Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7773E4147C9611EE95474E844AD9E6FC.roa
File: 7773E4147C9611EE95474E844AD9E6FC.roa (raw, json)
Hash identifier: 7wThyys+Xe3Q9/u96Vp9FkUoL4gkZym1No4Wkmey0eQ=
Subject key identifier: 8E:C9:B2:48:DD:96:85:F8:59:81:41:F2:4F:FB:50:1F:61:5B:CF:66
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0E28
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7773E4147C9611EE95474E844AD9E6FC.roa
Signing time: Mon 06 Nov 2023 11:20:19 +0000
ROA not before: Mon 06 Nov 2023 11:20:15 +0000
ROA not after: Fri 29 Nov 2024 11:20:15 +0000
asID: 834
IP address blocks: 102.129.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3624 (0xe28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 6 11:20:15 2023 GMT
Not After : Nov 29 11:20:15 2024 GMT
Subject: CN=6548cbf3-3d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:52:d3:d7:6d:52:b7:ba:a6:ac:b9:e0:e0:
a8:36:8b:72:e6:2b:ff:8b:51:44:2d:8a:bd:4b:3f:
1b:0c:1f:78:28:c3:3c:4b:fc:f4:8e:61:92:25:76:
59:d6:d4:29:80:4b:7c:5f:ac:cf:e7:11:a7:f3:5b:
dd:fd:f8:5e:15:83:ab:ba:0a:62:18:56:d9:97:35:
b8:c7:cb:32:8f:5f:6c:72:cc:dc:e6:a3:3b:c2:f3:
fe:67:a0:54:49:6f:1a:ae:83:a7:0e:a9:21:fc:7b:
61:89:ec:fc:38:cf:d8:48:c2:74:56:f4:d7:fb:d4:
bd:4b:c3:7d:d8:02:45:7a:e5:17:ce:5b:7b:f7:ca:
21:33:31:b9:a4:b0:70:31:04:26:90:6d:ab:7a:9e:
2f:67:14:13:34:62:a5:b6:9e:43:f1:cc:d4:36:25:
40:a5:45:17:85:e9:70:ea:a5:71:1d:12:fc:29:1d:
02:ee:37:31:85:75:2c:47:9c:b8:c5:a0:3a:24:32:
e7:68:8e:ab:cf:0a:7e:ad:1e:24:8a:e4:5d:4e:8b:
06:d1:1d:96:c9:f4:55:de:61:94:32:bf:73:f8:c6:
9c:61:1a:56:64:c5:4a:35:a0:a8:2f:ee:34:2e:17:
0a:b0:5a:3d:8f:3c:3a:c8:8b:8b:a7:75:04:e1:c8:
f8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C9:B2:48:DD:96:85:F8:59:81:41:F2:4F:FB:50:1F:61:5B:CF:66
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7773E4147C9611EE95474E844AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.225.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:4c:b6:84:34:07:3b:64:c1:77:bb:9e:74:c6:28:e0:e0:d7:
16:ad:39:cf:5d:86:54:9e:25:08:69:c0:67:ca:b8:a8:d7:0a:
ce:69:4c:04:af:0a:70:f3:8f:e8:72:7a:0b:f3:60:4b:9e:16:
07:ef:75:ca:96:5e:e3:af:a4:2f:6e:66:3e:0e:58:63:09:58:
3a:b7:a7:15:2f:80:48:b5:54:f0:14:d0:e2:b0:df:54:d5:61:
d9:ef:e3:03:41:fc:cf:03:b2:bd:53:c8:df:f6:ad:fb:57:eb:
3c:f7:a9:6c:8c:e2:70:22:83:9c:cf:cf:ec:da:ce:e4:aa:25:
fa:db:ab:7e:92:b8:f1:5c:92:38:e5:7a:a0:89:bd:80:bb:02:
e5:9e:48:36:a4:f3:d0:51:87:a2:1d:1e:9c:50:f3:e5:74:2f:
4c:b8:ed:86:d5:69:c2:22:b7:15:f4:9d:2c:29:46:9d:d7:4e:
1c:60:cc:98:65:a4:0f:95:26:11:84:ad:55:1e:18:fd:ce:d9:
72:ca:82:5a:cb:64:0c:73:67:34:4a:a2:e1:63:79:62:81:6b:
95:07:ec:45:36:05:24:b7:ce:a6:c2:05:02:77:77:02:41:06:
47:8f:ba:66:fe:5b:98:74:13:1e:35:8a:0c:60:27:13:84:9b:
72:72:45:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 11:49:37 2023 by rpki-client on console-fra.rpki-client.org