Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/76AAD1D8219111EE8CD335674AD9E6FC.roa
File: 76AAD1D8219111EE8CD335674AD9E6FC.roa (raw, json)
Hash identifier: JS5DVCPZF+iaG5e9GbFfQYILE00EuHUZcjUD713oO8w=
Subject key identifier: 29:76:72:5C:80:9A:C0:F2:53:CF:84:87:18:2F:46:CC:D9:19:EE:C6
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0C6E
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/76AAD1D8219111EE8CD335674AD9E6FC.roa
Signing time: Thu 13 Jul 2023 15:25:14 +0000
ROA not before: Thu 13 Jul 2023 15:25:10 +0000
ROA not after: Sun 13 Jul 2025 15:25:10 +0000
asID: 834
IP address blocks: 102.129.166.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3182 (0xc6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 13 15:25:10 2023 GMT
Not After : Jul 13 15:25:10 2025 GMT
Subject: CN=64b0175a-aa71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d8:39:d1:ce:e2:90:8d:2a:6c:d2:d6:91:d9:
3c:9a:9f:2c:07:5a:ae:1a:4f:5a:3c:8f:24:f9:ac:
9d:4b:9c:36:15:c9:c9:81:c4:04:2d:51:d5:eb:c0:
82:3a:c8:88:8e:55:48:38:c8:04:e0:5c:d5:77:8a:
22:5a:9c:c0:e7:1b:06:15:dc:2b:77:1d:d3:7a:2b:
7d:60:a6:40:8d:54:11:32:11:0a:fe:d8:b3:2a:ed:
15:60:2c:0e:e8:75:77:eb:0a:75:84:b8:fd:54:30:
2c:46:1b:e9:fc:b9:08:a2:42:20:e0:7a:58:9e:ab:
5d:dd:c4:f6:85:a9:9e:5d:50:ca:7f:44:60:00:8e:
01:e4:f9:fb:85:1f:a6:42:de:db:b4:b7:9a:f0:af:
1a:da:3a:dd:06:b6:06:27:5d:5d:a5:0a:4e:6f:a7:
70:bb:52:58:84:df:4a:99:a9:4a:c8:e7:73:61:71:
20:cf:45:64:cf:f7:f4:67:0a:d0:5c:41:6c:51:4b:
c1:c1:1e:ef:4e:01:c6:6c:08:21:36:61:60:8e:55:
bb:57:42:83:32:79:ec:6b:1c:44:63:52:70:ac:63:
be:4b:bf:9f:7a:e0:b2:67:90:74:01:b4:2b:d0:d5:
2d:8b:92:02:48:4f:31:70:2a:f0:ab:76:f6:03:45:
67:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:76:72:5C:80:9A:C0:F2:53:CF:84:87:18:2F:46:CC:D9:19:EE:C6
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/76AAD1D8219111EE8CD335674AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.166.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:5c:d5:d6:cd:94:17:55:c5:b5:08:46:1b:0e:79:bf:6d:08:
67:1c:1f:c2:bb:8c:44:9e:24:7f:cf:ff:73:22:89:bf:26:af:
39:77:02:3f:34:8f:19:54:f7:7e:71:32:fa:17:d1:67:b8:1b:
a0:55:1e:a1:95:d4:07:3a:b1:94:47:00:d8:97:54:ed:2a:c0:
72:8c:bc:28:46:37:ab:ae:6b:96:e0:74:a2:cf:b7:3b:85:06:
fa:7f:10:ab:bb:6c:fc:df:3e:dc:0f:a8:ff:d1:79:68:5e:04:
8e:76:e8:ba:69:8f:c8:f6:77:44:12:19:c6:40:4a:4a:96:d6:
00:4e:84:be:ca:88:6f:fa:a9:12:fa:3f:2c:a6:c4:4e:88:0d:
c8:08:2a:7a:03:fa:83:92:8e:4c:3d:f4:b6:f7:9d:43:42:c2:
2d:7d:64:26:34:67:bf:dd:c6:03:d8:76:ed:ee:5c:1e:f2:bc:
ca:e5:87:c1:48:2d:00:37:00:c1:b4:7a:6a:ba:a2:89:9b:fb:
83:89:f4:82:34:67:15:c9:0b:a1:be:d5:36:2b:6c:84:4a:41:
b9:87:4d:4f:02:c9:f0:3f:fc:ef:e2:3b:e6:e5:08:dc:81:92:
ea:4c:1f:8c:84:2e:3e:fb:67:88:cf:64:ae:9e:64:10:12:96:
c3:a6:e2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 6 06:31:40 2023 by rpki-client on console-fra.rpki-client.org