Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/67D5399848AA11EDB6D4FC95F1222468.roa
File: 67D5399848AA11EDB6D4FC95F1222468.roa (raw, json)
Hash identifier: olHj/eFZkHRBnU6WwdLDicaZmsU6V00CFL0sUJ2MxcE=
Subject key identifier: 53:E6:1D:04:31:24:46:F2:D5:39:0C:BB:E3:D5:1D:45:B0:61:54:9F
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 083F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/67D5399848AA11EDB6D4FC95F1222468.roa
Signing time: Mon 10 Oct 2022 14:47:04 +0000
ROA not before: Mon 10 Oct 2022 14:47:01 +0000
ROA not after: Thu 10 Oct 2024 14:47:01 +0000
asID: 60721
IP address blocks: 102.129.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2111 (0x83f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 10 14:47:01 2022 GMT
Not After : Oct 10 14:47:01 2024 GMT
Subject: CN=63443068-cecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f8:86:9b:4e:c3:54:55:9a:d0:b7:c6:d8:a8:
4b:6c:0f:68:91:bb:48:d5:3f:d0:78:48:3d:55:f3:
e5:ab:76:36:20:5a:e3:3b:00:c6:8a:22:02:5f:df:
08:19:24:72:c1:99:03:b8:a0:06:16:5a:20:32:7b:
df:42:b0:38:b0:1e:d1:1b:f2:5f:29:11:16:5e:da:
e7:85:36:d1:21:4a:8e:d2:16:01:f8:53:c3:a2:cc:
65:3e:9a:51:df:a9:76:a5:cd:ed:c8:71:23:d2:56:
f6:88:74:80:72:86:a5:28:49:25:72:a7:60:85:2a:
44:cd:a6:e7:d8:21:46:fb:bc:68:c4:65:ff:b0:42:
57:c6:fa:d6:24:7f:79:d5:d4:2c:03:7e:d6:2a:45:
74:0a:53:dd:87:3d:81:20:8b:ba:1a:f9:47:cc:0b:
47:ad:3c:e1:a0:bc:77:d6:7e:e8:59:af:62:97:82:
c5:ef:12:80:39:49:c6:7c:d0:28:fa:f0:63:09:4a:
19:66:a3:fe:33:ca:2e:40:6a:12:ae:a3:78:6d:c1:
96:29:db:4c:3f:43:9e:dc:b5:94:02:24:75:a5:d2:
a6:57:f0:43:d6:83:b0:2c:99:db:2c:ec:7c:5b:a3:
f7:21:cd:0b:b8:43:40:35:7c:d9:af:8d:e4:bd:74:
0f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E6:1D:04:31:24:46:F2:D5:39:0C:BB:E3:D5:1D:45:B0:61:54:9F
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/67D5399848AA11EDB6D4FC95F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.148.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:db:b2:b1:12:4a:6d:1f:f5:3b:d0:dd:a8:c6:bf:9e:ec:58:
11:64:54:ec:71:6d:cc:5a:5b:88:c2:95:8f:8c:83:fb:8f:25:
1c:0e:52:40:f0:6b:db:b4:aa:22:02:2f:09:0a:1b:72:29:f7:
46:1e:f2:17:b5:76:39:78:c2:0d:de:12:61:c8:dd:46:1d:0f:
14:0c:d7:e7:ae:cc:e4:81:96:39:62:bb:93:71:d3:cf:ff:f0:
f7:27:6e:c8:a0:1b:aa:21:8e:78:88:a7:bb:10:02:f7:c2:3b:
81:8f:b0:8d:48:8c:64:60:1e:f6:a1:a1:bd:5d:43:e8:b8:77:
aa:db:6a:db:a7:05:da:4f:12:8b:d7:37:10:a5:ff:a0:8d:24:
c9:21:bb:5b:d1:fe:ac:de:de:f0:bf:af:e6:25:8a:9f:78:07:
8e:ef:35:c1:3c:e5:9e:3d:37:ee:7f:6d:1c:10:8f:93:04:c8:
51:28:5b:0d:8f:b4:b2:ca:1a:3c:85:28:fb:a7:3b:6d:fb:e4:
eb:10:a1:08:0d:87:57:69:33:54:f9:0c:8f:df:94:8a:d8:2b:
c9:47:db:f1:f1:95:3f:c8:03:b0:67:74:84:0c:4f:33:61:02:
06:a6:d6:09:f2:36:0b:ac:c8:49:5d:b3:7d:f1:97:5e:51:9a:
e5:d7:e8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org