Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B9DA97CEB1FA11ED808F30B2F1222468.roa
File: B9DA97CEB1FA11ED808F30B2F1222468.roa (raw, json)
Hash identifier: 9inmJoxhsDd9P9A3MT65V5SBT5OKtCP635DLszv5tmc=
Subject key identifier: 57:84:33:7F:5C:37:7F:AC:9E:F9:82:98:AA:45:72:5E:74:ED:70:13
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A36
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B9DA97CEB1FA11ED808F30B2F1222468.roa
Signing time: Tue 21 Feb 2023 15:16:34 +0000
ROA not before: Tue 21 Feb 2023 15:16:30 +0000
ROA not after: Sat 22 Feb 2025 15:16:30 +0000
asID: 834
IP address blocks: 102.129.140.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2614 (0xa36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 21 15:16:30 2023 GMT
Not After : Feb 22 15:16:30 2025 GMT
Subject: CN=63f4e052-6f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:73:6a:38:29:b5:ed:1b:52:b3:41:dd:28:c1:
8a:07:35:bc:02:27:2b:8b:36:18:c2:3e:36:2e:b6:
37:82:d3:66:11:17:a6:d5:49:ce:db:81:a3:26:a9:
1b:d9:5c:45:53:3f:e5:a6:ff:7c:78:3f:69:c1:d0:
cf:c9:d0:8a:97:9c:cf:40:29:36:e0:c3:d3:e3:04:
34:c6:c4:af:4f:34:78:00:eb:45:23:c3:07:57:da:
92:1d:b8:d4:57:f0:5d:c2:55:ed:1f:ff:68:fc:56:
2e:88:0f:47:10:a1:0a:c2:79:da:76:af:bc:4b:6b:
97:ff:81:7f:3c:eb:23:c0:06:5b:d1:77:f3:4a:f8:
3d:b4:8d:69:24:39:11:5f:d2:f7:25:b4:d4:a7:c0:
cd:6d:19:20:d3:be:70:a0:a1:c8:a1:55:86:ea:b6:
5e:47:91:7d:cd:b1:f6:13:95:64:d3:21:22:7f:36:
64:a8:ec:e0:60:29:e3:6f:08:44:a7:46:f5:0d:cc:
a5:f5:80:59:db:f7:e1:df:87:c8:7c:1c:1c:e9:0d:
b7:1a:26:66:c5:94:93:29:19:cf:94:3a:e9:76:35:
ac:96:c0:07:a6:88:d3:6d:75:7e:78:4e:e2:ff:e3:
b4:7d:a3:3f:47:da:89:d4:6f:8a:05:6f:25:40:ef:
c1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:84:33:7F:5C:37:7F:AC:9E:F9:82:98:AA:45:72:5E:74:ED:70:13
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B9DA97CEB1FA11ED808F30B2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.140.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:6d:ad:1c:15:78:f5:10:56:7c:6d:7f:9e:74:99:f5:d5:0b:
05:b9:62:71:6a:a8:07:64:0b:ed:d0:8f:b0:82:1a:2b:5c:18:
80:1e:7a:82:51:92:00:2b:a7:8d:36:7b:33:ab:6f:7e:a1:a6:
86:b0:f3:0b:df:67:5e:bf:eb:23:c7:5e:6c:ea:69:aa:04:54:
da:85:06:26:8f:3c:1f:cb:00:d7:35:fa:36:3b:23:d5:8f:c8:
5e:e1:58:c5:61:c1:d1:4d:b2:82:df:d0:ab:f1:df:75:22:a5:
23:da:a6:64:95:0d:4a:0f:31:85:a4:2f:38:17:7a:34:b2:7e:
af:48:a8:38:44:de:04:fc:3d:b7:43:af:94:c1:65:d9:17:8c:
ae:f3:8d:e4:9f:b3:b7:b6:6b:ed:0c:8a:be:00:f9:d7:ea:01:
37:65:43:13:20:cf:7d:e2:01:08:33:87:1f:4f:16:d3:a7:f3:
c7:69:49:fd:10:b9:1c:62:b2:9e:db:5e:ca:8f:ba:f8:f0:6f:
76:33:a3:df:22:a5:86:c2:55:f4:04:a5:d3:e9:38:c5:4a:bf:
d0:32:ff:73:bc:d0:aa:99:72:32:35:d6:b4:cd:bc:c9:1f:de:
84:a1:6d:2a:ef:42:30:24:32:d6:12:88:36:31:f0:14:a3:ff:
90:06:2e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org