Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/845C5078506B11EEA5F5672B4AD9E6FC.roa
File: 845C5078506B11EEA5F5672B4AD9E6FC.roa (raw, json)
Hash identifier: IvOxpI4MayVrPpXprA8T1mc6UtXMjAtzBc6t325dkp0=
Subject key identifier: 9E:B2:37:C0:4F:14:55:FB:D9:51:B8:67:7B:75:F7:8E:B3:10:DB:E5
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0D2E
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/845C5078506B11EEA5F5672B4AD9E6FC.roa
Signing time: Mon 11 Sep 2023 06:22:01 +0000
ROA not before: Mon 11 Sep 2023 06:21:57 +0000
ROA not after: Thu 11 Sep 2025 06:21:57 +0000
asID: 197789
IP address blocks: 102.129.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3374 (0xd2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 11 06:21:57 2023 GMT
Not After : Sep 11 06:21:57 2025 GMT
Subject: CN=64feb209-863a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:02:bc:1c:bb:a1:1d:67:ad:87:05:35:07:5f:
d5:dd:cf:a5:09:93:da:03:a8:21:04:6b:bc:2a:90:
13:6e:01:88:85:be:db:13:b5:b2:56:4b:86:6d:fe:
bd:57:21:7c:ef:89:00:f5:71:01:ac:fd:c0:0d:4e:
af:4a:56:87:f8:2e:7b:ed:f5:e1:c6:26:e8:70:4a:
3d:07:c9:d0:23:3a:4a:70:64:9f:b6:af:cd:f8:26:
a5:b3:90:fd:84:a1:46:93:b3:2e:96:3c:ee:89:dc:
72:d1:3a:fc:be:49:7b:d3:56:d6:ca:64:3a:dd:74:
c4:86:d5:89:cb:9e:ac:61:bf:04:29:4e:8d:15:82:
58:94:fd:02:c7:e0:e7:16:e0:94:4a:a9:d0:54:9a:
fd:c3:22:c4:72:43:53:ad:fc:90:00:20:5d:47:e7:
a9:aa:79:26:fd:75:06:c8:22:37:6b:0c:99:5b:c7:
e4:7c:f4:32:c4:db:1d:60:a7:62:01:31:e3:f5:c0:
1f:01:e7:9f:cb:06:35:75:a1:45:2e:9f:5b:22:05:
fc:67:de:d2:07:45:ab:b1:54:e6:93:de:fb:fb:57:
83:9e:95:52:61:ff:4f:cb:9c:9d:66:20:23:64:28:
7d:1d:82:e9:0e:6f:9f:ed:75:89:89:cd:77:2b:78:
7d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B2:37:C0:4F:14:55:FB:D9:51:B8:67:7B:75:F7:8E:B3:10:DB:E5
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/845C5078506B11EEA5F5672B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.180.0/24
Signature Algorithm: sha256WithRSAEncryption
49:d1:e1:cb:34:7b:34:33:65:b7:a7:d6:cd:be:ce:31:cc:56:
4e:e6:3e:0f:ba:96:8b:c0:88:43:ff:7f:39:2c:07:fc:9a:09:
f1:e5:2a:f4:ec:00:15:0c:15:b4:67:99:e1:1c:83:90:c2:4d:
f9:05:f0:bc:5f:2f:56:42:a6:e4:25:a1:00:82:33:b3:a1:13:
5a:36:9a:f9:c0:bb:a5:6e:d3:76:2b:2f:13:11:06:72:da:a7:
c1:a2:74:aa:54:c5:29:ac:59:4b:96:1e:74:52:85:bb:f6:46:
cb:2e:9f:ba:4a:83:4a:87:8b:24:98:74:e2:9f:46:88:02:9b:
55:8d:54:16:20:f3:65:fe:08:ab:68:7c:41:21:8e:fd:11:d6:
91:5c:de:cc:f1:a6:72:b8:73:8b:52:ac:38:d9:35:7c:89:87:
0b:e8:87:c9:43:ee:a8:0e:37:f5:1f:f5:73:a3:b7:9d:7e:b7:
28:40:16:1e:e3:da:84:21:b3:c0:4d:e4:98:49:58:85:56:9d:
9c:70:f8:e4:b2:9d:f2:e4:9a:54:3b:38:74:a1:7d:e6:2e:5f:
71:5c:35:1a:50:97:44:d5:99:8c:d2:ff:a0:3a:29:86:1b:b0:
a4:48:cb:5a:c8:d5:45:a0:60:58:03:19:04:10:92:bc:1a:2a:
e0:3e:03:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 10 08:07:36 2023 by rpki-client on console-ams.rpki-client.org