Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/702D4D02659B11ED9AC3D4D0F1222468.roa
File: 702D4D02659B11ED9AC3D4D0F1222468.roa (raw, json)
Hash identifier: 87ZkNBy8Veq23DTBjIW1baaQVSeJKyOUrRu6Pk7IYgw=
Subject key identifier: F7:F2:22:31:6B:BD:33:81:27:D3:51:2F:9B:2F:07:A3:BB:FD:47:A3
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 08EC
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/702D4D02659B11ED9AC3D4D0F1222468.roa
Signing time: Wed 16 Nov 2022 10:42:59 +0000
ROA not before: Wed 16 Nov 2022 10:42:55 +0000
ROA not after: Sat 16 Nov 2024 10:42:55 +0000
asID: 204968
IP address blocks: 102.129.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2284 (0x8ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 16 10:42:55 2022 GMT
Not After : Nov 16 10:42:55 2024 GMT
Subject: CN=6374beb3-ca0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:80:f6:d3:1b:10:38:54:cf:68:68:43:ec:73:
ff:92:2c:c2:60:cf:85:3d:3b:49:b9:78:53:72:09:
ba:a3:7c:02:06:5f:f4:92:ac:b9:bd:87:a2:92:7d:
71:58:ad:06:80:72:bb:23:be:d3:8a:1b:10:57:75:
e1:48:af:31:b6:6d:bd:32:da:0b:51:94:30:52:c2:
33:e5:3c:fe:55:ae:5e:94:d5:3a:71:27:1b:75:bd:
f6:6e:c9:3a:74:be:33:fd:04:06:f2:9e:ad:5e:0a:
4e:a7:6e:32:b2:f5:f5:47:ad:1f:e3:a3:84:47:8a:
0f:c3:37:a3:34:d9:2a:77:1c:a6:8f:b8:2f:12:a7:
ad:34:0e:ba:01:02:a6:ff:67:e8:40:1d:86:aa:b3:
d9:0f:7a:51:79:58:8d:ca:32:e4:f5:5d:61:20:70:
0c:a0:74:25:46:6f:2d:01:2c:48:54:f9:93:20:0b:
cb:1e:b6:fc:9e:a0:72:be:59:27:5d:fd:20:a7:8c:
be:83:93:89:be:12:de:91:37:77:e0:b0:b9:a8:37:
7a:e6:8e:9d:d8:8f:ac:0e:ae:8c:3f:af:ed:8a:67:
2d:6f:f4:cf:de:7f:0b:d5:f5:2c:3d:b1:ac:45:93:
a1:79:37:e1:7a:73:22:a2:c5:6e:91:e7:12:cd:cf:
da:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F2:22:31:6B:BD:33:81:27:D3:51:2F:9B:2F:07:A3:BB:FD:47:A3
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/702D4D02659B11ED9AC3D4D0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.216.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:de:8e:d9:80:d6:ae:e6:80:9f:92:cb:cc:e4:49:5c:fc:ba:
42:14:eb:5f:54:f0:e7:43:52:6e:a9:fc:3b:b3:8e:f3:d8:f9:
16:3d:dc:84:ed:d4:fa:10:3c:52:f6:65:a1:e8:75:2f:e1:18:
45:ea:74:db:9f:d8:3b:73:5c:09:29:d0:16:5c:cc:1e:e1:90:
87:9c:f0:22:46:fc:f2:54:d3:e5:86:17:db:9d:c3:ba:4a:22:
f5:96:4f:08:a0:5d:ff:2b:83:05:b8:5d:be:90:00:fa:83:b0:
49:4a:0f:1c:d9:14:7e:90:8b:b9:ac:cd:d9:fd:26:05:dd:5a:
b5:88:36:e3:a5:6d:ed:b2:8f:74:1d:30:d1:2d:86:ff:ed:d5:
7b:cf:b0:fb:35:42:24:64:47:62:66:4d:0c:d2:50:23:bd:ee:
fd:c4:66:1a:3e:4c:ab:cd:0f:b0:c8:81:35:cb:eb:dc:77:ae:
c1:5f:94:de:9e:c5:01:2a:12:9f:56:07:3b:61:5f:a7:d6:af:
33:c8:0d:81:8e:79:22:d8:69:30:a4:07:59:d1:bb:6e:4b:d4:
7c:f8:87:56:9e:64:e4:b4:5e:5c:f1:28:1f:f4:6e:56:df:3c:
0f:7a:0e:f3:dd:ea:a4:ee:1c:ce:3b:a1:fb:f1:5f:02:c5:db:
51:56:e8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org