Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9CCE20840F8711EEA7FE2B184AD9E6FC.roa
File: 9CCE20840F8711EEA7FE2B184AD9E6FC.roa (raw, json)
Hash identifier: 6CbQ9Oid6XNSWpe37esoNq/6xmbWEHucJHiytei4VUo=
Subject key identifier: 5B:2B:AC:13:FB:7F:44:BB:95:3F:48:9D:88:2B:C0:B7:DA:AC:AB:06
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0C18
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9CCE20840F8711EEA7FE2B184AD9E6FC.roa
Signing time: Tue 20 Jun 2023 16:29:22 +0000
ROA not before: Tue 20 Jun 2023 16:29:18 +0000
ROA not after: Thu 19 Jun 2025 16:29:18 +0000
asID: 147291
IP address blocks: 102.129.246.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3096 (0xc18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 20 16:29:18 2023 GMT
Not After : Jun 19 16:29:18 2025 GMT
Subject: CN=6491d3e2-dbc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e8:de:25:7d:92:c7:ef:21:58:1d:d1:94:65:
2e:b0:66:d6:a1:35:83:1a:26:b5:80:61:c0:6c:1a:
73:45:c3:d4:2e:03:3e:14:02:40:bb:e3:80:17:a4:
f1:5b:a8:fe:f5:ff:85:e9:b7:01:7c:24:ac:0b:bf:
f4:85:cb:ec:b9:9e:e1:1d:04:79:a1:34:28:61:cb:
07:77:cb:73:ae:f3:e0:2f:b3:bd:0a:f0:27:74:8c:
b2:42:02:e3:21:41:a6:a1:59:f2:90:0b:4d:6c:3b:
72:68:ef:a7:9a:f9:b1:70:bd:b2:26:4a:2f:9e:e6:
d9:54:ea:b5:d0:de:ff:70:6e:b2:9b:67:2a:5c:15:
10:22:76:43:3b:7c:fe:95:b6:91:48:f2:14:93:d3:
65:2a:9c:a0:42:b3:61:aa:d4:bd:6e:d5:d0:96:56:
9c:9c:a7:fd:eb:b5:84:10:e2:b0:34:48:31:df:f8:
47:9c:f9:53:6c:48:42:c2:1e:46:c4:6d:48:32:69:
b7:b5:76:0a:11:dd:1b:39:43:92:c8:79:09:33:50:
dc:7b:d8:e0:a0:b9:ea:9e:78:d0:c6:f8:83:f3:58:
07:3e:84:be:dc:bb:d6:e6:d4:d2:4c:8d:dc:3d:24:
c0:7e:fe:c5:29:2f:ca:6b:03:d1:ed:7c:d4:46:ca:
c2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2B:AC:13:FB:7F:44:BB:95:3F:48:9D:88:2B:C0:B7:DA:AC:AB:06
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9CCE20840F8711EEA7FE2B184AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.246.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:64:14:58:a8:90:f3:47:f1:10:1f:df:3a:48:de:89:1e:5d:
d0:03:87:6f:16:05:95:13:ff:76:d0:8c:b5:06:ee:c8:46:2e:
3f:9e:cb:26:ab:fd:57:95:18:f1:35:72:90:ba:95:9a:99:e8:
0b:a5:3c:08:6f:4b:d9:b7:e1:7c:cf:a2:97:13:22:f9:95:30:
a7:60:da:5e:bb:fe:a2:e8:4f:53:c8:d7:75:e2:58:40:5a:15:
e7:91:44:35:9b:e3:d2:95:8d:2e:2f:25:3d:47:d6:a1:bd:fe:
25:6e:53:ec:39:dc:78:f9:1a:92:a1:eb:14:57:c7:b6:08:10:
91:fe:b1:0e:31:5f:db:fe:42:53:2a:23:2b:7e:d9:52:13:10:
33:95:b4:47:d6:60:30:da:11:5e:69:dd:dc:a4:31:84:1a:77:
18:62:32:6f:9f:16:05:97:c5:f9:7e:72:fe:0e:f2:56:86:62:
dc:82:c9:15:c8:5e:86:44:6f:33:70:f6:85:f8:61:1f:8c:e0:
da:28:2b:13:d1:59:0a:60:b1:41:c0:03:85:7d:1c:30:b3:57:
65:90:ea:cc:e6:c8:40:63:9b:a8:43:ef:c8:df:73:7c:f8:d7:
6f:5d:e5:06:aa:c7:be:bb:13:49:b5:05:c6:ac:61:2f:63:12:
64:14:df:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 20 21:59:30 2023 by rpki-client on console-fra.rpki-client.org