Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/891531D6270B11EEA10F0D3D4AD9E6FC.roa
File: 891531D6270B11EEA10F0D3D4AD9E6FC.roa (raw, json)
Hash identifier: iRbmpqxO+LNIsQixgB130VJfNoAAK4FNU38aNB3mNUw=
Subject key identifier: 82:94:39:66:69:8A:A0:C8:95:AA:86:D4:58:40:7F:29:2B:DC:C5:4B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0C8A
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/891531D6270B11EEA10F0D3D4AD9E6FC.roa
Signing time: Thu 20 Jul 2023 14:41:39 +0000
ROA not before: Thu 20 Jul 2023 14:41:36 +0000
ROA not after: Sun 20 Jul 2025 14:41:36 +0000
asID: 834
IP address blocks: 102.129.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3210 (0xc8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 20 14:41:36 2023 GMT
Not After : Jul 20 14:41:36 2025 GMT
Subject: CN=64b947a3-7d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:da:ae:e4:e5:6f:8e:f5:b4:88:19:91:e4:4b:
56:bf:31:e9:59:eb:86:65:41:a9:8c:74:eb:35:a3:
5d:b6:93:16:3e:c6:e6:82:38:85:cb:d5:14:8f:dd:
9d:a3:81:19:c0:48:2c:2a:c4:fc:14:1e:6f:ec:31:
2e:78:2e:93:cd:bd:c5:ef:db:ff:c0:26:e2:50:47:
d7:3f:28:a4:d7:a2:42:77:e5:3a:e4:22:9c:54:72:
83:61:b0:44:e9:dc:d6:f6:06:4d:d4:0b:73:52:3f:
8f:a5:00:49:e5:6d:f8:6c:24:eb:bc:f0:d8:06:33:
88:82:cb:be:82:cc:36:d3:3d:22:41:af:39:22:e8:
7c:8e:23:bf:30:ab:5f:b7:81:84:b8:80:b8:40:7e:
47:c4:6f:11:70:5f:95:4d:6e:58:57:90:ab:1e:c9:
f3:3d:5b:16:5b:f0:ee:cf:35:cd:02:26:38:c1:aa:
36:df:45:22:f1:ef:dc:f9:62:35:06:e7:63:01:a8:
6e:61:71:ef:76:b0:c2:b9:1d:a4:ef:18:2e:eb:af:
15:9f:89:ee:5f:a5:b5:16:99:2a:08:20:6c:34:d8:
60:39:97:10:a6:ae:9a:d9:78:c2:4f:01:55:19:79:
a6:31:9b:3f:12:fa:12:65:11:4f:bb:31:bd:12:01:
c5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:94:39:66:69:8A:A0:C8:95:AA:86:D4:58:40:7F:29:2B:DC:C5:4B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/891531D6270B11EEA10F0D3D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.203.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:81:e4:5e:c2:72:7b:4b:68:58:c8:7f:ba:e3:aa:a2:d5:81:
44:75:90:87:54:9b:42:21:1e:49:55:65:f4:70:6a:36:4e:79:
bb:c0:63:5d:e0:aa:88:78:7b:29:22:64:47:21:96:b8:5c:36:
83:e4:03:36:2b:05:72:d0:8a:23:3c:b1:c8:70:37:bd:d6:5f:
dc:40:72:b0:69:3e:b8:53:8f:33:74:4a:79:4d:c2:c4:ab:78:
56:2a:56:70:f6:8a:c4:00:94:4f:be:d2:d7:4d:4e:2f:58:88:
95:0f:a3:15:56:5e:dd:12:93:92:c4:f0:bb:fd:19:0c:ef:0b:
5c:29:d9:8b:b2:27:da:34:03:7b:82:f6:14:52:e3:24:7a:b6:
a7:cd:06:ad:af:10:40:09:b4:c0:1d:48:e1:b7:b5:1f:60:b1:
2d:e8:03:94:5e:f7:1f:5c:76:62:6b:81:cd:08:47:08:6c:c3:
50:37:3a:6f:a2:4c:bf:ef:42:d5:07:2c:14:16:5e:8f:56:b8:
0a:cc:ac:b8:a3:9c:45:49:f2:b9:26:8d:5c:8f:b9:68:4a:c2:
4a:7e:db:41:19:ea:08:2e:01:54:8d:b8:bb:da:84:1f:39:99:
dc:8a:22:24:30:e7:bc:97:31:bd:3e:c4:ca:23:8c:9f:47:b7:
33:a3:7f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 12:36:28 2023 by rpki-client on console-fra.rpki-client.org