Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/78C5A74A898F11EC9C3B74DC5A40D577.roa
File: 78C5A74A898F11EC9C3B74DC5A40D577.roa (raw, json)
Hash identifier: V0ZnxTxfePoc13yB1uqhS9jB0qxEXwUUW5o4DmoVVZ0=
Subject key identifier: 99:A5:C8:69:79:7C:94:B4:DC:BB:ED:BF:79:9A:A7:1C:D0:41:30:3C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 05DD
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/78C5A74A898F11EC9C3B74DC5A40D577.roa
Signing time: Wed 09 Feb 2022 10:03:04 +0000
ROA not before: Wed 09 Feb 2022 10:03:00 +0000
ROA not after: Sun 09 Feb 2025 10:03:00 +0000
asID: 207326
IP address blocks: 102.129.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1501 (0x5dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 9 10:03:00 2022 GMT
Not After : Feb 9 10:03:00 2025 GMT
Subject: CN=62039158-6760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:df:18:63:ba:4a:17:f6:88:9a:89:43:cf:31:
46:61:33:63:46:f8:81:aa:6f:a7:12:46:4b:51:89:
20:7f:df:21:62:e3:85:ba:16:c3:23:bb:ef:d3:c0:
1b:52:fd:c4:a0:67:bd:d6:1f:48:b2:a8:c3:d1:32:
0b:fe:58:d5:75:98:e7:57:a2:a1:07:21:bd:ad:88:
4d:26:7e:0f:03:25:33:06:a2:9b:b9:e1:94:e8:11:
b2:1c:08:91:c8:53:7b:c7:5f:ee:6e:3b:52:a6:17:
08:71:d7:fc:be:12:35:bc:24:84:0d:a8:52:64:07:
6e:df:49:b7:a9:80:46:97:16:f6:4c:f8:f7:3f:ce:
2b:c1:22:30:5d:b2:df:6a:14:cf:cf:1b:71:c9:4d:
55:67:57:d6:9a:14:40:3f:25:20:74:b5:bd:38:d5:
3c:1d:f1:d3:46:58:02:77:f2:c7:24:bf:24:14:9f:
66:52:79:d5:c4:bc:37:85:1f:f4:1c:bd:6d:fd:3a:
d5:0b:67:37:42:7c:1c:3c:d8:e8:d4:ce:48:34:ee:
ac:2a:16:cd:8c:17:76:fd:e9:14:0e:98:cf:fa:21:
14:67:4d:80:0e:76:85:f1:12:8e:bf:5d:1a:cf:bb:
7f:96:0d:b6:19:d7:bb:6b:e3:3e:c2:fe:25:be:2d:
96:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A5:C8:69:79:7C:94:B4:DC:BB:ED:BF:79:9A:A7:1C:D0:41:30:3C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/78C5A74A898F11EC9C3B74DC5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.204.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:d4:00:e9:79:df:39:e2:18:31:21:78:72:62:8b:43:3d:f3:
ba:0c:31:53:8c:3d:df:d8:f9:48:ef:ac:ff:6f:ce:7c:7e:76:
55:fe:1a:7c:82:6a:2f:a3:0c:92:dc:d0:78:15:b5:ca:10:10:
b9:e6:8a:46:91:d9:3c:8f:8c:8c:21:4f:7f:63:23:81:d9:93:
6d:ef:f3:7c:95:2d:a5:16:d9:cb:e5:eb:21:02:ae:af:ba:55:
4d:fd:76:1d:3d:7d:8d:02:bb:f9:92:6a:64:70:77:d6:a2:a8:
7b:65:bd:30:50:c9:40:f7:5b:52:11:86:73:7a:a0:6b:42:1d:
a9:77:f7:43:09:d2:86:43:73:d2:a4:8b:73:dc:a4:f9:a7:3a:
dd:95:36:55:da:c5:d9:ff:20:be:f0:52:6d:3a:00:6d:5b:1f:
e5:46:c7:3c:59:19:94:25:d6:1c:de:b0:de:e9:6d:b8:db:bc:
3e:02:1c:3e:1c:4c:fa:d5:3d:ab:bd:d7:93:88:b2:f9:7d:20:
58:a3:39:21:3f:6c:6a:1b:70:56:80:a3:fe:46:91:db:72:78:
74:89:45:d3:17:11:2b:af:ba:53:05:22:83:b8:6f:83:9b:1b:
86:a7:57:65:15:a4:3e:f3:ec:c9:a2:e6:d2:b2:e8:5d:44:06:
9c:29:31:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 29 08:29:32 2023 by rpki-client on console-ams.rpki-client.org