Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/577F67BC0BAA11EEAF54C85C4AD9E6FC.roa
File: 577F67BC0BAA11EEAF54C85C4AD9E6FC.roa (raw, json)
Hash identifier: B/63XYr7zetkfuPJ6zf7A9KKKbbpFMz2E9Nsr+66gT0=
Subject key identifier: 35:4E:8D:19:B2:0B:D6:6F:6A:21:26:EF:42:70:79:AD:3E:27:49:B8
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0C09
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/577F67BC0BAA11EEAF54C85C4AD9E6FC.roa
Signing time: Thu 15 Jun 2023 18:27:54 +0000
ROA not before: Thu 15 Jun 2023 18:27:50 +0000
ROA not after: Sun 15 Jun 2025 18:27:50 +0000
asID: 48678
IP address blocks: 102.129.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3081 (0xc09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 15 18:27:50 2023 GMT
Not After : Jun 15 18:27:50 2025 GMT
Subject: CN=648b5829-7e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e9:a8:c6:8e:fe:1d:10:42:a4:3d:45:93:db:
bf:32:9e:8a:34:e8:67:17:7b:b5:c1:cb:06:fb:af:
a6:ca:fd:fb:20:68:30:43:7a:16:8e:d6:0c:11:4c:
27:a6:72:17:7a:6d:d0:64:1b:22:e2:bc:f0:6b:d0:
06:b0:03:6c:98:54:0c:bf:5d:8a:4e:13:d8:68:c8:
67:71:3e:12:0b:6d:5f:ee:a1:00:dc:a1:43:03:c4:
64:51:ad:3c:79:c2:a6:3a:52:a4:d9:51:aa:50:76:
31:bf:7d:0d:7d:28:ce:f3:a9:f0:74:bf:de:07:e4:
db:67:e3:09:80:45:79:69:bb:bf:62:39:5c:b5:d7:
2f:1f:72:03:f3:77:68:d4:0a:13:ea:77:e3:c6:c5:
03:b0:ee:38:b0:58:c5:6f:34:a9:b1:8c:2c:bb:06:
ac:ca:db:ba:17:b3:8a:65:4b:f9:a7:d8:a9:5e:1a:
95:b0:07:81:75:8c:e4:8e:c7:d8:42:ca:da:5e:13:
e0:f9:83:87:13:ed:ac:6d:d7:49:52:e4:f1:0c:76:
2f:ce:49:2d:ed:25:7b:42:69:f5:0f:4a:40:76:0a:
74:cc:4b:37:57:6b:d0:bc:23:55:fa:04:48:3e:65:
94:ae:f9:30:43:ff:53:89:4d:15:d8:ef:e8:5e:bf:
07:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4E:8D:19:B2:0B:D6:6F:6A:21:26:EF:42:70:79:AD:3E:27:49:B8
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/577F67BC0BAA11EEAF54C85C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.226.0/24
Signature Algorithm: sha256WithRSAEncryption
46:1f:70:05:d2:f8:55:ff:30:2e:84:21:c0:e6:cc:e1:45:44:
c4:6a:4a:3d:92:c8:20:bc:f8:cc:e1:ae:85:de:67:1e:20:12:
eb:59:9d:f2:ea:b2:ce:ea:dc:93:a7:d2:f1:26:c8:90:e8:79:
9b:75:03:9c:82:9f:cd:7b:15:6d:29:7e:a6:bd:4c:7d:de:a1:
7e:de:f8:96:48:a0:61:54:4a:99:a2:68:24:f3:5d:41:f5:ea:
7a:6a:c2:c0:26:52:35:cd:4f:79:7a:97:88:6d:90:b5:73:23:
b2:a6:a3:fa:9b:2e:52:75:20:ed:7e:f2:2b:8e:48:91:cc:30:
18:58:45:b9:63:a0:3d:0b:d9:1e:11:8b:2f:76:54:48:92:d5:
e5:f6:15:e8:9c:f4:10:ee:98:e8:f1:cd:40:f0:48:41:dc:98:
5e:dd:f1:57:17:3a:bf:27:81:72:ae:48:c9:41:8d:e4:a9:4e:
7f:bd:11:40:db:44:cb:a3:b1:d1:a9:09:b2:12:af:0e:78:2a:
2b:5e:0c:2a:bc:72:f4:d5:ea:aa:c7:f7:64:fe:8b:c7:2b:e2:
ac:03:1a:5a:c5:84:b8:88:8c:42:13:0a:6c:23:f5:5b:61:bd:
32:eb:46:de:ab:17:21:97:51:0a:b0:d3:21:40:dc:ec:ff:4a:
93:b0:de:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org