Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/712EA300BD7411EDA54B1885F1222468.roa
File: 712EA300BD7411EDA54B1885F1222468.roa (raw, json)
Hash identifier: qTL9qT+bMvBjaxQ++v35W0ADXZR1nh/NFJQF31K6Q4w=
Subject key identifier: B2:DE:36:61:F8:3D:09:18:47:3E:CC:B0:12:7E:6A:BA:1A:06:70:8D
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0ABC
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/712EA300BD7411EDA54B1885F1222468.roa
Signing time: Wed 08 Mar 2023 05:45:33 +0000
ROA not before: Wed 08 Mar 2023 05:45:29 +0000
ROA not after: Sun 09 Mar 2025 05:45:29 +0000
asID: 61317
IP address blocks: 102.129.184.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2748 (0xabc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 8 05:45:29 2023 GMT
Not After : Mar 9 05:45:29 2025 GMT
Subject: CN=640820fd-e8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:66:50:d0:11:59:1c:5f:e7:59:dd:ab:24:52:
6a:e0:88:e0:03:41:3a:3d:8f:ff:f8:ac:a6:8c:4b:
b8:a4:1d:1c:55:3d:69:fb:1e:d9:12:9c:46:c0:9b:
1b:e3:6d:6f:c0:93:85:ee:d0:b4:48:e2:bb:63:92:
02:41:a5:99:a9:e4:ce:c0:61:11:db:16:cb:48:94:
88:af:e6:01:77:5c:20:91:13:79:ba:2b:c8:dc:25:
fd:75:ba:a4:48:ba:7d:93:09:32:0b:ba:83:e8:96:
5d:db:a8:e8:b8:a2:37:57:9a:9f:da:7c:4e:2a:52:
f3:60:eb:93:4e:54:ed:f6:4f:c9:a7:d5:dc:a7:b2:
e4:5e:5d:60:07:ec:63:9a:08:6a:ee:8f:9c:dd:58:
fe:ae:39:a4:29:a9:de:01:c8:59:76:d1:36:c2:b9:
3f:7e:12:04:da:42:fd:d5:36:bf:e0:94:19:7f:ee:
4e:ef:18:6d:ed:03:9c:ea:55:3a:c0:85:4d:fd:dd:
53:c7:1f:0e:72:17:70:68:c7:f8:06:66:7e:c6:50:
ae:49:33:85:a8:bb:04:08:33:e5:c2:a9:7e:63:00:
d2:26:ef:ef:48:93:27:8c:03:9b:ec:34:11:90:91:
8e:27:7d:b7:0b:e5:5b:34:ad:35:cc:08:5e:1e:b9:
99:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DE:36:61:F8:3D:09:18:47:3E:CC:B0:12:7E:6A:BA:1A:06:70:8D
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/712EA300BD7411EDA54B1885F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.184.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:ec:8a:6a:ea:cd:48:5d:3c:ff:1b:c1:67:d0:10:1c:70:8a:
b3:9c:58:fe:c6:75:0c:0d:33:65:32:e7:f5:fe:2a:56:a0:0b:
98:c6:4d:77:c2:58:ba:b8:03:ab:ab:3f:46:9d:cf:cf:ae:2d:
96:1e:65:85:16:6e:b8:7e:f9:31:aa:44:31:fe:6d:cc:05:a9:
6c:b5:86:13:93:bd:1e:76:cd:8f:6b:72:0f:fe:5a:fb:43:fe:
d7:4a:80:27:17:ab:b4:02:f2:c6:ba:1d:85:1b:8c:ff:e4:2c:
cf:76:4b:d2:b4:61:17:db:d1:65:f8:c2:80:88:a3:77:71:1e:
99:81:6f:ff:88:16:56:7f:c5:06:55:c0:bf:c9:4a:e3:8b:91:
07:6d:f3:72:eb:7b:b1:97:b9:f8:20:7f:ce:d9:df:c3:b2:73:
2b:d7:6e:09:07:bd:8e:c2:1b:ba:70:ce:ef:9a:b9:46:5c:40:
f9:27:e3:fb:df:48:ed:69:be:3c:52:e1:f1:03:d2:3f:19:20:
6b:01:b8:37:bf:a2:87:2f:ae:b4:1b:bf:6a:b3:36:67:ca:7a:
a0:94:68:03:63:56:76:65:d2:da:73:f0:1e:12:61:05:77:85:
22:64:18:f6:b6:03:04:6f:39:ab:2a:50:1a:c1:af:7d:73:41:
d3:e8:93:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 10:48:08 2023 by rpki-client on console-ams.rpki-client.org