Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B63F58F2241911EE85A846144AD9E6FC.roa
File: B63F58F2241911EE85A846144AD9E6FC.roa (raw, json)
Hash identifier: uksc0hhiJp1c9F7nRmPElb+eTNqXYeJ1NUKxtWcWCtE=
Subject key identifier: 97:05:B9:CF:D0:15:90:8F:7E:A2:C7:BB:D0:D3:DF:DF:75:49:6D:F9
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0C76
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B63F58F2241911EE85A846144AD9E6FC.roa
Signing time: Sun 16 Jul 2023 20:45:34 +0000
ROA not before: Sun 16 Jul 2023 20:45:31 +0000
ROA not after: Tue 15 Jul 2025 20:45:31 +0000
asID: 834
IP address blocks: 102.129.206.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3190 (0xc76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 16 20:45:31 2023 GMT
Not After : Jul 15 20:45:31 2025 GMT
Subject: CN=64b456ee-ceb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:86:03:54:68:a2:fc:3d:d0:e5:b3:34:6b:49:
d7:36:77:92:1f:5f:d9:d1:ab:db:b6:e3:d4:67:31:
fb:d4:e6:6e:45:98:1a:95:fb:74:10:7d:18:a6:2a:
95:66:46:98:8d:54:91:67:25:88:44:1e:dd:96:3d:
99:63:50:bc:ed:7e:c2:a5:b8:8b:05:b9:a7:9f:2c:
ec:8e:63:d3:ff:f1:a3:a6:07:87:4b:7c:d0:c7:82:
a8:05:e9:78:4f:44:c4:57:c6:00:30:52:e0:26:c5:
7a:27:25:f7:0d:a0:e0:89:c5:14:24:dc:3b:e9:2d:
79:6c:9d:92:e9:8d:57:6a:b2:b6:91:1d:37:dd:62:
5e:61:ad:0a:79:bf:7c:76:eb:ec:ff:2d:1c:18:11:
b2:64:d8:02:9d:4f:a1:f1:8e:bc:0a:23:de:65:91:
ea:1b:aa:5f:e7:79:eb:6f:7c:af:35:b3:77:3d:59:
71:c6:c4:91:9c:54:d3:22:1c:fa:94:bc:7b:e3:8b:
32:46:0d:4d:a2:6d:82:f7:1e:3e:1c:dd:d5:c1:18:
54:67:33:40:ee:7e:ad:55:92:40:a2:97:40:06:c6:
4b:a3:c4:01:1f:db:18:5e:27:58:37:2e:a1:1f:2b:
09:de:92:54:7e:fc:26:3d:a0:4d:ff:88:17:27:80:
69:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:05:B9:CF:D0:15:90:8F:7E:A2:C7:BB:D0:D3:DF:DF:75:49:6D:F9
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B63F58F2241911EE85A846144AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.206.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:5b:3b:cd:9b:bc:f2:1a:04:56:d4:d0:0e:fa:d7:e4:0f:d7:
27:e8:9b:0d:59:29:39:1d:5f:99:39:b0:76:47:41:a1:e0:8a:
e5:30:9b:1f:db:0f:7a:70:11:e0:c0:d8:c0:8e:3d:48:b6:8f:
b0:a8:9d:f2:dc:ac:31:c0:5f:ea:3d:56:bb:39:d1:de:5e:70:
a5:9e:93:f8:ce:fa:a0:6a:82:d5:fb:16:73:ce:35:bf:48:ce:
70:67:72:c9:01:5c:ff:61:32:d2:84:64:b9:62:ce:37:76:bb:
10:0c:d0:ad:a2:2b:8f:9b:e9:86:5e:b9:a4:d1:9c:38:cf:d1:
4e:55:ef:f8:f8:e6:0c:39:03:54:20:b7:cf:b5:ed:9f:44:01:
e3:d0:37:83:b2:69:5b:8d:1f:a3:0e:31:eb:6b:d1:00:dd:29:
15:f2:51:e3:43:82:e5:02:bf:f0:fe:bf:94:e4:12:96:ac:99:
f9:50:25:f0:3f:d0:d1:84:1a:f2:59:21:7a:28:52:bd:d7:d1:
e5:85:be:5f:b3:a5:de:42:7f:72:3e:84:fc:95:7e:56:8c:2b:
0a:9a:b0:bd:66:76:97:a4:c6:5a:48:c9:29:8e:de:d6:0e:db:
2f:22:f4:32:02:14:47:6c:e4:86:27:2f:c8:8b:6a:0b:a7:09:
7b:19:b9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 12:43:04 2023 by rpki-client on console-ams.rpki-client.org