Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9E4722547FBC11EDAF6333AFF1222468.roa
File: 9E4722547FBC11EDAF6333AFF1222468.roa (raw, json)
Hash identifier: obtImDYZBkoF7/4gbYFKKweJqtJZWP5Uhykzdl1VDPw=
Subject key identifier: D3:8F:70:2F:9A:80:C4:AB:2F:CA:1D:92:0C:DF:5D:D0:F8:44:0C:A1
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0976
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9E4722547FBC11EDAF6333AFF1222468.roa
Signing time: Mon 19 Dec 2022 16:46:00 +0000
ROA not before: Mon 19 Dec 2022 16:45:57 +0000
ROA not after: Tue 19 Dec 2023 16:45:57 +0000
asID: 7018
IP address blocks: 102.129.236.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2422 (0x976)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 19 16:45:57 2022 GMT
Not After : Dec 19 16:45:57 2023 GMT
Subject: CN=63a09548-887b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1f:6c:12:14:1a:25:de:be:4d:cc:bb:bd:d7:
ec:80:ef:be:84:1d:44:d7:fb:96:47:84:d4:ec:97:
96:93:d1:f4:b4:66:5c:bd:72:ba:de:a9:70:2b:19:
2c:93:d4:a2:c0:73:7a:27:cf:5f:1b:ed:4c:84:07:
2a:4b:fa:85:cd:9c:a3:72:f4:7f:f6:b1:e8:11:ad:
da:04:84:1e:2b:d9:cf:1f:55:25:31:21:c6:e1:e4:
88:56:a1:54:80:a7:5f:5f:5e:9a:44:2e:24:5e:79:
93:8f:71:86:80:80:e5:b9:2a:be:f4:62:7a:52:13:
bc:7c:70:d9:2a:e8:e4:4f:f5:d2:bd:7e:ac:a9:34:
ce:0e:9c:d7:e7:ec:e2:49:dd:d7:f7:b8:97:7e:c2:
e0:15:1a:24:c6:70:a4:b4:b1:fb:28:f1:9d:43:fb:
19:c8:42:13:94:4f:2e:56:de:e2:4f:cf:ef:40:53:
91:e5:fc:5e:e0:9d:7c:c0:9d:7c:ce:45:08:2d:7e:
5b:ca:6a:04:e4:1d:04:1c:f8:31:b0:a8:d6:84:7b:
bd:bc:0d:63:b7:c4:8e:ca:3c:74:62:f0:65:dc:09:
45:5f:b9:47:05:54:bb:70:b6:dc:63:c1:38:99:c7:
23:2e:ab:6c:16:b2:21:66:a4:13:ba:9d:7e:9d:a1:
a5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8F:70:2F:9A:80:C4:AB:2F:CA:1D:92:0C:DF:5D:D0:F8:44:0C:A1
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9E4722547FBC11EDAF6333AFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.236.0/24
Signature Algorithm: sha256WithRSAEncryption
22:5b:ac:b5:f0:3b:52:d2:47:2e:ef:a8:89:95:86:83:55:3b:
45:e8:15:19:4f:09:7a:69:97:d9:2c:d6:d8:be:cd:cb:c2:02:
b6:5a:16:a5:57:ec:5d:e1:dd:6d:18:d4:1e:de:62:7e:0a:52:
d0:4a:5a:51:29:04:08:2f:60:ed:25:6f:66:ab:20:c4:9d:d6:
a0:d2:ae:d6:37:04:90:3d:10:87:e1:d0:11:db:5b:ea:ef:c7:
78:57:a8:06:47:32:21:d0:0d:9d:84:28:1c:d9:13:5a:93:c6:
dd:e0:b0:b5:c8:c8:d5:85:13:fd:3c:07:78:06:98:3a:a2:2b:
f3:68:1b:6e:85:a7:bf:57:43:2f:04:22:3d:8c:bc:3b:a2:09:
fa:14:14:0b:32:d4:f9:3d:c0:26:5d:fa:97:47:60:40:9a:75:
7f:ec:30:e9:81:77:17:69:09:b7:73:c4:d5:52:ad:67:36:59:
01:35:18:3e:d2:07:13:f7:eb:42:ae:95:c6:b6:e0:2d:d0:f5:
54:2a:3f:44:7a:7b:70:21:1e:19:0f:f5:20:e2:44:d4:73:2f:
84:8e:3f:c1:68:43:0e:41:e8:51:19:75:40:9a:a1:2f:2b:75:
09:65:6a:57:34:a7:27:55:b5:99:1e:d6:55:df:fa:5b:68:b9:
54:ff:67:90
-----BEGIN CERTIFICATE-----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Generated at Fri Nov 17 07:14:32 2023 by rpki-client on console-fra.rpki-client.org