Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9D24ECAADF4611EDA7511CE22F6D8C1D.roa
File: 9D24ECAADF4611EDA7511CE22F6D8C1D.roa (raw, json)
Hash identifier: Nc8wBlzw+76hnFKS+SO6lK18IVB0MTbLdyPR/eDjKS0=
Subject key identifier: 5E:19:49:9E:5A:2A:DB:86:0F:36:5E:BA:C0:4B:12:7B:97:25:69:3B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0B2C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9D24ECAADF4611EDA7511CE22F6D8C1D.roa
Signing time: Thu 20 Apr 2023 06:43:10 +0000
ROA not before: Thu 20 Apr 2023 06:43:06 +0000
ROA not after: Sat 19 Apr 2025 06:43:06 +0000
asID: 135752
IP address blocks: 102.129.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2860 (0xb2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 20 06:43:06 2023 GMT
Not After : Apr 19 06:43:06 2025 GMT
Subject: CN=6440defd-2609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5c:a8:5a:7a:8d:d3:c4:50:0e:f8:20:70:e3:
01:a5:22:f6:e6:bc:aa:0b:e7:41:bf:da:d0:51:97:
32:96:f7:57:1b:da:ed:63:3e:82:43:4e:c1:d2:a8:
c3:4f:7b:a3:fd:d9:60:da:e7:ef:b6:7f:3a:50:85:
b3:51:7c:d6:e5:86:0f:32:a8:7e:94:cd:ca:ec:2a:
a3:ad:61:bb:13:cd:60:7a:fe:78:c5:2a:d6:60:8d:
f8:ff:9a:af:b8:85:86:24:c6:c1:e1:f4:7d:b6:2b:
27:0e:82:4e:95:65:e5:d8:4e:b6:b2:39:bf:e9:77:
b0:dd:40:bb:c6:68:5e:2c:30:bf:8f:0d:44:8e:f1:
8b:1b:92:d7:45:7b:29:67:39:a3:34:9a:7c:cd:a3:
52:07:1f:b2:31:c8:71:df:67:88:e4:f7:67:d0:6a:
11:6a:44:fa:2c:a6:7a:65:1d:81:01:d4:e6:4b:11:
87:b3:0b:89:09:c8:d5:30:80:bc:ba:62:92:d2:44:
16:3c:ae:58:7b:58:a6:28:61:59:ee:01:5a:37:ec:
b0:58:8a:b6:62:c6:04:7b:37:68:57:1f:f4:6b:7b:
e4:76:b8:29:8c:c2:86:10:51:b8:3e:a2:08:b8:72:
a5:91:aa:72:7c:69:75:d6:32:09:6a:88:8a:e1:7e:
c0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:19:49:9E:5A:2A:DB:86:0F:36:5E:BA:C0:4B:12:7B:97:25:69:3B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9D24ECAADF4611EDA7511CE22F6D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.226.0/24
Signature Algorithm: sha256WithRSAEncryption
35:f5:f8:35:37:2c:5f:54:bf:71:44:0b:3c:83:76:e1:81:d5:
78:0a:0b:37:cf:c6:30:30:dd:09:8f:c3:43:ba:54:fc:23:77:
b2:24:4f:5d:76:60:bf:9d:64:29:ac:ce:e7:f8:1b:0f:7a:e8:
b6:5c:1c:5f:37:6e:81:a5:76:94:f0:65:39:d3:72:79:ef:08:
92:25:d6:5b:d4:17:97:c0:4d:c1:53:6e:3e:69:be:17:a9:6e:
d1:71:39:ea:6a:59:1b:97:c2:52:98:40:d4:3e:0c:87:a5:59:
3b:d6:77:f8:93:f1:82:33:49:43:66:57:be:31:70:09:28:f6:
06:92:8c:90:7d:37:13:c3:66:04:da:32:f0:72:5b:28:30:fc:
ea:71:a7:1c:83:c8:76:fe:dd:2f:ee:c2:15:63:8e:33:33:7f:
26:1f:15:8f:8a:f7:e0:64:1b:8d:c1:ff:a2:4a:65:47:71:8d:
ef:f6:51:41:ad:1c:f8:1b:60:29:f1:33:0c:b6:b0:28:da:82:
ec:f3:af:42:93:b5:41:95:7f:73:11:4d:16:aa:d8:3f:f6:4b:
98:a3:3d:5b:26:5a:c0:66:10:59:05:a4:37:5c:b6:93:c0:c7:
0f:29:98:47:a9:de:5d:4d:a1:5a:f0:aa:7b:3c:a3:52:e6:78:
3a:1f:9c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org