Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/45D71070077A11EEBF1FBD494AD9E6FC.roa
File: 45D71070077A11EEBF1FBD494AD9E6FC.roa (raw, json)
Hash identifier: mIYIz8NsbIoVXCfLDc1oyKxCacliIga2KTNYUMsDF2w=
Subject key identifier: 27:E7:65:3C:F4:08:E7:5F:A1:B5:4D:29:32:64:38:3E:FC:14:48:54
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0BEC
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/45D71070077A11EEBF1FBD494AD9E6FC.roa
Signing time: Sat 10 Jun 2023 10:33:43 +0000
ROA not before: Sat 10 Jun 2023 10:33:40 +0000
ROA not after: Tue 10 Jun 2025 10:33:40 +0000
asID: 61317
IP address blocks: 102.129.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3052 (0xbec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 10 10:33:40 2023 GMT
Not After : Jun 10 10:33:40 2025 GMT
Subject: CN=64845187-15a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:94:91:d4:70:53:8e:64:c8:51:ec:44:00:21:
56:b3:a9:6d:02:1d:bf:24:9a:e8:76:a7:15:fb:8a:
eb:dd:99:4c:ab:be:65:d6:4b:00:79:26:59:a4:56:
e2:8f:97:d9:a4:bd:a9:03:b1:fd:20:90:b4:a9:3c:
56:50:c3:c1:65:ac:00:85:be:67:63:99:e4:f2:bc:
55:5d:cd:ce:66:e8:76:ad:ed:52:a4:e2:ea:11:c6:
7a:5c:6c:66:77:e0:ab:04:c4:c8:8c:cd:85:1f:59:
8d:a2:4e:f1:1b:69:bd:64:17:46:55:07:fc:b1:17:
f5:06:9b:9a:99:9d:87:ac:a8:12:01:ec:22:c8:f5:
0a:6b:ec:66:a0:a0:db:9b:af:cc:f1:48:90:e7:98:
25:2b:4a:3f:b2:e5:b1:68:e2:1c:57:dc:39:75:09:
f5:dc:9d:dc:b3:86:90:7a:40:05:06:25:15:28:a0:
77:2d:9c:a4:9b:7e:75:68:cb:54:98:22:bd:1f:80:
27:b3:ed:fd:9e:d9:b4:e0:c1:38:81:b6:52:cd:3d:
d1:c0:2e:32:d8:18:64:9f:a7:0f:ea:f1:44:7a:a8:
46:5b:33:51:41:94:bb:c8:4d:af:f1:c2:c1:f6:e9:
74:e3:84:7e:f2:d1:38:e7:14:5c:3d:1c:49:7c:dc:
25:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E7:65:3C:F4:08:E7:5F:A1:B5:4D:29:32:64:38:3E:FC:14:48:54
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/45D71070077A11EEBF1FBD494AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.207.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:cb:70:ba:d4:ab:45:5f:7c:98:65:cc:eb:1c:a0:a1:be:43:
9c:e8:8a:4b:ef:f2:9d:6d:fc:67:86:cc:6c:a8:5b:c0:d0:8e:
69:89:5f:6b:71:02:15:dd:48:01:26:b9:12:0d:8c:ac:89:8a:
26:d2:b2:a8:d0:75:b7:c4:e6:6d:01:22:d9:94:d8:94:f1:63:
8b:d3:f7:1f:25:48:c2:89:18:3b:9a:d0:57:8d:27:01:d8:4a:
32:ab:bd:df:28:09:8c:ce:f1:aa:98:3d:3b:f9:a8:9d:b5:da:
ed:84:b1:ef:7c:c6:3a:c2:74:fd:e0:de:ed:d7:2c:ce:d7:8c:
cd:65:bc:2f:6c:0e:72:c3:96:36:5b:c1:3e:5d:81:9f:5e:d2:
f5:2f:49:85:aa:2e:99:b1:2f:1b:73:28:e2:ac:a4:64:6d:c2:
e5:61:e9:29:05:52:41:5d:8b:f3:43:18:27:df:3e:2d:93:5d:
ca:bf:52:95:c5:29:cc:f3:68:da:c6:2e:87:88:9d:3b:7f:69:
83:42:27:2d:82:1e:7c:ca:e0:ac:fe:f6:74:f8:b3:91:5c:95:
09:a0:15:b6:00:e6:f3:c4:c2:7b:69:7c:1d:38:79:1c:1f:06:
a2:ab:05:5f:15:20:9d:75:7b:b8:cd:8b:fd:8b:0a:a0:2e:2b:
be:e6:43:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org