Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/461E8BC03FA211EE9A76EA244AD9E6FC.roa
File: 461E8BC03FA211EE9A76EA244AD9E6FC.roa (raw, json)
Hash identifier: aOmFDbFra8ouicyWFs6XUuWaRLBnvioi0CgItJgeu50=
Subject key identifier: 45:41:BB:2E:01:0F:02:E9:84:59:9C:F0:4D:4F:96:83:70:EE:69:0B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0CDA
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/461E8BC03FA211EE9A76EA244AD9E6FC.roa
Signing time: Sun 20 Aug 2023 21:41:09 +0000
ROA not before: Sun 20 Aug 2023 21:41:06 +0000
ROA not after: Tue 27 Aug 2024 21:41:06 +0000
asID: 834
IP address blocks: 102.129.246.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3290 (0xcda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 20 21:41:06 2023 GMT
Not After : Aug 27 21:41:06 2024 GMT
Subject: CN=64e28875-c876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:05:fa:d9:44:5f:b1:c3:1a:7f:20:96:d4:bd:
d5:77:56:cd:8e:53:d3:6c:3b:fd:4f:69:d8:97:d5:
4c:81:3b:fd:38:3a:02:ac:85:7c:3a:94:7e:6b:0a:
6b:f2:ea:8b:37:a9:e3:b0:76:0b:81:d7:cb:09:a1:
0f:31:3b:27:06:03:15:c2:0d:39:38:75:b2:1b:85:
d4:8f:8e:95:7d:6d:a2:b1:f4:01:df:86:8c:5e:9d:
4a:b6:f2:02:18:ec:2f:bc:be:44:5d:95:a3:b5:4b:
bf:1e:1e:da:2b:08:d2:c7:ae:b8:34:1b:75:ff:f1:
b4:01:87:45:f3:da:1e:9f:43:73:06:82:24:f4:12:
bb:8a:1b:64:68:a9:29:e3:0c:3f:2f:e5:69:8f:ab:
ce:8b:35:49:b4:cd:8e:9a:57:1a:49:89:24:9c:62:
8f:c7:ac:91:7b:92:81:22:d6:a8:e9:99:b6:73:db:
26:81:b8:63:ad:e0:3d:80:38:11:c2:e2:28:83:ac:
55:b1:86:f1:99:5c:59:11:4e:61:70:11:60:6b:95:
f6:90:43:0f:8e:52:16:5c:aa:e5:93:8a:b6:bf:ea:
be:c9:6e:c7:fe:49:59:78:fe:ff:85:bd:0c:4a:80:
bb:f5:59:87:82:20:ad:ad:7b:62:a2:83:f3:41:3f:
0a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:41:BB:2E:01:0F:02:E9:84:59:9C:F0:4D:4F:96:83:70:EE:69:0B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/461E8BC03FA211EE9A76EA244AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.246.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:62:aa:3a:03:f9:42:8d:bd:af:71:a7:7c:eb:30:34:3c:1f:
75:76:39:2a:29:8d:3e:41:fd:72:6e:6d:26:bd:75:99:7c:9a:
e7:29:c6:90:48:c9:f4:07:d7:99:2c:97:a5:b4:9d:2d:1a:07:
cb:d8:08:46:29:46:8c:2e:73:1e:63:2b:b7:77:c2:25:eb:2a:
70:e3:9e:67:12:5f:5a:a9:e2:be:bb:e4:78:c5:22:ca:2c:d4:
b9:d7:d0:90:c2:dc:c0:3d:94:67:dd:b3:a9:f8:42:3d:1d:4a:
2e:d5:f1:4d:9e:9d:a0:e3:8e:c2:87:27:ba:ea:15:b8:d9:45:
26:dc:b0:5b:59:0c:e1:c9:11:df:d2:c9:10:3d:f5:ca:00:91:
88:3b:42:07:dd:a3:fa:a2:0e:81:c7:79:42:96:b7:66:2b:9b:
eb:bc:31:b1:f3:b3:b0:13:3c:a1:2a:ff:f1:c5:19:54:39:2f:
06:0d:20:b9:91:9c:7f:c2:b9:d9:7d:a7:c3:58:aa:e2:08:8c:
1c:78:49:7c:79:56:2f:73:f9:73:c2:b5:9f:86:44:4f:61:24:
07:c8:4e:9a:b9:7b:b6:cc:e9:75:c7:10:bf:47:7a:5e:6f:8f:
2b:23:01:fa:4a:73:7e:a5:8b:0a:f2:ca:05:84:36:07:43:d9:
55:91:79:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 12:36:28 2023 by rpki-client on console-fra.rpki-client.org