Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3EAA646A4EFA11EEA1B57D104AD9E6FC.roa
File: 3EAA646A4EFA11EEA1B57D104AD9E6FC.roa (raw, json)
Hash identifier: /1hXMSqAJAAvYMLzBsfEvGCnEyIjwLvdl4dc1pDApUU=
Subject key identifier: 55:00:85:62:2D:7E:A1:0B:D1:B4:28:DE:02:60:9A:EF:A5:14:EE:53
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0D29
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3EAA646A4EFA11EEA1B57D104AD9E6FC.roa
Signing time: Sat 09 Sep 2023 10:18:39 +0000
ROA not before: Sat 09 Sep 2023 10:18:35 +0000
ROA not after: Tue 09 Sep 2025 10:18:35 +0000
asID: 834
IP address blocks: 102.129.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3369 (0xd29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 9 10:18:35 2023 GMT
Not After : Sep 9 10:18:35 2025 GMT
Subject: CN=64fc467f-923d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d8:3f:b7:5d:3e:9e:f6:66:42:aa:22:30:80:
6d:a5:70:1b:b7:94:87:5f:bf:87:b5:00:e4:be:ae:
0c:9f:57:99:77:a4:02:f3:96:18:56:67:02:0b:60:
41:c5:3c:34:c6:65:66:dc:1f:94:82:16:f6:e5:ca:
25:51:70:6c:13:25:6b:23:ea:57:83:c7:6f:45:c6:
12:b5:e6:78:17:d9:9e:8f:3f:11:75:a6:34:ba:09:
5c:c6:6b:a6:9a:df:10:b7:a2:3d:f9:64:9a:c8:eb:
59:5b:07:aa:87:9f:c0:a6:95:f9:f4:b2:7f:32:8a:
c2:f9:3b:22:a2:0f:d9:15:2e:23:b5:1f:2b:f3:82:
67:ef:07:76:db:d0:44:44:fc:0d:08:c7:58:23:de:
82:3d:e3:eb:d0:b2:88:f9:f1:9f:b1:e6:6a:ff:75:
2b:bc:dc:3d:35:cb:90:06:79:5b:c7:b6:5e:26:71:
92:42:bf:59:2c:b7:db:62:2b:f5:3d:7a:a4:48:7a:
42:a4:fb:f8:b5:2a:ed:53:25:07:70:49:c8:eb:ef:
c8:00:9f:41:6d:63:cc:f5:23:e2:93:85:9e:88:32:
fc:b8:4d:dc:bf:b3:b0:f5:2f:d1:f2:5f:10:84:ae:
8c:87:8b:bf:35:de:5d:ce:1a:06:ba:fb:ac:e1:46:
b3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:00:85:62:2D:7E:A1:0B:D1:B4:28:DE:02:60:9A:EF:A5:14:EE:53
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3EAA646A4EFA11EEA1B57D104AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.157.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:82:45:55:99:b5:fb:8d:19:5d:5c:1c:6d:6e:84:e7:bd:47:
fd:e6:2e:a8:2a:80:2a:38:51:1b:e6:54:58:bd:9e:ae:5f:f1:
a2:5c:91:87:71:d4:92:17:59:d6:47:f4:f8:8d:46:5e:87:c5:
0b:f6:fd:f1:f4:f8:42:d9:27:25:9a:53:a5:57:a8:f9:f8:da:
68:67:21:9e:68:98:ad:0c:1d:16:94:69:6c:df:7a:58:63:f1:
45:fe:c4:35:09:e0:97:4b:04:9a:8e:ea:26:56:dd:e4:3a:b9:
8c:65:04:05:66:a8:7e:b3:8b:ae:8e:3d:55:bc:5c:42:84:01:
67:28:9e:e2:e0:ec:c8:b1:40:e4:ee:c3:d9:f4:c0:99:5d:38:
73:9d:ca:31:2c:31:26:cd:44:93:b5:e8:57:c2:e0:9c:88:72:
77:6c:31:d9:b4:11:aa:35:de:a0:50:4b:5f:9c:e3:05:7d:86:
f8:bc:d1:28:5a:52:9d:0b:0f:fa:3e:4d:a6:2f:49:32:e5:e8:
10:de:5c:8c:e2:92:55:72:9e:76:4e:15:04:46:cc:6b:4a:38:
49:b8:5b:c6:36:d0:4c:9c:ec:a4:bb:86:5c:26:b1:ac:27:f7:
86:8e:c2:5c:85:b8:5e:23:2a:6b:0c:1d:be:00:18:60:79:8a:
99:4c:7d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 11 14:17:18 2023 by rpki-client on console-fra.rpki-client.org