Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4693C1809B4411EE8D70D00DD25BE465.roa
File: 4693C1809B4411EE8D70D00DD25BE465.roa (raw, json)
Hash identifier: vAf8lJNUrYC6bgevR9SfXe1wwH6tpqlG9VKlKYnxu+U=
Subject key identifier: 56:AC:B9:82:E0:71:AA:3D:72:4C:9C:D5:A2:57:E6:5F:10:8A:5D:89
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0E8C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4693C1809B4411EE8D70D00DD25BE465.roa
Signing time: Fri 15 Dec 2023 12:20:04 +0000
ROA not before: Fri 15 Dec 2023 12:20:00 +0000
ROA not after: Tue 31 Dec 2024 12:20:00 +0000
asID: 834
IP address blocks: 102.129.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3724 (0xe8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 15 12:20:00 2023 GMT
Not After : Dec 31 12:20:00 2024 GMT
Subject: CN=657c4474-458d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1a:7a:36:32:0f:a3:d8:fd:ea:e9:a7:be:2f:
e8:43:68:8a:eb:21:9b:d3:b3:da:5d:e5:59:49:e4:
e5:50:0f:dc:9c:66:36:15:4d:db:d0:f0:d3:11:4e:
31:39:f5:be:90:7e:2d:89:40:4f:f7:0c:4d:cc:02:
c2:73:9c:2e:4f:24:b0:1e:ed:23:cc:96:06:e6:c8:
7d:3b:99:e7:64:5e:ca:bf:05:a2:4b:d6:3d:80:d3:
8e:32:82:2c:16:65:e7:57:3d:36:65:ad:31:2e:7a:
5b:fb:51:07:d4:dd:bb:dc:b5:cd:17:9e:78:2f:b3:
bc:f0:6c:b6:c1:83:9e:aa:ce:9a:03:5f:c1:8c:e0:
09:18:0e:28:7c:fb:27:fa:63:6b:d4:d5:f7:09:ed:
20:2e:b9:36:04:b2:07:27:2f:8c:d9:e1:70:2c:a2:
16:af:a9:08:c7:2f:a6:52:87:e3:1e:5a:12:d9:72:
24:0a:6e:19:12:a4:09:aa:1a:4d:a0:18:3c:64:f6:
a7:b0:e9:00:2c:24:9f:24:0e:b7:d2:ff:c7:84:be:
92:5c:16:ab:5b:14:ce:38:1c:9d:3e:10:b5:73:c3:
8d:4e:af:9a:1a:6e:89:4a:ac:ba:cf:2d:0b:08:c2:
a7:80:cd:cd:bd:dd:54:de:a5:bd:e2:76:17:64:76:
ab:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AC:B9:82:E0:71:AA:3D:72:4C:9C:D5:A2:57:E6:5F:10:8A:5D:89
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4693C1809B4411EE8D70D00DD25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.217.0/24
Signature Algorithm: sha256WithRSAEncryption
90:ad:98:25:ef:87:48:6e:3e:da:fb:90:3e:47:4f:1e:7c:3e:
a1:77:6b:a9:5e:3b:77:0e:72:14:d8:19:4c:b2:b6:fb:8c:d6:
bc:3d:38:98:01:16:1b:84:77:86:f0:93:09:92:6d:ef:99:6d:
07:7c:c9:c9:ce:f7:05:6d:4a:fb:92:d8:31:54:cc:3d:ce:5d:
ad:f3:48:62:80:d5:db:d4:18:c5:bd:c6:4e:20:2b:6e:34:03:
3b:33:22:09:d4:38:52:92:6e:65:b1:1f:44:52:44:54:d2:35:
98:2d:1c:22:08:d5:0e:52:69:49:de:85:e5:83:5d:12:c2:c2:
33:19:24:a7:c2:3a:b3:00:79:0e:12:56:e7:76:c0:14:e7:36:
24:ff:4d:0e:44:f4:c2:2c:10:f5:c7:cc:d0:7e:ff:5b:0a:30:
f7:47:2d:20:8c:1f:a0:f2:27:8c:49:08:4b:d3:cc:b1:04:d0:
fc:f1:fc:80:4f:87:6c:6e:cf:bf:80:36:55:e3:64:7a:af:ed:
7b:e6:4e:d5:e8:8d:0e:aa:be:b5:5e:ee:c4:2f:99:72:80:0d:
f8:4c:38:ee:36:2e:98:ed:e5:a0:ec:8f:f3:46:6f:8a:9e:08:
5e:a2:bc:54:d0:da:53:0a:e9:b1:e0:5a:33:18:7f:38:7b:d7:
82:0d:3f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 17 11:43:23 2023 by rpki-client on console-ams.rpki-client.org