Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7E7FA0CC22D311EDBF102FD6F1222468.roa
File: 7E7FA0CC22D311EDBF102FD6F1222468.roa (raw, json)
Hash identifier: VX7T7Tiuiao0Q/C96wUYsWDKvMO0oD4LH1cgYbTFwd4=
Subject key identifier: F5:F4:89:AF:AC:F7:F1:07:28:5E:02:DC:47:73:DE:6E:2F:5B:32:36
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0793
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7E7FA0CC22D311EDBF102FD6F1222468.roa
Signing time: Tue 23 Aug 2022 11:05:27 +0000
ROA not before: Tue 23 Aug 2022 11:05:22 +0000
ROA not after: Fri 23 Aug 2024 11:05:22 +0000
asID: 212238
IP address blocks: 102.129.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1939 (0x793)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 23 11:05:22 2022 GMT
Not After : Aug 23 11:05:22 2024 GMT
Subject: CN=6304b477-1bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b6:80:92:c5:da:87:44:95:3c:07:5e:26:87:
7a:71:ae:10:f0:0a:20:7a:de:65:a4:3c:0e:12:2a:
df:97:b7:c4:80:d7:7b:dd:99:56:00:3e:d9:d0:e5:
e2:96:d2:ce:bd:a1:84:ed:d5:fb:2c:5d:0a:d2:5d:
29:01:52:d2:69:52:f4:70:9e:e9:35:96:63:4f:9c:
87:2e:62:f0:09:7f:f9:7b:53:2d:22:e6:f2:2f:30:
26:6c:53:73:44:64:79:bf:90:8e:47:09:71:16:62:
a5:99:9f:65:06:8b:9e:0b:a5:6c:90:1f:25:83:2f:
65:14:cb:86:9c:31:e5:d4:10:41:3b:01:a5:44:30:
3d:8f:05:28:02:b6:6e:4b:ac:ab:ec:04:44:55:bc:
a0:3f:58:87:6b:32:56:c5:8f:e4:d7:b9:a4:2f:06:
e5:1c:f1:e9:b9:2e:bb:7c:d4:f5:85:f6:fc:61:60:
75:9d:cf:62:f4:ca:d4:e7:a5:66:61:70:be:de:25:
30:62:5f:22:39:a0:d5:99:37:5a:0f:de:ff:de:70:
83:40:5a:3a:d8:61:df:45:14:f5:82:b7:08:c7:e5:
de:84:f8:33:e5:93:bd:a3:30:2d:20:51:7e:d8:62:
61:e1:17:16:1a:b7:da:65:46:46:8e:40:b3:e5:f7:
f2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F4:89:AF:AC:F7:F1:07:28:5E:02:DC:47:73:DE:6E:2F:5B:32:36
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7E7FA0CC22D311EDBF102FD6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.252.0/24
Signature Algorithm: sha256WithRSAEncryption
92:db:36:d9:31:32:1f:a6:55:11:cf:02:a0:88:47:ae:f8:63:
43:52:d4:70:f2:68:f9:26:24:42:4a:4b:84:09:91:be:c3:79:
62:78:83:35:d9:62:a0:f7:ec:51:b9:e8:6f:d5:6a:4d:cb:29:
2d:e5:5c:6c:f2:8e:54:f7:d1:e0:6d:a2:22:af:54:92:5c:1e:
f1:00:5e:b0:ee:7c:c0:47:55:95:8f:c6:40:66:ed:fa:8d:5c:
b0:ba:e7:a3:1c:62:27:50:d7:6a:08:96:90:13:5b:66:d1:8d:
9f:08:54:6a:fa:fb:45:60:eb:ea:35:be:22:0a:9e:b0:9f:b9:
2e:e8:6c:db:b0:39:5e:1d:5f:d0:a6:bf:69:13:bf:22:0e:42:
8c:25:4b:be:6d:f8:30:db:45:af:0b:0d:f3:fa:cd:87:7e:50:
d2:af:09:9c:b6:0d:5f:61:8c:b5:a8:cf:31:63:81:6e:53:a9:
f2:aa:81:15:6d:da:55:91:79:77:c0:3c:94:23:f9:4b:02:1b:
6a:e5:e8:c8:ab:5e:5e:b6:e5:f5:92:2d:ca:fb:27:f1:f7:4f:
d0:cb:bb:49:b4:cd:d8:7e:45:dd:d8:08:9c:84:f0:cd:4b:21:
e0:52:30:ca:d2:fa:ea:a6:0f:71:c2:cd:a1:e6:89:b4:7a:a1:
44:d9:e7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org