Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5F13137CFDED11ED96B39C464AD9E6FC.roa
File: 5F13137CFDED11ED96B39C464AD9E6FC.roa (raw, json)
Hash identifier: utZ001e3ACqOeekf0fgVYGGy7GaVcqAW8WcoCpCNpuM=
Subject key identifier: 31:80:07:F1:68:C3:83:67:98:2C:24:D8:04:48:53:52:67:77:D0:CF
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0BA7
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5F13137CFDED11ED96B39C464AD9E6FC.roa
Signing time: Mon 29 May 2023 06:52:26 +0000
ROA not before: Mon 29 May 2023 06:52:22 +0000
ROA not after: Wed 28 May 2025 06:52:22 +0000
asID: 834
IP address blocks: 102.129.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2983 (0xba7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 29 06:52:22 2023 GMT
Not After : May 28 06:52:22 2025 GMT
Subject: CN=64744baa-c35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:06:a1:4f:49:2d:73:af:7b:57:16:f5:0a:54:
50:9e:27:41:8b:2e:59:df:db:0c:04:d3:9b:85:53:
a8:29:b3:84:56:76:38:ff:81:35:76:ef:62:33:c0:
5a:33:aa:6c:15:9f:41:92:ce:9a:07:52:10:43:46:
68:95:a0:1f:87:15:c9:26:2f:59:0f:56:e3:96:ae:
0a:e3:e8:0f:9d:70:4c:3f:83:19:0d:24:9f:32:3d:
49:02:3b:6a:62:05:70:19:7e:84:c2:c6:9a:ba:63:
ca:a6:88:a2:1f:ab:1a:2d:7f:a7:39:54:a6:28:3e:
ab:40:ad:65:81:4b:27:8b:9c:42:1e:82:e7:e7:6b:
6a:71:05:24:7e:e2:73:24:fd:67:47:bd:b1:c2:01:
12:97:19:19:2e:12:4b:54:e7:63:10:3f:cd:3c:46:
74:12:7a:bc:b5:46:23:23:e6:76:4e:96:88:ee:7b:
1f:ce:ce:aa:ae:a1:97:d9:2c:45:80:7c:b8:4c:58:
0b:2b:28:1c:a6:e6:8c:4d:f8:07:60:ca:60:fa:44:
36:08:56:73:f4:dc:2a:6a:6c:cf:43:19:9d:4b:60:
12:69:9a:3a:9e:f7:29:27:d9:9e:4c:03:f0:71:95:
44:92:f1:8b:cf:1c:52:87:0e:a8:e3:51:08:3d:60:
43:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:80:07:F1:68:C3:83:67:98:2C:24:D8:04:48:53:52:67:77:D0:CF
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5F13137CFDED11ED96B39C464AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.165.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:b0:18:2d:f8:4f:cd:98:02:05:4b:52:da:7f:7c:95:f5:3f:
b0:c3:bf:69:d7:a3:25:0a:5f:f1:35:c4:80:17:aa:96:ca:ff:
69:e5:31:48:4d:e0:e2:02:d4:de:9a:4c:0b:b4:ca:60:88:a3:
41:e5:56:58:9b:38:14:99:a8:a4:4d:40:06:c0:95:e4:44:8f:
3e:62:68:33:1d:11:7c:c6:d8:73:87:bb:f7:8c:7c:0e:77:47:
80:c4:e6:14:fd:91:e2:b8:14:2b:37:5f:46:a3:ab:80:cb:d0:
64:40:29:03:81:32:a1:8b:95:ac:11:05:ba:4a:2c:91:83:54:
15:ef:f7:f0:a0:86:de:18:7f:85:a7:87:ea:cf:ae:16:c7:09:
57:55:85:29:04:84:32:90:5b:a2:6f:c2:6b:a1:e6:92:47:cf:
79:5e:7d:b2:de:49:d0:18:d3:7b:0b:20:c2:39:cb:0d:f2:8b:
a6:7b:ce:93:77:d2:ca:cc:d8:46:a9:b8:da:88:d6:7f:be:e4:
9d:33:59:bf:db:5d:fc:c6:c7:0f:bb:7c:54:17:3b:0c:c7:21:
a6:45:90:d4:9e:fb:09:00:91:d3:34:c9:75:f7:43:47:81:38:
3b:22:30:c3:0e:1e:77:1e:e6:34:b9:30:b1:74:28:e5:9e:07:
db:65:23:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org