Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A31BD170EFE411ECB29A6BF5F1222468.roa
File: A31BD170EFE411ECB29A6BF5F1222468.roa (raw, json)
Hash identifier: EwKhQoEEYYaxCuuq2QM3jvvoSH4uFEzOzFNNki5Ub98=
Subject key identifier: F1:42:A0:77:C9:66:16:2E:CB:83:FB:15:B7:15:08:9C:7B:56:3D:F8
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 06A4
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A31BD170EFE411ECB29A6BF5F1222468.roa
Signing time: Sun 19 Jun 2022 15:29:41 +0000
ROA not before: Sun 19 Jun 2022 15:29:37 +0000
ROA not after: Wed 19 Jun 2024 15:29:37 +0000
asID: 43260
IP address blocks: 102.129.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1700 (0x6a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 19 15:29:37 2022 GMT
Not After : Jun 19 15:29:37 2024 GMT
Subject: CN=62af40e5-61d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:72:b2:9b:8b:e5:f3:29:58:9c:04:53:e0:1a:
ac:ef:9e:b1:f4:94:aa:c2:91:42:03:dc:ee:c0:b9:
61:e6:3b:51:09:d8:99:16:78:4a:86:1b:f4:9d:e2:
43:7b:ba:3a:c3:9f:57:1e:a0:7f:2d:c4:65:e4:b8:
77:a9:3d:7f:ba:26:91:b7:2b:fd:f7:02:27:3f:dc:
77:59:64:03:a4:16:20:12:4e:9f:47:8e:b9:41:d0:
bc:17:37:81:15:88:f2:ab:de:d5:d3:4d:eb:6a:01:
f9:89:ed:38:5d:d9:68:cb:c6:f0:91:63:e6:a3:d4:
09:bb:06:42:99:6a:d1:98:c9:c1:4e:40:e7:87:4b:
3c:f4:e3:4c:1e:4a:b1:06:fb:6d:52:a9:92:fd:b8:
df:5b:3c:dc:59:65:7b:88:07:7b:f8:96:2d:1b:67:
8c:fc:35:aa:d9:5d:0e:5e:a9:34:0f:ad:0c:5a:86:
4d:22:77:f1:97:fe:13:f1:75:b2:8a:bb:0e:70:f1:
57:66:18:77:d2:d3:60:7a:04:1a:f9:94:4f:6d:bb:
2d:30:dc:7f:12:47:01:fd:10:c5:1a:d5:2d:ab:f3:
c7:38:45:04:14:8f:bd:dd:2e:5c:bd:92:28:7d:19:
2d:9b:28:83:9e:86:14:3d:48:cf:b8:18:c8:d0:10:
e4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:42:A0:77:C9:66:16:2E:CB:83:FB:15:B7:15:08:9C:7B:56:3D:F8
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A31BD170EFE411ECB29A6BF5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.208.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ef:78:9c:bd:b2:af:d1:0a:34:27:a2:e3:5b:88:6c:a2:fa:
69:00:7b:d3:23:f9:b3:50:a2:5e:87:88:b6:41:b0:92:c8:8b:
a2:bf:44:ce:cf:f9:02:89:c0:e0:15:21:92:ed:01:79:dc:7d:
d5:a7:2d:1b:b2:f2:a6:5f:ec:99:d8:88:5a:3d:f9:05:f5:21:
cb:34:f1:58:05:6f:f7:3a:b6:1b:cc:34:b5:f9:0e:15:cb:9f:
8c:dc:85:d5:eb:ec:ce:e4:76:b9:29:27:d6:c0:7f:5d:4f:21:
43:5b:05:f4:4f:60:ae:00:8a:04:ed:ea:a9:ec:db:f2:7f:5b:
29:35:d2:8c:9c:57:1b:c5:b1:d9:60:1e:34:b1:2d:a1:13:0f:
97:0e:de:80:64:67:87:45:35:5c:45:de:fc:0e:f2:e9:3b:4c:
be:54:63:d9:9a:fb:e6:0e:63:87:78:74:86:af:7f:2e:f7:d8:
eb:b2:b0:7a:ad:e1:1e:cb:96:90:44:f2:fa:c5:21:b4:91:cd:
c9:75:95:5f:50:47:96:49:0f:57:db:97:aa:be:cd:9b:ae:ee:
60:dd:1c:cf:1f:bb:5e:f6:2b:35:30:6c:70:dd:b6:1c:c2:07:
1a:38:b4:5f:d0:23:c6:b2:e6:8b:fe:74:15:ce:81:1d:dc:ce:
4a:c9:34:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org