Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4A68776892B811EE97B8BA11D25BE465.roa
File: 4A68776892B811EE97B8BA11D25BE465.roa (raw, json)
Hash identifier: mBNpr/au8Iof21GEf0f5fIbUC2cYQU50/6Uh5igPEQ8=
Subject key identifier: D5:3B:29:CB:CC:67:8F:F6:6E:E8:85:6A:06:E7:45:18:71:06:09:01
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0E68
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4A68776892B811EE97B8BA11D25BE465.roa
Signing time: Mon 04 Dec 2023 15:17:51 +0000
ROA not before: Mon 04 Dec 2023 15:17:48 +0000
ROA not after: Thu 04 Dec 2025 15:17:48 +0000
asID: 57974
IP address blocks: 102.129.168.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3688 (0xe68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 4 15:17:48 2023 GMT
Not After : Dec 4 15:17:48 2025 GMT
Subject: CN=656ded9f-db93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5e:98:e4:f0:5c:f0:3c:73:34:c2:d0:1e:73:
08:e3:7b:12:8b:dc:e8:b6:49:9e:0f:5a:81:e7:3a:
f4:34:9d:d7:cc:c6:29:9b:b1:ec:42:99:95:e0:72:
3c:c1:c7:99:65:64:40:ac:d0:88:17:c2:f7:72:25:
77:04:85:17:6d:6b:86:ac:30:3b:e2:71:ce:74:69:
a1:77:15:70:cb:da:f1:c9:4b:1c:c7:12:c1:b2:13:
b5:7a:fc:89:97:31:fc:ef:63:4a:c9:54:57:26:bc:
ef:58:3c:0b:51:aa:b5:ad:ec:22:28:88:3d:31:48:
34:9e:05:13:de:57:de:4d:07:d5:30:ed:1f:e5:3b:
8d:6d:e6:71:cd:cf:c2:45:9f:9b:e3:7e:a3:43:56:
23:f8:44:cf:34:5a:8d:99:c6:42:be:40:c7:03:f1:
34:01:e0:01:09:8e:a7:eb:0f:c0:f8:a9:c5:ed:86:
18:ca:ba:73:1b:27:81:f0:53:96:f6:69:91:1c:73:
b2:d7:80:8d:91:bc:4d:b4:37:5d:63:66:51:c5:82:
e9:e9:e1:c6:d1:b0:22:5c:1e:2c:f8:3c:d3:a1:4f:
c3:cf:04:4a:f1:9d:ef:7b:c1:45:8e:8f:75:26:ce:
e7:3b:bf:ff:00:8a:47:44:f2:6a:36:d3:75:86:7e:
96:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3B:29:CB:CC:67:8F:F6:6E:E8:85:6A:06:E7:45:18:71:06:09:01
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4A68776892B811EE97B8BA11D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.168.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:57:07:8c:ef:84:a3:4b:f0:bf:6f:2a:bf:8c:fc:79:ac:e6:
cf:1a:7b:7a:9e:82:49:ab:85:bd:c7:35:67:55:41:23:1c:80:
a7:9e:8a:5b:c1:cd:29:84:32:72:30:f8:97:7a:d3:92:da:5a:
76:21:fa:84:91:27:7b:06:7c:c0:a7:dd:8d:ea:27:ad:05:23:
4c:20:11:0e:13:e1:cf:79:68:93:58:16:4d:f7:18:e0:2d:25:
bc:15:33:01:8e:4b:bf:74:49:27:ff:f5:58:4a:b2:79:b8:a9:
c2:c7:af:bc:8b:36:f4:cf:55:6f:a8:a2:1c:2b:05:c2:97:aa:
59:2a:74:fa:0f:f8:b7:51:e3:3f:b0:11:e9:15:b6:3d:a9:42:
01:9d:3f:39:71:1f:d3:79:eb:98:91:d9:85:01:77:a3:9e:e9:
e9:ab:7d:f9:42:eb:e1:cc:31:22:a9:bb:e9:c2:20:40:f4:13:
d4:82:99:f5:b2:fd:32:19:3a:43:83:d4:97:fe:5f:20:6a:f4:
7e:89:fb:6f:a0:60:01:f3:d0:ec:f5:24:98:43:45:a8:d3:6a:
22:95:90:25:e6:95:0d:a0:3f:66:4f:f6:cb:7c:2a:fe:8e:25:
00:3f:25:0b:2b:fc:f6:4d:34:a0:9b:6a:12:81:b0:5c:df:20:
ff:07:e4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 17:14:08 2024 by rpki-client on console-ams.rpki-client.org