Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A3A5D0ACEBE011EDB6419A494AD9E6FC.roa
File: A3A5D0ACEBE011EDB6419A494AD9E6FC.roa (raw, json)
Hash identifier: lG2g/Njj/gLv19XwNNhktZOtATsMhsHrCK8vsIBV2hU=
Subject key identifier: EB:28:59:70:1C:BD:58:B0:C8:2A:7A:39:03:25:BA:CA:A9:39:5A:E1
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0B51
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A3A5D0ACEBE011EDB6419A494AD9E6FC.roa
Signing time: Sat 06 May 2023 07:35:57 +0000
ROA not before: Sat 06 May 2023 07:35:52 +0000
ROA not after: Thu 08 May 2025 07:35:52 +0000
asID: 211584
IP address blocks: 102.129.134.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2897 (0xb51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 6 07:35:52 2023 GMT
Not After : May 8 07:35:52 2025 GMT
Subject: CN=6456035d-8f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ac:4a:c0:67:25:0c:33:0f:cc:be:66:5b:62:
4d:b1:c8:2c:dd:81:b3:88:11:65:88:f5:05:46:92:
e6:ca:dd:aa:c5:2c:27:d0:16:91:93:c7:d3:36:4b:
aa:d9:25:57:f1:79:09:a6:f7:4e:6e:07:c9:fd:56:
24:af:82:c2:a2:8d:c2:28:05:14:c2:8d:66:10:77:
3b:c4:84:65:86:3a:07:db:a6:c9:98:f3:3d:79:5d:
c9:be:02:2f:29:c3:e2:4b:8a:b2:9f:a2:3e:57:11:
b5:67:c5:ca:59:c1:14:95:c0:9e:a8:6d:e0:5c:6e:
fc:bf:72:94:59:f3:8a:7c:81:cc:4f:dd:5f:08:8b:
2b:69:db:c4:40:fc:ea:eb:42:84:fc:c1:39:db:1f:
94:87:16:78:1c:67:0e:9c:f2:6f:dc:9b:c5:5c:7b:
16:98:a7:b7:dd:d3:cf:66:f3:80:4e:c8:e3:04:80:
62:07:c5:5f:b7:b2:eb:f2:e2:c7:d7:f4:84:9d:3e:
f5:6a:17:79:24:05:04:f5:00:68:54:1e:86:e9:7f:
70:9f:1b:e5:58:99:2d:7d:33:ad:14:f3:09:49:28:
1f:0d:03:ec:45:18:e3:5f:19:2d:52:41:1b:49:8d:
6f:f9:83:bc:f8:9f:b5:06:33:6e:54:29:7c:a0:b2:
cb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:28:59:70:1C:BD:58:B0:C8:2A:7A:39:03:25:BA:CA:A9:39:5A:E1
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A3A5D0ACEBE011EDB6419A494AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.134.0/24
Signature Algorithm: sha256WithRSAEncryption
61:cd:a9:8b:1c:45:63:e2:8a:aa:a9:5c:7c:f0:b1:79:ea:0e:
c5:6d:4e:88:80:3e:7f:18:e9:60:90:29:52:9a:41:77:3c:8c:
0a:d0:be:49:82:84:08:e6:93:ff:bf:96:a9:3b:f5:7a:c9:cb:
3f:05:92:7f:bb:e2:c5:65:43:69:22:e6:6b:93:80:e4:9e:60:
8f:68:b4:49:26:93:bc:c4:85:2c:ab:8b:89:9e:60:01:94:9d:
98:3f:bb:fe:da:7d:60:9d:d0:6b:2d:02:95:55:ea:99:6d:6a:
2d:1a:c0:0a:03:b5:de:fa:bf:66:6e:75:48:bf:c0:bc:75:31:
0f:62:8d:6c:fe:56:b9:45:98:7a:f7:9d:60:d9:59:c9:16:6b:
5b:42:ca:9e:de:6d:34:46:6e:a5:5e:a0:c6:27:0f:91:cf:1f:
bc:d1:3d:f2:7e:f4:df:74:b8:e8:0f:bf:3d:1a:ce:b6:b1:72:
97:eb:7c:a4:0e:c7:26:1b:74:77:69:a0:a5:05:17:bf:a3:40:
e1:1f:64:41:79:8f:dd:51:7e:c3:4e:91:55:3a:0c:6b:91:90:
c1:1f:9a:c7:a7:89:e8:19:e9:b1:8d:f7:e3:be:35:cc:00:71:
de:74:60:fd:8e:57:fb:88:0a:f4:10:b4:6f:48:30:d2:a9:b3:
a4:56:92:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org