Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5AB358D6B2AD11EDBC2906AFF1222468.roa
File: 5AB358D6B2AD11EDBC2906AFF1222468.roa (raw, json)
Hash identifier: oub/cKxwszp61VS+6w+D+2gcIQbpa3hYJb6+S4HEV3g=
Subject key identifier: EC:59:D4:59:81:8A:26:A0:57:7C:73:28:BF:FF:22:AD:33:85:5D:26
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A61
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5AB358D6B2AD11EDBC2906AFF1222468.roa
Signing time: Wed 22 Feb 2023 12:35:15 +0000
ROA not before: Wed 22 Feb 2023 12:35:08 +0000
ROA not after: Sat 22 Feb 2025 12:35:08 +0000
asID: 834
IP address blocks: 102.129.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2657 (0xa61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 22 12:35:08 2023 GMT
Not After : Feb 22 12:35:08 2025 GMT
Subject: CN=63f60c03-2589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:07:2b:59:44:16:cf:02:49:a1:77:bf:79:3b:
3a:97:d8:89:89:68:ae:c3:56:65:86:58:45:29:ef:
9e:ba:bb:ab:1b:a2:29:4a:11:7a:8d:24:3b:57:65:
06:33:73:b3:73:68:bd:60:45:4e:3f:7d:17:45:27:
33:29:d6:e8:e4:e6:eb:53:f4:f0:cf:55:dc:4e:75:
30:2d:fe:9f:c4:7e:1e:0e:14:c7:b2:2d:45:70:e2:
33:4c:df:97:dd:9b:8b:ef:f9:71:14:f9:f4:ae:43:
e2:02:6c:83:aa:37:81:49:e3:8d:19:fc:75:4c:f6:
d2:c1:bd:23:7a:1a:d6:a1:3b:43:25:d8:1a:b3:78:
ec:01:3d:94:2c:a7:5f:63:11:d0:a1:9a:27:6b:35:
38:36:c7:31:49:34:78:46:4b:7e:83:69:ab:4c:c5:
80:66:31:11:6f:1a:3f:6f:ce:46:66:d1:41:e3:a8:
08:e3:71:c6:16:c4:c2:b0:48:4b:52:00:56:aa:22:
f9:bb:3e:71:23:f2:81:20:0f:5c:dd:8d:f5:93:52:
a5:44:21:57:2e:1e:4d:76:6f:43:b8:00:3d:b9:71:
3a:a4:1e:ed:ac:ec:d9:b1:a7:da:e2:32:ec:55:a3:
13:54:3e:c5:93:e5:63:70:e2:48:ea:1b:b0:2e:a8:
de:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:59:D4:59:81:8A:26:A0:57:7C:73:28:BF:FF:22:AD:33:85:5D:26
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5AB358D6B2AD11EDBC2906AFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.247.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:09:d6:6a:4b:52:10:3f:97:53:be:28:26:f8:4b:24:44:83:
ec:d4:e9:89:2f:07:db:7e:44:7c:26:93:8a:43:22:85:15:64:
33:af:92:89:d5:aa:61:cf:41:f9:31:64:6b:e5:f5:a1:ec:00:
91:85:80:e8:39:c5:93:29:c2:00:ad:36:ed:e3:4a:99:4c:f5:
3c:e9:6e:6c:4e:ae:2b:e3:45:49:3b:18:e2:ca:35:90:55:d2:
b0:82:07:e0:35:8c:07:90:10:42:8b:54:33:0e:9f:e0:8c:55:
bd:ea:0e:90:9d:11:22:7d:96:32:8b:8e:22:45:c1:45:ac:5b:
09:f6:d5:38:9a:c8:1e:c2:d1:91:4e:c7:a2:f5:7a:2e:2c:34:
81:7b:a1:9f:d8:09:f0:40:f8:29:af:a0:2c:b3:68:83:9f:ce:
a2:c7:30:00:c5:ca:f4:c1:36:48:9c:f2:f5:91:ff:21:e5:84:
0a:08:67:44:f1:14:9e:33:4c:5e:d9:3a:c2:92:61:0c:44:47:
54:2d:14:e6:71:a8:a2:3a:7f:89:ea:ce:68:a0:d9:ff:3b:87:
2d:2c:7b:81:eb:2c:b5:aa:7e:6f:37:3e:74:b0:5a:a9:69:f8:
7a:71:69:0e:9c:9c:b3:4b:a2:34:97:a8:59:d7:01:e3:56:b1:
d9:8c:45:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org