Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5D58A4CC612311EE8BD4CE7C4AD9E6FC.roa
File: 5D58A4CC612311EE8BD4CE7C4AD9E6FC.roa (raw, json)
Hash identifier: R1qULK1oM1qtAVp+KxAgS0cFR7VadZA1PnNvdLuTpRE=
Subject key identifier: 80:85:20:2B:F0:B3:CB:96:C3:01:54:63:4B:28:D9:83:A9:04:10:2C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0D9B
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5D58A4CC612311EE8BD4CE7C4AD9E6FC.roa
Signing time: Mon 02 Oct 2023 12:58:21 +0000
ROA not before: Mon 02 Oct 2023 12:58:18 +0000
ROA not after: Wed 02 Oct 2024 12:58:18 +0000
asID: 212238
IP address blocks: 102.129.184.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3483 (0xd9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 2 12:58:18 2023 GMT
Not After : Oct 2 12:58:18 2024 GMT
Subject: CN=651abe6d-b4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:b4:f2:7a:8d:9a:cd:fd:74:0f:6a:7d:ea:ff:
a3:16:56:11:c3:07:e1:1f:fa:f6:ab:cf:3b:42:27:
68:e8:ff:93:54:35:9a:2f:c4:26:bd:33:23:e5:b7:
79:5e:41:21:4d:63:56:1c:e8:3a:75:69:37:ac:45:
f3:61:e5:67:6f:4b:94:4a:73:3e:b6:8c:5c:3b:85:
5c:9f:39:c8:13:91:01:44:50:10:da:0e:b6:7e:53:
cf:b0:e8:f3:01:7a:18:58:1a:1e:1b:65:36:09:74:
b5:93:af:9f:04:14:11:36:4f:47:00:e3:e0:e2:56:
6a:e9:a8:83:76:61:31:8e:da:38:ab:ec:05:8a:3e:
c2:35:b9:b5:7d:d2:97:4f:37:03:73:80:ae:bf:c6:
dc:f6:ae:c6:24:12:ad:62:45:16:90:a2:ea:ca:ea:
64:2c:69:77:13:ad:25:f2:d5:9a:fc:2c:7b:d2:8e:
39:28:0e:c4:9a:4a:6f:4b:3d:83:c8:72:03:23:7b:
41:20:e4:f2:98:58:63:1b:28:80:2e:a5:bd:5e:ec:
71:55:1e:83:6a:b1:69:c2:ed:90:04:91:2f:49:94:
4b:5e:29:28:b2:fc:75:23:72:90:2e:4a:46:9b:52:
58:21:10:99:03:97:11:92:04:ce:22:39:16:61:f3:
58:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:85:20:2B:F0:B3:CB:96:C3:01:54:63:4B:28:D9:83:A9:04:10:2C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5D58A4CC612311EE8BD4CE7C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.184.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:9c:95:ba:21:7b:00:b1:8e:db:9f:96:07:ad:5c:7d:3f:82:
44:81:38:fc:15:de:c2:d6:d4:d0:0c:26:68:65:7d:d7:70:30:
54:64:d9:83:40:a4:2f:27:84:d8:69:64:d9:f2:f8:96:3b:27:
cc:a9:74:76:c5:a7:61:86:cf:85:81:c8:f8:49:db:00:66:7d:
cc:47:8b:9d:89:c7:f0:3a:ba:5c:f9:65:10:be:47:a9:95:11:
67:d0:f9:ef:b7:f1:2c:01:1f:1b:ec:e1:a4:36:82:8a:2d:a5:
47:6e:51:18:69:12:75:4a:f5:03:45:22:f1:ba:e7:a6:f3:3b:
14:ea:b0:81:3b:57:17:75:91:54:8b:96:b8:c4:c2:60:ee:b0:
7d:f4:84:9d:ca:c1:0b:25:f0:f0:de:7f:b9:de:53:10:e5:71:
ef:76:4e:56:29:78:2d:a3:eb:88:91:f1:1f:92:3a:d6:ba:ff:
2e:76:48:8c:7b:a4:36:d1:95:1c:64:1e:f6:23:51:a5:01:84:
9c:2d:70:13:4d:7a:db:a6:46:0f:2b:81:a0:76:63:1d:80:09:
14:c2:d4:39:44:32:b1:3d:20:c6:ae:cd:d4:f7:87:3d:1a:25:
a6:14:54:58:c7:a7:d8:02:bc:04:04:46:2c:d6:c3:05:45:cb:
67:6c:5d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 2 11:56:58 2023 by rpki-client on console-ams.rpki-client.org