Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/72BD42C2F99111EDAAB72C824AD9E6FC.roa
File: 72BD42C2F99111EDAAB72C824AD9E6FC.roa (raw, json)
Hash identifier: YicEy+ajG8rHiE6VIQQCDEDBF9uRYQqpcOH2pb6f3aU=
Subject key identifier: E2:36:9D:E0:C5:C0:2C:87:5B:92:95:91:6D:92:90:17:F4:BF:03:BD
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0B9A
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/72BD42C2F99111EDAAB72C824AD9E6FC.roa
Signing time: Tue 23 May 2023 17:44:21 +0000
ROA not before: Tue 23 May 2023 17:44:15 +0000
ROA not after: Tue 27 May 2025 17:44:15 +0000
asID: 834
IP address blocks: 102.129.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2970 (0xb9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 23 17:44:15 2023 GMT
Not After : May 27 17:44:15 2025 GMT
Subject: CN=646cfb75-3152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e2:0b:93:72:a8:c3:1f:ac:6b:55:50:20:eb:
f3:89:2c:34:4e:07:c4:8e:e4:7a:01:e6:31:d5:68:
63:75:09:1c:70:82:6b:ea:24:5f:f1:60:d1:c0:c0:
3f:b4:f4:65:2f:48:7e:b0:b7:4c:ed:1e:19:e6:81:
83:71:39:cc:6b:6a:92:b4:a4:66:cf:2b:94:eb:85:
36:20:fd:51:aa:05:04:35:35:1a:a7:f5:fa:45:60:
00:d3:20:a7:54:94:5d:8b:7f:5f:5f:5a:0e:5f:85:
87:c9:7b:fc:fa:a5:25:24:20:91:53:68:cd:20:9a:
4c:fc:46:8e:b5:40:7b:58:dd:a4:68:66:82:62:d4:
9d:e8:26:07:5f:b6:73:04:3f:ae:3b:3e:40:ac:da:
f3:24:6a:a8:29:c1:42:d5:06:c4:62:cf:85:15:8c:
73:ad:96:a3:44:c2:10:9a:99:05:ea:df:e7:d5:f3:
0e:a7:6d:fd:ec:53:cb:9e:34:b9:0b:cc:8f:e0:28:
dc:49:9c:d3:c7:e4:3d:e0:84:8b:1b:49:66:2b:bc:
33:bb:ca:23:8c:10:6e:78:9f:ab:d4:ff:e1:f9:71:
3a:06:96:37:5c:60:22:55:d8:fd:29:6d:08:2d:da:
06:8b:8d:76:c9:d6:11:23:60:9c:7f:e3:25:69:67:
aa:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:36:9D:E0:C5:C0:2C:87:5B:92:95:91:6D:92:90:17:F4:BF:03:BD
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/72BD42C2F99111EDAAB72C824AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.180.0/24
Signature Algorithm: sha256WithRSAEncryption
83:7c:d4:65:e4:8c:03:7e:17:dd:ec:bc:91:6e:21:9a:61:1f:
dc:63:05:2a:c0:aa:a6:59:ea:53:42:7a:b4:60:1e:eb:05:a4:
2a:f7:e5:75:9a:bb:b8:7d:6b:a1:ca:66:7d:6a:c6:db:c6:8e:
40:e9:2c:57:00:24:31:44:27:db:5e:21:b8:a9:2d:53:5a:57:
94:4e:7e:6b:50:b9:79:7f:c9:92:d3:4d:6b:6e:76:c8:98:fb:
56:b4:b5:50:29:34:28:b6:cb:d1:b8:cd:93:a2:15:59:c8:62:
8d:fb:6d:cb:98:ca:44:83:c7:28:dd:ea:a5:17:d0:6e:63:dc:
31:3d:7a:f9:ed:27:26:97:2d:eb:1a:9c:07:b0:7d:8c:cf:32:
ac:35:2d:fc:54:3a:36:7a:27:24:73:7b:8d:23:14:e3:81:18:
47:5c:2e:3d:96:0f:3a:e3:d0:83:8a:70:69:4e:99:50:bf:4d:
7c:eb:b7:8b:da:da:44:b6:a8:ad:b3:92:c3:15:74:ab:f0:a7:
d6:7a:0a:21:93:c8:12:ee:53:b7:79:4a:bf:6d:7a:7c:03:d3:
2a:17:ab:22:67:02:88:40:8c:e5:d2:b6:d6:a5:5e:18:f4:0d:
9d:a8:22:8d:23:dc:9f:98:d6:5e:87:d0:25:f2:4c:df:e3:df:
49:12:2e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org