Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7C744110D22E11ED90008FECF1222468.roa
File: 7C744110D22E11ED90008FECF1222468.roa (raw, json)
Hash identifier: AFxBpRaNZx6bLHTYMB2/3lQE9Y6ugqFBVmNxY+LwztE=
Subject key identifier: 92:B6:39:8B:D4:B5:B7:96:4E:7C:E5:E5:1E:0B:03:A6:A7:34:74:8E
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0AF1
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7C744110D22E11ED90008FECF1222468.roa
Signing time: Mon 03 Apr 2023 14:47:42 +0000
ROA not before: Mon 03 Apr 2023 14:47:37 +0000
ROA not after: Tue 09 Apr 2024 14:47:37 +0000
asID: 834
IP address blocks: 102.129.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2801 (0xaf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 3 14:47:37 2023 GMT
Not After : Apr 9 14:47:37 2024 GMT
Subject: CN=642ae70e-4585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5c:1c:10:1c:eb:8b:65:bc:40:82:e2:49:f7:
aa:cd:ed:f8:7d:d2:a5:79:0a:ad:22:e2:aa:ac:ef:
06:ec:8a:6a:b4:97:3a:32:dc:a7:d2:16:63:8b:d2:
c4:61:26:67:27:83:11:4c:0e:e6:36:8d:7b:2b:94:
ce:63:20:91:4d:eb:0b:88:89:8a:1b:e2:43:3c:4e:
f6:06:df:f1:fc:6e:dd:d2:aa:a8:45:d9:c1:6b:46:
cd:e2:a8:fa:e2:0c:7d:68:25:8f:19:5c:26:93:d6:
5b:e2:3c:6e:a4:5d:70:ec:57:37:22:43:4a:d9:ce:
41:7f:d3:d2:97:00:8a:ee:ac:d7:86:5d:56:80:07:
57:a2:ae:80:5f:6c:3b:fe:45:df:bc:d7:cf:27:06:
24:d8:e2:b6:36:81:b3:f3:0b:c0:c8:ec:be:75:be:
26:a7:08:86:b0:8d:a3:e1:1b:c0:3d:0d:da:77:1a:
ad:d7:e5:0f:2a:84:5e:77:20:d3:65:07:a1:c2:59:
1e:a4:21:8f:ee:78:da:5d:2f:a3:9c:d8:6b:22:31:
cc:b9:e8:d2:ca:e4:d7:59:06:e1:d3:0d:1b:c1:9c:
3d:32:67:5f:07:ab:0d:1e:46:3b:e3:e1:06:f3:5b:
b2:bb:49:29:9a:41:1b:1a:16:32:0a:ab:f6:d4:d1:
75:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B6:39:8B:D4:B5:B7:96:4E:7C:E5:E5:1E:0B:03:A6:A7:34:74:8E
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7C744110D22E11ED90008FECF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.255.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:df:d0:fd:05:92:46:d7:ea:d5:58:63:43:35:d9:1b:72:8a:
5d:a2:ab:03:5a:7b:c7:95:d4:e2:1b:23:52:7b:13:d2:58:33:
cd:b2:8b:17:4d:69:12:69:9a:f3:c8:43:8b:62:40:7f:38:93:
55:8a:ff:0e:e0:1e:60:24:49:dd:2e:79:81:46:52:29:65:5d:
cd:02:bb:98:5b:bb:f3:80:65:b5:23:d4:24:22:6f:19:5d:23:
30:fb:20:42:77:b7:4d:7f:05:46:38:d7:19:9b:5b:01:60:20:
26:66:64:b7:a1:63:87:b5:59:4c:8d:9a:91:db:58:b9:0e:89:
6d:46:80:8f:bf:16:3b:e8:e0:2c:32:53:2f:d0:de:3c:a6:a7:
51:ae:64:41:a6:8f:e7:18:81:93:be:47:3e:9d:a7:5d:74:bc:
11:78:55:29:09:1c:b0:5e:92:60:dd:65:ba:79:d4:1b:ea:65:
10:6a:32:ff:69:4c:29:d3:b0:2d:56:ba:a7:25:10:42:97:d4:
f1:2d:68:db:e6:ab:c3:98:9c:16:01:95:c7:91:dc:18:b6:b6:
d6:80:ee:ff:87:b1:d0:e3:2b:9a:ad:86:51:5d:86:a9:18:3e:
e9:e3:42:d5:1f:e1:26:87:8c:6b:4b:2e:7f:a9:d7:bc:a0:27:
78:36:a9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org