Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B6FC9BC851CF11EDBCE3C9E0F1222468.roa
File: B6FC9BC851CF11EDBCE3C9E0F1222468.roa (raw, json)
Hash identifier: 3VALVCNaASYnQ3EH2FmNYNf0cGj46Du8QzpZY0mk630=
Subject key identifier: 8C:30:50:21:3F:DB:00:1E:43:12:58:96:B3:AB:BC:D4:7C:59:B6:6C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0873
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B6FC9BC851CF11EDBCE3C9E0F1222468.roa
Signing time: Sat 22 Oct 2022 06:06:49 +0000
ROA not before: Sat 22 Oct 2022 06:06:43 +0000
ROA not after: Tue 22 Oct 2024 06:06:43 +0000
asID: 1239
IP address blocks: 102.129.250.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2163 (0x873)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 22 06:06:43 2022 GMT
Not After : Oct 22 06:06:43 2024 GMT
Subject: CN=63538879-628e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1b:be:20:ac:fa:e0:84:eb:b9:9e:be:58:89:
ee:7a:2a:13:20:52:c2:65:50:ee:17:ba:37:ef:32:
da:b9:d4:5f:0e:2b:65:27:51:be:3c:8c:86:80:66:
fc:13:6c:08:83:21:d5:a5:8b:fb:81:80:d1:ad:a6:
3d:89:d5:d8:ab:e9:ab:54:94:dd:38:37:88:ad:a4:
cf:f7:ab:90:ee:95:07:ba:57:93:70:5d:ce:bf:34:
a8:b2:ee:5f:74:5d:a8:46:d9:d1:ca:83:06:22:51:
a7:0b:7a:71:07:f4:3b:d5:b9:5f:90:b8:07:7e:3c:
14:0c:60:6b:b2:80:f5:48:00:92:5c:f5:4c:63:d9:
6c:a4:f7:6d:b3:5e:23:67:2f:c5:4a:35:86:79:ab:
a2:43:bc:0b:88:1b:a6:fd:9d:47:3a:71:c9:4b:2f:
fd:99:a0:a6:51:23:f2:0c:62:31:fd:c8:08:dc:58:
6b:c6:14:f6:4a:08:a6:b6:ae:d5:0a:33:cc:bd:64:
63:72:02:f3:a3:33:3e:25:19:a9:0d:1c:4a:e0:d8:
63:f6:b0:b0:c6:e9:25:35:03:69:b0:95:bb:1b:b8:
ba:0c:cf:41:6e:8b:64:60:75:a5:ad:1d:75:99:7f:
6f:e9:19:cb:38:c4:86:bf:b8:ca:33:ef:f9:6c:a7:
7e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:30:50:21:3F:DB:00:1E:43:12:58:96:B3:AB:BC:D4:7C:59:B6:6C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B6FC9BC851CF11EDBCE3C9E0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.250.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:b7:f6:9f:1c:1b:5f:d5:e0:de:26:a3:77:82:dc:b9:88:d7:
aa:f4:cc:cd:c2:c0:ad:75:55:09:e4:73:47:8d:89:5e:94:09:
59:c0:02:8d:6c:f6:23:da:a0:e9:75:c2:94:be:56:5f:bf:b5:
5d:d6:cf:5b:ce:7c:ed:13:c5:34:c8:5f:34:9d:81:36:50:d4:
ad:53:dc:6e:79:79:70:7f:dc:08:a0:c6:75:b5:b9:16:71:23:
b6:cb:97:d3:8e:f9:65:7a:7f:ae:fa:ae:8f:44:af:8a:4a:a9:
85:91:c9:05:1a:88:0d:88:62:0d:c2:c6:bf:05:ad:0f:a6:8f:
4f:73:7c:74:0c:a1:a1:ab:06:99:ba:5d:db:36:26:e0:37:c1:
da:62:64:90:d6:1b:83:60:27:90:e5:50:2f:0f:34:75:8a:bb:
75:ee:02:f5:cc:e1:c4:98:29:59:44:d3:e1:80:44:b1:1f:18:
53:9b:ae:c2:54:ba:b6:f3:f5:9e:b9:74:99:8f:19:ad:55:6e:
0d:3b:b5:a3:bc:4f:3d:22:08:8f:9e:74:b1:3a:fa:60:c0:aa:
f5:7b:d8:bb:3c:de:62:ee:24:f5:33:bc:f9:d0:fd:05:56:6b:
eb:1d:bb:15:9a:80:30:49:59:be:72:e8:2d:80:7d:f1:f9:a5:
95:77:cc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org