Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B9705DEC7A1811EDB47961AEF1222468.roa
File: B9705DEC7A1811EDB47961AEF1222468.roa (raw, json)
Hash identifier: WxJKbwU3A7ZOHpFXTHyG+QBWaIbpJGjLJHBHci9AM28=
Subject key identifier: F4:3E:5E:30:84:D8:AC:F2:E2:FD:85:B4:9B:E6:46:91:65:64:1F:C1
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0950
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B9705DEC7A1811EDB47961AEF1222468.roa
Signing time: Mon 12 Dec 2022 12:30:13 +0000
ROA not before: Mon 12 Dec 2022 12:30:09 +0000
ROA not after: Thu 12 Dec 2024 12:30:09 +0000
asID: 40676
IP address blocks: 102.129.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2384 (0x950)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 12 12:30:09 2022 GMT
Not After : Dec 12 12:30:09 2024 GMT
Subject: CN=63971ed5-2e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d5:92:ee:86:f0:67:74:92:b7:5b:6b:00:27:
36:b9:f1:a5:bc:c8:a7:e6:64:0e:e9:c5:29:a2:33:
ff:37:ba:94:bf:f8:65:eb:13:9b:dd:5e:1f:bd:f8:
75:6d:1d:0c:6f:2d:74:07:16:54:e4:6d:24:a8:f8:
e2:a7:c4:d1:44:08:b0:e0:59:42:73:8b:e0:22:d5:
25:28:d1:bb:6c:f0:23:ff:b9:21:ba:91:c6:33:4e:
0f:d9:92:51:7e:d7:24:0c:79:4d:40:18:0d:a0:0e:
5b:d5:5f:4a:21:b4:49:4f:2b:48:47:09:d3:f7:30:
f2:2b:5f:41:29:c5:ab:e1:81:d7:cd:e5:2f:2d:e2:
74:80:ce:83:2a:07:7b:c3:a5:c2:0a:2d:de:ea:bf:
84:5f:7f:fb:ec:7d:3a:70:ab:ed:87:77:83:e6:bf:
eb:74:23:ed:34:5f:38:0e:84:42:7b:26:30:7a:20:
23:96:3c:21:61:74:07:cd:1e:2d:89:41:28:54:68:
87:1e:15:ef:a9:be:9a:11:9e:67:90:e3:5a:e2:19:
88:df:14:20:a8:9c:ee:ed:ec:da:33:49:c9:b0:d7:
a8:1d:b1:e5:6c:c4:c4:e9:9d:d3:d8:f6:6b:5d:07:
27:70:75:be:f4:b8:1f:d8:96:9b:3a:ba:c3:73:ce:
63:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3E:5E:30:84:D8:AC:F2:E2:FD:85:B4:9B:E6:46:91:65:64:1F:C1
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B9705DEC7A1811EDB47961AEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.208.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:ba:42:5a:97:2d:9c:22:b8:bb:0e:a8:67:97:4f:11:79:1a:
47:a5:ac:cf:a4:44:3a:eb:3e:51:1f:27:18:9c:75:28:f0:d8:
b3:84:df:bf:e3:11:5f:cc:f1:b6:45:c1:bc:05:72:6b:1b:a3:
f6:e5:15:31:fb:45:00:79:c4:76:aa:00:a1:e2:ab:12:2e:97:
10:0e:93:ec:42:84:ab:3a:7f:09:29:ed:c5:c4:8d:ad:46:f5:
c8:38:d1:91:22:36:34:f0:00:83:0a:7e:06:77:ba:4a:dc:8d:
90:f5:2d:cc:56:58:6c:64:ab:b2:ba:43:94:9e:a2:1c:eb:74:
b8:f7:5a:23:96:8b:38:98:18:26:d2:2f:42:7b:f5:af:0f:37:
3c:46:de:71:42:91:ab:43:f6:cc:03:00:8b:47:9b:7c:bf:dc:
d1:b3:6f:d4:d3:1b:66:f5:31:f1:a2:17:aa:44:e5:2e:a9:87:
13:0d:58:56:3b:33:95:2e:1e:e1:93:d8:a1:d0:48:e0:6d:01:
51:81:75:4b:7a:24:f4:43:4f:d8:20:53:5b:f9:82:c3:f7:2d:
33:f6:b5:b5:0c:c8:bb:62:b5:1a:7a:a4:53:25:91:90:e8:a2:
35:ee:23:fc:c0:f0:4f:f7:7d:3f:e6:7f:8f:f1:a7:e4:94:81:
be:5e:9f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org