5:47:77:1e:c0:3f:7d:bf:01:c7:b6:a5:49:07:
b3:a8:2c:76:0e:7c:97:f0:d7:1a:fa:f7:58:49:db:fb:44:c5:
ac:a2:80:65:c0:77:13:2b:a3:88:22:15:57:4d:b2:a9:39:ba:
81:66:23:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 8 10:12:45 2023 by rpki-client on console-ams.rpki-client.org