Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5EA6D2D2673F11EEB78E5F654AD9E6FC.roa
File: 5EA6D2D2673F11EEB78E5F654AD9E6FC.roa (raw, json)
Hash identifier: PgykFyKnMcgkNJXg0qiF/+KTpWfrPHMp9JiXveS+1OI=
Subject key identifier: 90:DC:ED:D7:CA:7F:71:44:3D:21:EC:81:79:2E:3F:50:70:8A:BB:FB
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0DBA
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5EA6D2D2673F11EEB78E5F654AD9E6FC.roa
Signing time: Tue 10 Oct 2023 07:33:56 +0000
ROA not before: Tue 10 Oct 2023 07:33:53 +0000
ROA not after: Wed 16 Oct 2024 07:33:53 +0000
asID: 834
IP address blocks: 102.129.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3514 (0xdba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 10 07:33:53 2023 GMT
Not After : Oct 16 07:33:53 2024 GMT
Subject: CN=6524fe64-0f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cb:3c:a0:9d:8d:7e:09:22:d9:84:a8:df:d4:
b9:a7:d7:75:a0:66:ec:0e:f8:7a:a9:59:e6:6b:82:
cc:c6:75:1e:61:21:32:b1:58:0e:a4:b7:b3:30:8c:
e6:bb:d1:6c:09:9e:0c:84:5b:49:2d:7b:86:49:b5:
a4:16:ef:9b:55:6c:66:9c:5b:cc:b1:99:b3:ad:e2:
c3:1c:67:87:d9:27:44:20:2a:44:3c:67:11:89:4c:
52:53:28:c7:44:0e:a6:c2:ad:42:e8:c4:8a:88:bc:
2c:ec:c3:40:d1:01:aa:4d:e0:78:bf:21:ef:6c:8b:
1d:77:2e:c8:ea:5f:dc:a5:b9:88:2b:e7:cf:45:67:
c8:0a:56:2d:36:68:4e:18:64:ff:dc:94:2f:45:ff:
e6:c0:27:ef:d9:5f:74:77:f3:63:f9:06:af:84:c3:
ff:3f:43:70:b3:03:29:b3:a6:22:6d:08:a6:bd:00:
f6:b9:96:fd:8a:9e:ea:ab:7b:96:d9:35:17:8b:9e:
4d:98:69:d7:c3:9c:62:03:fe:be:87:43:df:99:cf:
e2:ab:42:3f:17:45:d3:63:13:75:04:49:21:f6:04:
ec:97:f0:9a:1e:87:5e:74:05:cf:1a:64:67:ba:5e:
4c:9e:fc:31:73:af:98:84:23:d4:2a:7a:1a:2c:5f:
73:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DC:ED:D7:CA:7F:71:44:3D:21:EC:81:79:2E:3F:50:70:8A:BB:FB
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5EA6D2D2673F11EEB78E5F654AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.180.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:a4:80:f6:15:19:d7:26:e6:93:38:15:47:e2:7e:d0:10:ec:
43:d1:26:86:43:5d:f7:42:63:10:6b:b6:51:35:68:3a:dc:ba:
94:32:ed:de:eb:40:56:48:59:73:b1:be:25:4a:6b:2d:5f:e0:
51:75:37:6d:7d:71:54:9c:c5:85:a5:9d:4b:b5:a6:f7:b2:79:
30:e9:5f:78:55:8d:27:40:28:3a:11:df:c4:9c:f9:67:1d:16:
6c:aa:46:d7:86:aa:6c:07:34:ef:68:df:2e:af:95:ce:54:d2:
52:3f:bc:0e:57:77:fa:4b:97:70:24:d0:c0:76:56:1c:65:ff:
6f:9a:40:e9:50:59:04:79:2c:7b:17:80:48:58:5c:4b:e7:95:
90:67:9c:5f:0f:d4:49:c2:66:ed:fd:1e:1b:8e:1b:a9:ee:9f:
b5:74:76:54:19:bd:c4:5b:1b:b8:19:43:ed:d1:6c:0e:db:40:
33:60:df:c4:47:a1:fb:72:43:d9:82:73:03:2e:5b:2c:f0:e0:
50:9f:c0:dd:0c:20:cf:a5:f9:72:38:f1:95:1e:20:56:62:f1:
f3:b9:21:04:53:5d:f2:ec:aa:ed:95:02:99:9a:b8:b4:f8:d9:
2a:60:b9:17:a8:01:49:ba:80:17:2a:85:98:02:d8:00:74:76:
83:f1:30:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 10 17:41:17 2023 by rpki-client on console-ams.rpki-client.org