Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9B16DF92488F11EEA7DC4E224AD9E6FC.roa
File: 9B16DF92488F11EEA7DC4E224AD9E6FC.roa (raw, json)
Hash identifier: BiXZ2FuQz5RIRE8JQM9GYHMU59WXshph3BvcgrX/I9o=
Subject key identifier: 46:77:87:DD:F7:76:0C:BD:C5:90:3D:D1:76:CE:43:40:7D:73:CA:67
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0D06
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9B16DF92488F11EEA7DC4E224AD9E6FC.roa
Signing time: Fri 01 Sep 2023 06:20:11 +0000
ROA not before: Fri 01 Sep 2023 06:20:07 +0000
ROA not after: Mon 01 Sep 2025 06:20:07 +0000
asID: 398465
IP address blocks: 102.129.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3334 (0xd06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 1 06:20:07 2023 GMT
Not After : Sep 1 06:20:07 2025 GMT
Subject: CN=64f1829b-dc66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c1:fe:6f:45:e2:0f:4b:ed:7e:ab:80:26:db:
78:a9:19:9a:72:cc:6d:00:4d:b8:40:a3:c0:4b:55:
f2:d0:2e:dc:78:a3:40:74:ca:d0:fb:b5:b8:6e:5a:
af:62:af:89:05:c4:af:d3:9b:e0:fd:bf:10:28:b5:
c6:9d:20:bd:0f:ff:2a:f3:4a:de:0e:f7:07:57:fc:
93:68:d6:d7:12:b1:2f:a1:50:7c:7b:f3:65:54:f7:
ef:4c:22:50:9f:ff:11:d7:96:1f:5f:ce:d7:c4:49:
80:0d:87:5d:99:3d:b6:04:89:54:9c:7b:51:28:c1:
b0:4f:a3:1a:63:4e:b6:44:4e:aa:0e:17:4b:42:10:
65:3f:df:09:e4:13:e7:6b:c1:02:b2:f8:a2:f6:95:
e2:0c:06:5f:f8:d9:68:e9:0b:3e:19:f5:51:1b:51:
b0:94:0b:a6:48:69:c2:6c:25:31:2b:5e:7d:df:a3:
13:70:69:64:78:48:67:36:f2:b4:b5:17:9e:53:f6:
7a:1e:42:35:2f:e8:30:c2:12:e7:83:e0:8a:db:40:
32:a8:3a:fe:68:1b:31:3c:77:32:7d:44:cf:05:3d:
20:fe:a3:2f:f7:fd:36:3e:76:cf:91:f0:49:0e:d8:
0d:37:c4:ac:d6:8b:03:c3:3b:2d:71:c3:2b:e4:cd:
88:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:77:87:DD:F7:76:0C:BD:C5:90:3D:D1:76:CE:43:40:7D:73:CA:67
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9B16DF92488F11EEA7DC4E224AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.225.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:15:5b:3b:6a:8e:7f:46:88:57:ac:02:23:f9:d7:03:f9:a0:
b3:6d:56:cc:bd:55:2b:d1:a1:5a:ca:3d:e8:2b:d5:ad:9b:ee:
be:63:07:89:8a:c9:15:2e:a5:c9:dc:cf:7f:07:61:90:be:cf:
59:ac:21:4e:44:52:5b:b7:01:6d:ba:05:52:7f:2f:36:f7:8c:
91:f8:a3:19:b8:34:ff:00:33:46:95:0f:3e:eb:74:a3:85:34:
85:ca:19:f3:e5:bb:80:19:0d:81:fc:cb:1d:01:a6:59:f4:26:
c1:45:38:9f:ea:50:45:c5:a6:83:7c:49:99:e3:1d:09:8d:c4:
86:0e:a3:e7:91:cf:1f:f5:c3:0b:60:3d:0b:3b:ac:5c:9a:f0:
09:f3:dc:22:87:56:17:5c:2b:b8:11:7d:30:6c:4a:fe:42:44:
9f:9a:ed:29:0e:c7:85:8d:b6:39:29:e6:12:90:ea:26:96:bf:
7a:66:62:a8:e5:b2:bd:dc:c2:f1:86:19:c8:2c:e2:ff:86:77:
e8:3c:95:0f:6c:d1:2e:1e:dc:d4:9d:3b:9b:5e:5e:ef:6d:02:
8a:cc:c3:3b:2e:c8:c6:72:1d:de:98:e2:d0:ea:bc:4f:77:a5:
e7:0c:0b:51:a9:34:59:7a:ba:2b:38:44:c3:4b:be:b5:90:4a:
26:e3:c8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 12:53:05 2023 by rpki-client on console-ams.rpki-client.org