Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5357464A517411EE9ECA27714AD9E6FC.roa
File: 5357464A517411EE9ECA27714AD9E6FC.roa (raw, json)
Hash identifier: 2oW6KMQIL2DBUULjm/euDnQ8v0lW24Xh5gpaMMQaAr4=
Subject key identifier: 36:5C:F0:3A:A5:D6:07:03:9B:E4:6A:FB:9D:1B:39:DC:2B:0A:90:B3
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0D34
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5357464A517411EE9ECA27714AD9E6FC.roa
Signing time: Tue 12 Sep 2023 13:57:35 +0000
ROA not before: Tue 12 Sep 2023 13:57:32 +0000
ROA not after: Sat 13 Sep 2025 13:57:32 +0000
asID: 213060
IP address blocks: 102.129.206.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3380 (0xd34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 12 13:57:32 2023 GMT
Not After : Sep 13 13:57:32 2025 GMT
Subject: CN=65006e4f-3acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:71:bc:bd:b6:89:45:43:32:70:a5:0b:3d:54:
91:8f:ab:48:e1:e3:e2:45:d1:f6:56:f5:81:60:31:
09:02:a8:bc:a3:a0:7f:41:9e:3d:10:57:54:ee:70:
60:63:8f:42:7c:f7:da:e3:bb:de:ad:31:c1:3e:13:
7f:bf:fc:78:08:0c:37:5e:72:31:05:f8:83:49:63:
35:37:0b:59:26:e1:bc:80:88:72:0e:30:32:7c:2b:
ce:d5:72:1e:e0:cd:b0:e1:d1:86:c5:25:2e:eb:0c:
5c:db:e5:47:45:cf:0e:fc:11:b1:40:6f:17:7d:67:
fb:cf:cc:a6:52:25:4c:29:2b:5d:3a:62:7c:2b:8b:
6a:36:cc:33:fa:6d:a3:13:25:83:20:50:05:1c:4c:
9f:fd:a7:c5:aa:b4:79:d3:b2:42:9f:04:c5:cd:fe:
6c:e7:7e:7b:57:ee:d4:e2:ca:71:0c:cc:b2:c8:b2:
14:50:ac:61:c2:6d:01:d9:94:87:ee:1a:3e:c4:57:
3d:0e:e3:cb:ae:88:11:bf:64:9d:41:4b:84:37:48:
7f:da:ca:15:30:0f:4f:07:86:6b:02:f9:3d:95:c0:
16:47:04:e3:84:18:07:ab:da:5d:4e:8d:46:65:a0:
3d:65:bf:eb:b2:df:ba:e4:36:6e:ff:12:2b:ed:7b:
1d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5C:F0:3A:A5:D6:07:03:9B:E4:6A:FB:9D:1B:39:DC:2B:0A:90:B3
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5357464A517411EE9ECA27714AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.206.0/23
Signature Algorithm: sha256WithRSAEncryption
93:69:52:13:00:88:99:6b:97:e2:6c:0b:ca:ef:f9:85:8d:7a:
72:c9:3f:ed:2a:c3:66:3e:a4:34:29:f2:35:f6:3c:7b:b4:2d:
be:59:f7:ba:10:9b:69:8e:07:a1:68:8e:ef:df:83:05:3e:74:
ec:a1:e1:64:0e:bd:2b:63:75:c5:58:99:07:1a:6f:9d:84:ea:
f9:23:bf:dc:d4:00:46:82:4a:b9:d3:83:2a:2c:f7:66:4c:7e:
6d:4d:f2:f4:09:3f:91:50:07:69:56:b8:d4:13:8c:b2:51:05:
fd:38:aa:85:c4:55:31:83:56:3b:79:6d:8f:5b:83:7e:3b:d9:
a6:c6:b0:b0:6d:ca:ea:c2:0c:b7:bc:48:c8:d9:71:d3:69:95:
66:41:0a:95:79:a0:66:6f:56:d0:05:37:38:cc:26:db:8f:87:
cb:a2:10:94:7e:1a:01:93:47:c0:b7:d4:0e:88:4b:c2:cc:e1:
7e:45:83:2c:fa:97:f0:f3:8b:6e:d0:4a:47:73:6a:b3:58:79:
40:17:61:91:71:95:a0:ad:1e:8c:e3:ea:be:c8:af:6c:9f:06:
66:cc:99:17:63:6a:5b:b5:d2:b8:97:29:a9:17:3a:65:57:77:
1d:11:af:ec:ac:b0:70:fd:00:23:04:f5:c4:05:e3:f9:ab:09:
4b:10:53:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 13:02:55 2023 by rpki-client on console-fra.rpki-client.org