Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7FA174C0B2AD11EDA6D65CAFF1222468.roa
File: 7FA174C0B2AD11EDA6D65CAFF1222468.roa (raw, json)
Hash identifier: 0RQy/OeU03Fyz9YNjq7X+5KqXsghHXMX3XDofVv9Cj4=
Subject key identifier: 6E:96:F3:8F:05:0F:B2:CF:9B:EB:05:AB:3A:21:4D:95:3E:18:3D:34
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A63
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7FA174C0B2AD11EDA6D65CAFF1222468.roa
Signing time: Wed 22 Feb 2023 12:36:17 +0000
ROA not before: Wed 22 Feb 2023 12:36:11 +0000
ROA not after: Sat 22 Feb 2025 12:36:11 +0000
asID: 834
IP address blocks: 102.129.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2659 (0xa63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 22 12:36:11 2023 GMT
Not After : Feb 22 12:36:11 2025 GMT
Subject: CN=63f60c41-aab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:fe:60:b1:41:84:32:32:3f:91:e5:00:20:
70:1a:72:b0:45:95:80:cc:15:ca:83:de:9f:67:9d:
a9:73:cb:54:63:05:cf:7a:09:8c:74:bb:b9:0a:62:
a0:d2:0f:e9:21:e1:ed:d9:f7:43:b4:cb:0f:84:ed:
8b:4e:b3:1d:13:9a:fb:10:77:bf:59:e8:69:b4:d8:
a9:db:a0:b3:66:a2:53:32:c7:3d:92:b4:31:ac:83:
d0:2c:4d:5e:7b:b0:ff:d0:4d:9d:ae:60:8f:c4:04:
4e:65:d7:0b:6a:c5:2e:01:9d:47:4b:87:e2:36:94:
7c:d7:90:2c:18:4c:ae:e4:15:2b:4a:16:cc:16:96:
20:9a:97:ad:b7:67:1a:5f:f5:b6:ed:85:e1:e5:3b:
aa:ff:26:7c:78:3c:2d:bc:db:4d:19:8e:9d:ab:fe:
7f:67:b1:9c:f5:73:f2:50:5a:d4:8a:c5:00:6f:b6:
e3:8e:9c:7a:d5:9b:31:c4:63:3d:7d:d4:0d:6d:e0:
ca:68:0f:c5:19:b3:32:56:5f:ca:d8:18:b7:9c:a9:
f0:87:5c:34:4a:9d:4a:82:ed:6b:47:25:02:36:c9:
46:a5:9d:54:50:12:d2:a1:32:ec:3c:c4:e7:a1:ad:
1f:2b:e7:91:8b:fc:8e:20:e4:f9:1a:52:84:6c:0c:
43:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:96:F3:8F:05:0F:B2:CF:9B:EB:05:AB:3A:21:4D:95:3E:18:3D:34
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7FA174C0B2AD11EDA6D65CAFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.151.0/24
Signature Algorithm: sha256WithRSAEncryption
35:48:3d:36:90:15:16:cf:13:d5:6b:7d:9c:1a:76:64:b4:cd:
97:73:4a:54:96:e9:4e:12:c2:2c:f7:80:17:04:a8:0b:96:cb:
ab:a0:39:de:ef:96:60:3c:e6:e3:63:e7:be:85:8b:6f:37:81:
04:02:9f:a0:2e:b4:df:3c:84:76:fe:6c:0a:ab:da:87:13:87:
23:a5:75:ef:e8:b4:83:20:49:28:8d:a6:2b:de:30:ff:61:59:
e8:88:f7:91:ee:bb:77:76:1f:9d:51:2b:b6:65:82:c0:c2:f6:
40:36:fb:63:ec:3c:2b:3b:65:34:d6:a8:1d:d9:c6:67:33:c5:
a9:10:60:b5:8b:2d:4f:c1:b5:b1:ff:60:78:fc:2b:21:70:85:
c6:6a:c9:a4:56:77:cf:58:ec:04:bf:5b:da:4b:f6:51:9f:65:
e2:13:05:19:e9:7d:46:9f:7b:e0:45:04:16:bd:d8:68:e7:23:
81:30:b0:ed:05:45:fd:b3:dd:41:5c:a9:f4:62:1f:4f:cc:20:
3b:c0:b1:c9:1b:43:0e:40:2f:86:74:07:8a:6b:b0:af:86:15:
a4:3a:44:41:fc:33:7b:56:ca:be:a5:5d:e3:4a:81:8e:44:75:
34:8e:df:bf:6b:0b:cb:95:f6:f5:62:81:f9:bc:d0:86:6a:6b:
4f:d7:67:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org