Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/48650C8C2A3211EDAA01DCC0F1222468.roa
File: 48650C8C2A3211EDAA01DCC0F1222468.roa (raw, json)
Hash identifier: s35zEMLUFhq/w5g1yl7o/fOvSYjzPIJpe0hdPk8PiLg=
Subject key identifier: 3F:40:0F:5B:BF:08:AC:34:0F:DA:DE:E5:1E:C9:0B:9E:76:F9:EC:64
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 07D1
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/48650C8C2A3211EDAA01DCC0F1222468.roa
Signing time: Thu 01 Sep 2022 20:11:37 +0000
ROA not before: Thu 01 Sep 2022 20:11:33 +0000
ROA not after: Thu 05 Sep 2024 20:11:33 +0000
asID: 207459
IP address blocks: 102.129.186.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2001 (0x7d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 1 20:11:33 2022 GMT
Not After : Sep 5 20:11:33 2024 GMT
Subject: CN=631111f9-992e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ac:00:98:d3:6d:2a:c3:f4:8c:95:29:95:58:
cb:76:6c:32:30:45:12:fe:9d:2d:5e:12:8b:24:a7:
9f:eb:01:1e:27:5b:c1:53:17:cc:86:c5:4b:9e:a0:
54:53:2e:5e:1b:06:de:86:ea:fc:83:75:29:60:14:
2f:df:ad:e2:f3:cb:3c:aa:ca:91:98:9f:61:d6:4f:
41:e0:4d:53:91:1c:fd:61:8a:be:ce:8b:f2:d2:26:
95:1c:5f:3b:fc:2c:91:77:de:13:60:ae:8e:02:5e:
1d:ad:c9:e1:c4:02:f2:1f:ee:1e:44:ee:7d:29:fa:
55:9f:11:d1:2b:21:f0:b3:4a:53:e1:60:ab:02:5f:
80:4b:f5:4d:7c:8b:41:30:cd:b9:87:da:e2:a2:80:
dc:2f:8e:8b:58:88:cb:e6:4b:b8:85:f0:ad:fd:24:
44:d0:ea:54:76:9f:d7:6f:16:a1:72:6c:05:13:2d:
34:21:e0:86:94:75:73:60:e8:67:2d:62:c1:f7:19:
3c:30:87:b0:32:9e:9f:f8:ed:68:a4:8c:76:43:22:
f9:c4:d7:99:8d:8b:f4:e3:b2:69:68:17:b5:96:ac:
aa:80:21:b7:68:b6:18:e3:fb:87:eb:8b:9f:95:7d:
0f:9f:6b:54:cc:f7:03:1f:0b:0d:5c:64:3e:a4:ea:
8f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:40:0F:5B:BF:08:AC:34:0F:DA:DE:E5:1E:C9:0B:9E:76:F9:EC:64
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/48650C8C2A3211EDAA01DCC0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.186.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:03:d9:fd:8a:c1:63:15:42:ca:0f:5f:7e:22:0d:b0:93:f2:
64:8a:6e:2b:88:ba:f1:24:8f:49:c3:1a:e6:d1:36:db:ed:76:
bd:40:6e:d7:09:e6:c1:8e:7f:ff:35:13:f2:3f:7d:e4:9d:e5:
83:a0:91:ee:b5:67:69:6f:37:7f:14:f8:bc:27:7b:9e:55:9b:
97:2e:ff:e3:27:8f:23:de:56:d4:45:d7:77:3f:57:e9:c9:3a:
7e:53:01:63:72:91:c6:4a:e7:2d:fb:d9:f0:b2:f3:5c:76:75:
c8:16:7c:c8:3a:4b:1a:9e:fc:b9:f6:9f:ac:fe:58:90:de:8b:
bd:70:09:65:65:95:cb:03:3b:cf:63:b4:e7:aa:fd:af:eb:62:
80:6d:3a:9f:0f:4a:2a:d0:de:d5:08:8c:46:2a:a8:f5:dc:08:
cd:c1:ef:6b:bd:7b:a1:39:1e:0d:65:60:3d:62:bb:bc:85:dc:
ed:9d:65:5a:49:12:d9:fa:dd:ab:24:2a:6a:29:8c:fb:00:c8:
fb:43:12:49:e9:c2:76:67:2a:08:62:2e:13:30:b0:57:86:7b:
1b:cc:73:64:4c:f4:9e:05:68:25:52:be:9e:72:c4:a6:4f:be:
6d:c9:0c:03:40:64:33:cb:10:1a:1a:af:eb:39:05:7c:92:3d:
23:84:70:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org