Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A0CCF3F6275E11EEB91D75274AD9E6FC.roa
File: A0CCF3F6275E11EEB91D75274AD9E6FC.roa (raw, json)
Hash identifier: GshlFbX9T0VKSkXXnVhyqpRLy0Iwd4ZT1WrqZf63ia0=
Subject key identifier: D0:73:24:B1:EA:73:FB:24:E3:2F:4E:8D:EC:F5:75:02:D9:FD:EB:97
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0C8D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A0CCF3F6275E11EEB91D75274AD9E6FC.roa
Signing time: Fri 21 Jul 2023 00:36:27 +0000
ROA not before: Fri 21 Jul 2023 00:00:23 +0000
ROA not after: Mon 21 Jul 2025 00:00:23 +0000
asID: 834
IP address blocks: 102.129.150.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3213 (0xc8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 21 00:00:23 2023 GMT
Not After : Jul 21 00:00:23 2025 GMT
Subject: CN=64b9d30b-86e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a8:45:63:d6:4e:dd:bc:05:7b:04:f5:3d:b0:
61:ca:0d:60:a6:75:dd:3e:6a:80:20:97:6d:62:b9:
ee:1e:23:c6:c6:bb:96:ca:a0:82:30:c6:d6:8c:25:
f4:6d:dd:a0:25:cb:8e:c2:22:f1:36:bc:4e:71:a1:
56:23:78:52:de:51:0d:8f:97:a0:05:a2:52:00:9b:
30:1d:ee:54:85:3d:6f:32:98:0f:6f:c9:53:38:77:
1d:4a:a2:39:31:a9:27:02:57:32:60:db:0a:0b:db:
4c:21:5c:8f:ac:5e:85:d3:75:77:12:b2:30:4b:53:
09:81:8b:2a:09:0e:42:ba:99:9f:21:d0:e7:bf:be:
cf:c0:c3:ff:e1:da:39:80:86:66:5c:e5:aa:01:c6:
88:38:0f:ce:6b:9f:d1:8a:3f:7a:f4:f1:a6:9e:9e:
42:35:ac:65:2c:09:8a:b5:21:de:ae:d9:49:c4:0f:
55:a5:91:e1:9a:69:dc:f6:7f:7a:9d:cf:af:c4:7e:
9c:bc:2e:4d:b8:aa:a1:39:dd:f5:df:7f:ac:b0:e9:
41:c3:42:63:f1:15:ea:45:59:51:80:b6:9c:15:db:
94:4e:ee:65:c4:16:05:d0:be:80:fa:62:ec:45:41:
4d:0d:11:66:f7:2b:7b:4a:25:ea:2d:8e:a9:de:3e:
ac:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:73:24:B1:EA:73:FB:24:E3:2F:4E:8D:EC:F5:75:02:D9:FD:EB:97
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A0CCF3F6275E11EEB91D75274AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.150.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:ed:89:e9:00:54:99:54:c2:44:3b:74:0f:10:1c:da:b9:66:
20:02:5a:76:f3:73:a9:1b:1c:ad:af:8c:66:dc:84:cc:7c:79:
4b:f5:c3:13:14:5c:ae:17:68:97:db:7d:e6:16:6c:0c:c1:db:
48:a6:d1:17:65:df:8b:e9:49:d2:94:e2:fe:47:7b:a4:24:98:
3c:e4:1b:01:f5:91:3c:e5:17:74:ec:8a:00:b8:11:e0:5c:c5:
93:49:62:24:09:8b:e5:32:05:e5:51:0e:f9:62:33:6f:e1:4b:
70:f5:98:09:55:17:21:43:18:18:0e:aa:51:0b:60:06:8f:88:
dc:b9:1e:52:c9:36:b7:a6:6e:41:28:95:12:b8:df:e8:3b:da:
87:e0:22:ca:23:08:c5:dc:17:d8:7e:e5:57:51:ea:60:44:fe:
f6:af:ed:45:4a:fa:1b:8f:5c:83:05:f1:a1:a5:d9:8d:d8:40:
98:c3:11:2c:fc:cf:80:cf:ca:0a:d8:e1:0d:ad:3f:cb:4b:08:
b4:13:be:9c:aa:83:b0:42:33:66:17:ac:8e:7e:41:34:08:43:
c9:43:53:b3:03:58:f0:91:43:1b:3b:6d:00:03:c7:df:07:c8:
8a:2e:ce:3c:99:5a:36:00:c7:cd:94:9d:1a:de:69:3c:5c:9f:
d5:2a:8f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 23:35:53 2023 by rpki-client on console-fra.rpki-client.org