Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/99EB86167D3511EDBCD2B6BEF1222468.roa
File: 99EB86167D3511EDBCD2B6BEF1222468.roa (raw, json)
Hash identifier: vUbjrIKpyzaKZBOc5B2l4XicDusWzg8rlkG2wy/gk1I=
Subject key identifier: 11:F8:D4:44:12:7F:71:5F:1A:66:8D:46:7D:3F:9D:2A:AB:77:1B:ED
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0964
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/99EB86167D3511EDBCD2B6BEF1222468.roa
Signing time: Fri 16 Dec 2022 11:34:29 +0000
ROA not before: Fri 16 Dec 2022 11:34:25 +0000
ROA not after: Mon 16 Dec 2024 11:34:25 +0000
asID: 207633
IP address blocks: 102.129.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2404 (0x964)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 16 11:34:25 2022 GMT
Not After : Dec 16 11:34:25 2024 GMT
Subject: CN=639c57c5-5601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8b:f5:c8:9e:c1:2d:a2:7d:d4:21:8c:c3:58:
c1:0b:70:18:12:87:db:ce:b8:77:aa:ea:b8:f2:fd:
f2:18:37:93:0a:3d:64:3f:93:bb:d6:09:04:cf:89:
69:57:22:11:30:e8:27:9e:4a:cf:51:e6:70:8f:56:
ea:5c:35:e7:53:25:b4:bb:69:7a:98:8d:01:f4:5b:
4a:a9:e0:ab:5a:47:6d:ff:60:a2:1a:7d:00:d1:c8:
b9:36:55:37:b2:fb:aa:7d:2e:d1:cd:34:e7:ed:0d:
70:1e:27:f9:3e:fb:d6:a1:e4:19:2d:5f:a6:82:8f:
46:8f:06:02:f9:82:dc:48:af:a4:a8:15:31:8b:8e:
92:77:ca:e3:f6:74:1f:bc:0d:0c:eb:dc:57:be:5b:
84:14:4b:de:30:20:c3:2b:41:e3:5f:57:f7:e6:6f:
2d:ad:02:cd:ee:ac:eb:a3:e0:56:68:e0:f0:ef:81:
14:bb:4b:0e:0a:c1:a5:5b:42:b4:75:54:c3:a2:89:
41:0c:f7:e0:6a:b6:91:02:42:a9:e6:61:1a:e6:12:
4e:05:af:89:fb:35:34:8a:06:a7:92:15:f1:c1:58:
d5:1b:98:21:1e:4f:1d:11:8c:db:b0:c2:de:b4:18:
4a:e6:72:a6:6f:cb:9d:1d:9f:47:af:a2:42:cf:1c:
7e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F8:D4:44:12:7F:71:5F:1A:66:8D:46:7D:3F:9D:2A:AB:77:1B:ED
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/99EB86167D3511EDBCD2B6BEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.191.0/24
Signature Algorithm: sha256WithRSAEncryption
43:c7:1e:51:c5:eb:8f:79:5c:8d:7d:02:68:38:c2:c2:e0:77:
32:ac:44:d2:3f:64:28:54:c8:06:4c:a3:7f:fb:18:1d:9b:db:
98:1c:54:c3:86:ed:4a:d8:55:37:23:4c:be:e8:ba:d1:1d:fb:
07:94:45:8a:fb:6a:2b:da:04:e0:c6:0d:24:20:61:5d:3a:99:
2d:2c:59:a1:e6:20:f7:79:d9:87:d0:8d:30:ea:d8:9b:de:85:
29:0e:8c:3d:f1:26:61:0d:ec:43:f3:4e:66:65:f9:22:e2:ee:
9a:7d:76:c4:63:32:ff:be:25:f0:e9:be:b1:4e:a0:94:eb:9a:
42:6e:3d:cd:9c:d8:a3:66:41:0c:a1:b6:d2:42:60:52:f7:d5:
a0:8d:ee:8e:43:7a:a8:55:56:31:fa:5f:29:65:cf:94:42:b2:
d5:22:a1:68:89:a4:e8:ce:44:4e:72:72:3b:8d:53:8f:25:8b:
59:09:08:46:54:9b:4f:ab:79:01:75:57:99:c5:ab:17:80:aa:
d6:60:3a:df:ae:51:37:8f:8d:53:62:35:16:80:75:d3:57:2c:
3d:4d:17:04:64:db:6c:a5:03:48:9f:9e:87:b3:ec:f8:48:9b:
01:06:1e:13:60:f5:2c:84:f1:b3:0e:07:12:7f:6c:9d:72:b0:
62:e6:98:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org