Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B77D3B78F48311EDAC8D782D4AD9E6FC.roa
File: B77D3B78F48311EDAC8D782D4AD9E6FC.roa (raw, json)
Hash identifier: 124+gCc+yN4Xv9mlob6aqX/pPRTQpPwnFhRONjz/gjw=
Subject key identifier: B5:D9:BE:20:4D:AA:70:27:97:09:83:D4:A9:A6:24:A7:17:12:7E:2F
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0B7A
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B77D3B78F48311EDAC8D782D4AD9E6FC.roa
Signing time: Wed 17 May 2023 07:23:27 +0000
ROA not before: Wed 17 May 2023 07:23:23 +0000
ROA not after: Fri 16 May 2025 07:23:23 +0000
asID: 834
IP address blocks: 102.129.245.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2938 (0xb7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 17 07:23:23 2023 GMT
Not After : May 16 07:23:23 2025 GMT
Subject: CN=646480ef-95c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ff:ff:b9:36:92:13:c6:5c:6b:fb:23:20:bb:
e1:c4:36:b3:1d:d6:ca:4e:74:a9:28:cb:14:a9:82:
18:75:7d:60:e7:70:08:80:c4:21:47:3c:fc:99:ac:
fd:87:78:f8:a7:d7:42:c6:d8:6d:4c:03:62:47:4b:
bb:83:4d:48:e9:41:21:ac:09:f7:97:08:cb:b9:40:
b2:39:e6:30:13:e5:f3:0c:d7:4f:64:02:17:67:95:
7d:be:82:a1:b8:c4:7f:9a:b1:17:03:18:c5:a9:dd:
b1:9a:94:f4:75:c6:0d:98:97:eb:a2:4f:80:3f:e8:
b7:d5:ad:9f:d7:9c:ac:b4:f3:08:7d:2c:b5:83:a4:
b5:f9:4f:d9:9d:24:2c:20:70:f0:7e:6c:b2:6e:48:
d3:9c:c4:62:e3:02:01:4e:3d:2d:21:fc:a9:61:2e:
2c:ba:7f:55:48:b5:ab:45:fc:c0:37:4f:6d:d6:d9:
e8:c1:ee:4d:3e:03:00:1e:74:05:54:a7:3c:f6:77:
72:ba:83:cb:fc:91:fd:e0:20:52:35:bf:33:44:9e:
c2:07:48:7c:0b:53:70:ff:fb:18:42:20:ce:b1:8d:
cd:8f:57:a7:5a:f3:46:b9:28:d3:ce:9c:5a:4e:2e:
32:f2:11:90:c1:44:65:5e:06:7c:cc:47:11:b3:35:
4d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D9:BE:20:4D:AA:70:27:97:09:83:D4:A9:A6:24:A7:17:12:7E:2F
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B77D3B78F48311EDAC8D782D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.245.0/24
Signature Algorithm: sha256WithRSAEncryption
17:93:99:d2:2b:2b:f4:e7:7d:e1:bc:7e:97:13:6a:98:c2:29:
e6:d2:ea:63:d6:f9:35:87:cd:88:2f:10:7b:07:be:a5:e8:ab:
63:97:38:83:0f:13:2f:ff:ce:c9:69:42:9f:ea:2b:fb:e8:4f:
36:cf:93:e4:bc:84:6d:d9:ad:49:e7:5b:7c:f6:14:ad:4e:31:
02:91:99:f8:e7:14:40:32:29:2d:f2:31:b0:88:00:c3:49:76:
39:91:3c:4b:ae:3a:8e:51:09:65:2d:36:40:80:e2:97:d2:a7:
99:0f:ce:35:c4:a7:e5:c7:7a:0d:3f:58:3b:e0:7a:ac:d4:bd:
11:d5:d3:73:37:70:9a:4d:a1:14:c4:2f:13:09:43:0b:d1:05:
9d:15:c8:c9:b5:43:13:cb:3f:2d:83:6a:96:be:dd:a7:01:62:
df:1c:0c:e9:cd:5a:5e:e2:d8:6d:07:f6:07:e4:7e:8b:a0:c7:
a7:20:8d:ae:c9:f7:c7:21:60:0b:a3:59:f5:28:8e:31:fd:6e:
cf:72:e2:f8:d0:a8:9a:96:79:7d:4a:b4:2d:a0:26:18:62:28:
4a:3e:a7:42:32:65:78:bd:a3:08:a7:ce:dc:dc:c7:83:70:f3:
0d:3f:c0:da:9f:81:c2:12:1d:b4:48:20:58:19:47:f5:c3:97:
31:88:e6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org