Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/98392EE2A67711EE999F89A2775412E6.roa
File: 98392EE2A67711EE999F89A2775412E6.roa (raw, json)
Hash identifier: eUMUFvG0914Sapx3zSkc0gGteOqDBAot5NjTZ26uRvo=
Subject key identifier: B6:56:F7:F0:1D:44:94:A6:C9:EA:E7:01:81:52:9B:60:69:11:96:CC
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0EAD
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/98392EE2A67711EE999F89A2775412E6.roa
Signing time: Fri 29 Dec 2023 18:25:08 +0000
ROA not before: Fri 29 Dec 2023 18:25:05 +0000
ROA not after: Sat 27 Dec 2025 18:25:05 +0000
asID: 834
IP address blocks: 102.129.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3757 (0xead)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 29 18:25:05 2023 GMT
Not After : Dec 27 18:25:05 2025 GMT
Subject: CN=658f0f04-5e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:75:f1:87:65:4b:c1:4e:c2:b3:a4:4f:ac:
d7:2c:6a:ba:09:76:c7:ba:9d:f8:4a:af:e6:23:0f:
24:a3:ed:6f:64:08:fc:ec:c7:aa:10:ac:2c:53:c7:
fe:89:4e:cd:39:f1:56:15:92:b2:20:20:c1:a5:32:
df:9d:88:74:b9:f6:28:c0:23:3d:1c:fa:ea:15:ca:
3b:e3:bc:75:80:1f:03:bf:88:15:67:de:92:d5:a0:
fe:af:ca:65:79:0a:d6:40:97:40:0a:f2:cc:9f:5e:
7d:b1:61:41:86:78:5f:ef:62:6e:88:51:b5:2e:1b:
9c:ff:8f:f3:90:a7:35:3a:98:8e:3d:91:81:29:7c:
dd:74:5f:03:c3:81:d2:29:67:09:f1:e0:e7:a5:f5:
d9:a1:69:ed:7e:12:a1:55:5f:c3:03:22:e5:72:a0:
c8:63:5b:ce:ef:45:53:65:59:80:94:de:82:bf:5f:
c3:d8:4a:10:81:72:f3:f4:55:1c:fb:61:85:23:34:
6b:1a:0e:c7:66:c9:b4:b7:38:a9:c4:c1:6f:b5:76:
ee:3c:ef:4f:69:d5:83:70:a7:07:ac:68:07:a2:30:
83:31:32:d3:33:74:c6:0c:de:aa:ba:b4:4e:f7:ff:
4f:ab:8b:2a:08:15:86:a8:1c:4d:a3:9c:63:72:bf:
98:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:56:F7:F0:1D:44:94:A6:C9:EA:E7:01:81:52:9B:60:69:11:96:CC
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/98392EE2A67711EE999F89A2775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.167.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:52:ae:12:8e:de:ea:3e:40:af:b4:3d:d3:c0:8d:55:8f:cc:
57:28:29:79:f7:dd:48:b5:fd:7e:26:5c:1e:26:c5:78:2d:18:
c1:16:11:0e:b0:41:62:ee:12:85:37:44:11:5f:50:7e:5e:97:
13:73:ae:2e:3a:f8:62:31:c8:43:4f:80:09:69:b9:88:70:bd:
20:d4:c9:d9:5c:5a:63:d3:0e:db:07:63:94:d0:c8:f9:d0:3d:
e7:37:bb:39:ba:b3:91:54:fa:fa:63:69:21:5f:aa:d1:c9:fd:
f2:58:04:07:48:10:ff:a0:3d:e6:2e:ef:e7:f3:7b:c1:a2:ca:
d8:f6:85:42:ae:d6:48:0e:5d:d6:c0:97:f4:15:5a:d5:fa:77:
0d:54:44:10:86:3e:bb:b8:cf:a6:bb:e5:6c:bd:ac:d1:90:e1:
bf:f0:83:10:ce:09:53:0b:f2:f1:dc:0d:2f:2a:1f:14:6d:30:
b8:56:7d:be:11:7f:5e:e9:5f:32:9c:d2:80:c8:8f:6f:7b:63:
82:d8:da:84:c0:8a:e4:c8:d0:35:11:2c:73:10:66:41:59:e7:
1e:75:9a:ca:57:1c:fd:dc:0c:67:e0:de:49:9d:47:f0:c2:9f:
08:4d:15:ec:bf:db:79:49:4f:a6:d5:81:af:44:78:7a:76:e3:
9f:97:58:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:58:51 2024 by rpki-client on console-fra.rpki-client.org