Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3BF6C9A2854411EB8CD20A1CF8AEA228.roa
File: 3BF6C9A2854411EB8CD20A1CF8AEA228.roa (raw, json)
Hash identifier: L3CmFzQaN8mkAw57BmjF61H2Ppc59CCiVpcq9IzFUMc=
Subject key identifier: 99:A6:5E:B5:B9:AC:AA:8B:57:0D:24:4C:D9:24:DB:7B:D7:DA:79:45
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0385
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3BF6C9A2854411EB8CD20A1CF8AEA228.roa
Signing time: Mon 15 Mar 2021 04:09:28 +0000
ROA not before: Mon 15 Mar 2021 04:09:21 +0000
ROA not after: Fri 01 Aug 2025 04:09:21 +0000
asID: 61317
IP address blocks: 102.129.144.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 901 (0x385)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 15 04:09:21 2021 GMT
Not After : Aug 1 04:09:21 2025 GMT
Subject: CN=604eddf8-6686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:3b:de:67:b5:f2:2c:68:8a:c5:87:26:5c:
b0:41:1d:fc:09:9c:50:cf:d0:92:67:64:a3:cd:4a:
29:be:ff:08:07:78:e5:5a:c3:2a:56:e5:c0:13:23:
cf:52:0e:24:c8:03:bb:53:ba:90:a9:cb:46:5c:65:
1f:8c:c2:c7:c8:a0:58:e1:de:b7:a3:2b:8a:d0:6d:
6b:f4:28:d4:39:85:9b:36:da:20:eb:19:94:4a:15:
fa:0c:cd:97:66:2f:c9:76:e6:be:ba:fe:c4:85:ec:
84:80:cf:24:ee:2e:55:81:f1:78:88:ae:9e:1b:a0:
0d:c1:bc:58:d4:69:a1:2d:53:07:fb:6b:ae:97:74:
17:3c:56:3d:36:77:87:b8:54:0f:db:16:b9:d6:b1:
c7:d4:bd:a7:b1:07:0e:6b:ff:69:70:0e:48:a0:b2:
96:ed:14:14:07:3a:e9:c3:f3:99:5f:ba:d4:d1:3f:
ea:ef:ae:8c:d8:13:61:95:cb:b5:da:d6:08:f2:4d:
24:8a:9f:4b:21:86:a6:9d:08:f6:07:d1:a4:4c:d1:
b3:f3:83:d2:b2:58:78:11:9e:b1:26:35:0d:16:09:
7c:cd:b7:8f:61:63:c0:12:04:fc:84:ac:7c:22:7b:
b9:94:3d:2c:29:3c:ff:bd:69:ba:45:79:85:65:09:
cd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A6:5E:B5:B9:AC:AA:8B:57:0D:24:4C:D9:24:DB:7B:D7:DA:79:45
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3BF6C9A2854411EB8CD20A1CF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.144.0/20
Signature Algorithm: sha256WithRSAEncryption
6f:46:f4:29:b5:12:d5:0b:87:d1:23:e4:a1:7f:2e:da:9b:21:
5a:ee:27:49:e5:04:24:fa:6f:d8:5d:25:27:08:20:78:c5:a4:
70:27:b8:71:28:ad:43:21:eb:ba:44:77:10:03:db:b2:86:a8:
38:2a:85:45:13:af:5a:89:4a:c0:f0:d5:e8:f3:45:ed:3d:0a:
17:ca:95:3b:3e:b8:74:a7:89:45:55:07:90:9c:85:f0:b0:98:
34:4b:7c:c9:9e:95:54:bf:05:22:19:94:f2:e3:4e:f4:12:d8:
e7:7a:66:4a:2d:a9:27:22:63:9e:55:9b:f2:b7:d6:c8:96:00:
90:97:83:a2:72:f5:07:7a:a2:e7:c5:dc:d0:fc:8e:8f:ea:c1:
bc:b3:19:3c:67:17:50:06:e7:84:f0:29:f5:2a:fa:29:3e:11:
ba:46:f9:91:10:33:45:2c:e1:7c:e1:f3:a2:4f:06:e5:66:43:
e7:26:0b:37:e2:da:12:c0:ad:97:b0:4a:8d:33:ed:c6:f9:4b:
76:bf:a4:44:51:54:3d:80:55:c1:11:51:47:79:f1:64:90:f2:
52:d0:8b:ff:26:f3:a6:b5:47:fe:9b:d0:2c:65:8e:27:33:76:
da:90:b9:b3:95:76:14:63:53:2e:95:a2:f3:79:91:41:a9:ea:
b6:1f:6a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org