Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/69E305DA3D7311EE8DC823454AD9E6FC.roa
File: 69E305DA3D7311EE8DC823454AD9E6FC.roa (raw, json)
Hash identifier: SDokChpeuh+uxLSSljb65JbzCbhafC9dvd97GnNUlRc=
Subject key identifier: 66:32:DA:07:1A:B0:D4:3E:4D:E5:C8:94:22:5F:FE:A7:4C:9C:85:15
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0CD5
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/69E305DA3D7311EE8DC823454AD9E6FC.roa
Signing time: Fri 18 Aug 2023 03:00:40 +0000
ROA not before: Fri 18 Aug 2023 03:00:37 +0000
ROA not after: Mon 18 Aug 2025 03:00:37 +0000
asID: 834
IP address blocks: 102.129.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3285 (0xcd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 18 03:00:37 2023 GMT
Not After : Aug 18 03:00:37 2025 GMT
Subject: CN=64deded8-09b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5e:3f:9d:72:94:d7:71:03:87:64:2c:e3:41:
60:ca:c8:17:9e:05:54:1f:b9:90:4d:87:4b:7b:95:
87:ea:c9:3c:1f:e9:03:30:c1:58:a3:6a:15:d6:37:
e7:92:5a:24:fe:97:d9:e1:2e:7b:6a:2f:d3:7f:78:
74:12:8e:ac:0a:29:8a:4a:58:b5:23:19:0e:a7:72:
ab:b5:36:ca:82:63:d1:7d:0b:5e:1d:99:e3:06:bf:
73:2c:0b:3e:9e:cf:20:1b:f7:08:18:10:37:b0:3b:
33:95:6a:2f:3b:89:1e:ef:ae:68:a9:72:8b:ee:90:
e8:42:ce:d1:fe:ef:a2:7b:7d:1d:4c:63:04:03:d0:
40:ab:56:39:1a:da:8d:41:74:f3:2e:a0:db:b2:c8:
37:ee:d7:d0:9e:69:18:74:88:55:cc:8c:0e:07:1b:
7c:1a:5d:7a:8e:b2:6a:4d:7a:95:d0:5f:eb:fa:e7:
d7:e5:7b:48:95:90:4a:57:8d:55:07:94:24:21:b3:
20:88:48:f2:8e:88:a3:48:3d:9d:95:4b:20:ef:80:
09:ae:dd:19:b4:0e:12:de:0e:d5:22:3f:a7:6c:fb:
e9:9f:7b:f2:5b:f8:e2:ff:90:66:8c:1f:ea:65:8e:
d9:68:16:f1:98:d6:1f:62:5e:7e:d9:7f:c3:a0:54:
a9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:32:DA:07:1A:B0:D4:3E:4D:E5:C8:94:22:5F:FE:A7:4C:9C:85:15
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/69E305DA3D7311EE8DC823454AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.180.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:c2:4d:9a:e7:b3:8b:46:da:aa:7e:46:56:ea:c2:14:38:0b:
d1:70:39:83:bf:be:74:aa:55:bd:ed:1f:3a:0f:e3:31:d1:1b:
e0:bf:27:36:ac:d1:ec:b6:c2:c6:99:86:52:09:b4:84:e2:c3:
93:3a:05:6b:59:b6:76:d1:35:e6:45:a2:0d:56:58:4c:62:b3:
cf:81:51:ec:97:d5:15:49:65:d2:bc:c3:1f:1b:5a:fe:2f:8a:
17:bd:39:2c:ce:00:ac:00:8c:dd:9a:58:55:1f:82:2a:a9:2e:
7e:79:b4:dd:bb:f6:c5:22:27:88:e0:c5:59:44:50:d7:02:b1:
ae:62:98:27:de:d2:75:3d:6a:64:9b:62:bc:33:ab:85:7b:cf:
93:ea:f0:8b:56:d4:c9:fe:3e:08:ff:fc:38:e2:e4:8a:51:40:
70:c1:5b:9f:47:95:0c:de:34:2d:e0:cb:b1:78:b6:b3:e3:b7:
3a:94:d8:87:76:de:49:47:66:6a:79:87:96:04:32:a1:a3:5b:
8d:39:0b:b9:00:ab:c5:c8:1a:3d:b3:2a:aa:f3:79:a0:7d:5e:
c5:de:0d:43:93:78:86:3c:c5:f0:5c:b1:cb:94:12:31:4e:88:
d4:41:58:a7:d1:e1:d8:31:18:4c:c1:7f:28:71:05:8e:d9:86:
da:ed:33:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 11 06:41:25 2023 by rpki-client on console-fra.rpki-client.org