Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/727A839AF48411EDA0929D2F4AD9E6FC.roa
File: 727A839AF48411EDA0929D2F4AD9E6FC.roa (raw, json)
Hash identifier: 6CfXHd9NTYGvR7eaXw162k37JQ7bQbQE68v8v+udbEo=
Subject key identifier: 82:A1:91:58:75:1E:80:3C:9C:EE:E3:F0:6D:73:44:9E:81:00:C6:89
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0B7D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/727A839AF48411EDA0929D2F4AD9E6FC.roa
Signing time: Wed 17 May 2023 07:28:41 +0000
ROA not before: Wed 17 May 2023 07:28:37 +0000
ROA not after: Fri 16 May 2025 07:28:37 +0000
asID: 834
IP address blocks: 102.129.246.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2941 (0xb7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 17 07:28:37 2023 GMT
Not After : May 16 07:28:37 2025 GMT
Subject: CN=64648229-8e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:42:06:2b:08:ae:60:1b:49:9e:fa:2c:92:74:
c6:19:45:78:c2:e6:ad:00:24:e9:ef:ff:01:c4:94:
17:00:a7:dc:07:7a:a1:16:4f:05:c5:76:3c:64:37:
c1:61:13:a5:7b:69:6e:e8:48:58:28:51:e4:be:98:
c1:1d:4a:bb:47:c8:b1:81:b3:1b:9c:37:66:e3:12:
7a:80:77:9f:13:21:04:df:b1:1c:e1:98:2d:6b:cd:
11:db:9e:0f:bb:d5:69:a5:e1:93:c2:3b:eb:cf:f0:
e2:20:08:78:79:29:7f:52:28:f7:da:bb:34:0f:f3:
80:c8:47:97:1a:97:92:15:08:1b:89:93:44:f8:2a:
eb:13:9b:43:b3:21:03:62:09:ca:42:aa:c5:f2:58:
0d:93:5a:b7:54:d0:f6:dd:c3:cb:c7:30:c1:ab:14:
39:6c:a3:04:bb:39:38:fe:38:f0:6d:62:71:ca:d2:
9a:4d:25:d9:cc:0d:1f:bf:4c:51:3f:1b:aa:1d:41:
06:a7:92:3e:49:37:7d:a6:be:a1:1d:af:32:e1:05:
60:80:e0:c1:bf:3a:7e:b2:dd:79:00:9d:45:a5:5c:
4e:b7:a5:70:b3:f4:b2:de:86:f3:01:80:fe:7f:34:
6c:69:af:5b:aa:2a:77:a9:bc:c4:e6:08:26:08:37:
7c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A1:91:58:75:1E:80:3C:9C:EE:E3:F0:6D:73:44:9E:81:00:C6:89
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/727A839AF48411EDA0929D2F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.246.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:3a:af:03:7f:bd:24:e8:24:df:77:d5:d9:f3:5a:18:71:3a:
a0:75:4b:95:0c:2f:54:3c:2b:e0:11:d2:8d:06:4f:21:21:fb:
c3:14:c9:92:c9:70:8d:91:2c:99:03:be:b9:55:41:c5:bc:77:
cf:30:62:67:6f:50:e9:91:16:4a:f7:9a:1a:38:dc:28:c3:9f:
f1:75:ed:c1:90:09:ec:b9:dd:c9:24:a0:69:19:df:91:3e:0b:
69:79:b9:61:ab:64:35:89:ac:78:d7:8a:23:12:0e:be:73:3a:
34:d1:e7:56:3e:f1:9d:58:e3:15:03:e5:4d:ca:ec:27:18:5b:
16:ce:cb:4c:8e:08:2d:e2:77:15:73:ff:65:de:cf:ae:59:7f:
bf:cc:e7:58:a5:43:83:a3:90:05:04:e8:94:c5:85:8b:47:0a:
ac:b4:60:e9:b1:6b:cb:eb:53:f8:b9:d8:4e:4c:e1:18:1f:e0:
e8:46:0e:9d:46:f7:09:7a:df:7d:c1:06:6a:b5:2f:39:40:be:
ae:ba:7a:7a:39:9a:0d:5c:00:2b:48:08:22:a1:29:7d:bf:fe:
0a:fb:a2:46:bb:54:11:1c:c5:72:63:96:9c:d1:9c:61:bc:35:
1c:94:b4:4d:14:db:8a:2e:ea:16:fd:a7:a1:de:f0:87:3f:66:
1e:6b:a8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org