Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9B538F08522D11EE88C179404AD9E6FC.roa
File: 9B538F08522D11EE88C179404AD9E6FC.roa (raw, json)
Hash identifier: XJbuko/6HeVeB0CYXEu50MTHbH7vndbVDrP+amjZVA4=
Subject key identifier: 40:76:D6:9B:DA:26:8B:B2:91:D8:F7:19:87:6C:19:A5:90:D2:DC:86
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0D45
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9B538F08522D11EE88C179404AD9E6FC.roa
Signing time: Wed 13 Sep 2023 12:03:53 +0000
ROA not before: Wed 13 Sep 2023 12:03:50 +0000
ROA not after: Sun 15 Sep 2024 12:03:50 +0000
asID: 62240
IP address blocks: 102.129.246.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3397 (0xd45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 13 12:03:50 2023 GMT
Not After : Sep 15 12:03:50 2024 GMT
Subject: CN=6501a529-3450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:22:26:90:43:d9:a9:5c:e4:4e:d1:4a:83:
7d:32:4e:05:8f:ab:9b:20:54:14:da:96:5b:c6:a1:
cc:bc:de:f8:9a:8d:87:43:91:fe:e9:e2:ac:5a:f9:
4b:d1:cd:7f:c8:83:32:5b:0d:fa:30:4a:71:33:c0:
d9:c2:8b:d7:f4:98:a4:e7:73:2c:00:80:b5:1d:81:
b8:96:71:c1:c7:c4:30:20:ef:37:c2:7d:b8:ec:10:
45:a6:a5:85:10:01:fd:02:f3:3b:9c:29:67:f8:c1:
f8:18:61:d1:e0:b2:fa:f1:6d:f0:bb:78:c2:9f:8d:
b8:11:fb:7a:5b:d1:85:dd:47:40:de:78:2f:fc:fc:
2f:ce:17:0a:2d:79:f6:f3:cb:66:2a:2b:41:9e:ac:
64:dd:e7:30:9e:d4:bf:f9:b0:41:e7:ba:1b:3b:13:
58:d6:cb:12:78:fa:be:2e:45:25:78:c6:50:c8:19:
e5:85:af:4f:90:bc:e3:e5:9c:d4:7c:7a:36:0e:c6:
03:de:e2:e4:57:6f:09:18:57:f9:15:7b:93:b9:56:
67:7e:44:40:07:c0:9e:be:2d:8b:88:90:4d:73:c5:
e6:c5:d3:3b:12:fd:7d:95:77:22:2e:5a:98:4b:3b:
6c:e0:d8:26:c7:85:bf:f0:cb:33:32:0d:63:e6:82:
a2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:76:D6:9B:DA:26:8B:B2:91:D8:F7:19:87:6C:19:A5:90:D2:DC:86
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9B538F08522D11EE88C179404AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.246.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:3c:87:c1:4a:13:e2:a0:48:05:f8:82:ea:de:e5:90:84:3a:
ec:19:a8:7b:5a:16:9a:7f:d2:e5:f9:b5:a9:8a:17:36:91:e4:
0c:f1:2e:36:0c:50:3d:a7:43:4d:02:c1:58:8f:9d:d2:a3:7e:
f9:d8:14:35:bb:2d:c7:ce:a2:ce:6c:fd:dd:30:d1:29:39:3e:
58:f5:a4:94:af:23:ad:d7:02:ac:20:56:2e:18:ca:cc:c1:5f:
7c:f6:e1:ed:fd:fc:77:7e:36:64:1f:99:ec:c2:81:8c:32:c7:
fb:38:76:f1:fe:49:4f:25:c8:cb:22:c4:15:f1:f4:bb:d3:00:
95:66:4b:18:e4:b5:d5:57:de:cc:38:a2:be:be:b4:a8:06:4d:
f8:3b:33:b5:d5:6b:69:a1:ba:9a:74:75:10:c8:20:2f:19:db:
9c:c5:15:ff:a0:9e:07:ad:95:59:16:86:59:01:d8:d2:41:80:
6a:df:21:56:48:35:bd:51:dc:aa:83:90:fc:cc:c7:7e:bd:99:
6a:39:79:9c:fd:58:d7:32:99:e5:02:a9:a7:15:a8:e2:bf:64:
54:66:b7:3d:b1:b4:fa:0e:e2:d9:6d:73:74:3e:0d:5a:7a:8c:
63:50:c2:04:c0:95:41:3d:c2:76:91:81:cf:61:92:cc:2e:02:
12:cc:91:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 13 07:47:44 2023 by rpki-client on console-fra.rpki-client.org