Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B9FD2A92A27211EDBD83F386F1222468.roa
File: B9FD2A92A27211EDBD83F386F1222468.roa (raw, json)
Hash identifier: L77mFmlW1UpRg+BBrVaTYCXLvGO31Q0YM5TaXeFx8og=
Subject key identifier: 5F:53:CD:49:CD:99:57:78:D5:21:5B:A9:91:D1:86:1A:16:4B:D4:A7
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 09FD
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B9FD2A92A27211EDBD83F386F1222468.roa
Signing time: Wed 01 Feb 2023 20:55:15 +0000
ROA not before: Wed 01 Feb 2023 20:55:08 +0000
ROA not after: Thu 01 Feb 2024 20:55:08 +0000
asID: 200482
IP address blocks: 102.129.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2557 (0x9fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 1 20:55:08 2023 GMT
Not After : Feb 1 20:55:08 2024 GMT
Subject: CN=63dad1b3-ef1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:50:a3:d0:9a:2b:4f:5c:b1:57:16:c8:7b:d4:
2f:f1:2b:56:f7:41:19:c6:db:b9:1d:94:9e:6f:14:
39:59:0f:1a:f6:a6:eb:89:b3:5a:5c:d5:4e:f6:75:
7c:9a:8e:f2:d4:44:81:6a:bc:78:81:9b:4a:e1:ff:
78:7c:f3:52:a0:6b:68:6a:ca:d0:55:73:25:a7:b0:
78:25:c6:f0:43:77:a3:41:50:e8:dc:3a:7a:27:e1:
6f:ad:19:51:ac:5b:0c:45:44:00:55:45:61:3c:9a:
41:7e:3c:14:8d:54:54:da:4e:cf:40:41:aa:cd:07:
ae:bd:1f:11:4a:48:b3:ce:16:e4:ca:ff:13:83:07:
08:f4:97:fd:bf:66:5e:78:3f:e9:36:89:20:e2:97:
64:a0:7e:b5:1e:46:24:01:e9:ff:3a:c1:ad:a8:e7:
26:1b:b9:9f:d3:52:c9:cb:6a:a3:7d:10:a8:90:03:
e5:b3:b0:f0:76:8b:8f:80:59:34:d4:93:9b:f5:6c:
f4:a1:a9:7b:86:87:b3:2c:4f:e8:69:d6:c9:c1:10:
8e:8a:46:0c:07:80:95:74:02:00:b5:83:d5:99:00:
a7:3a:a5:0b:b5:6d:8a:19:0f:ca:d8:c4:77:6e:8f:
46:12:9f:f0:f9:ef:a4:81:ba:e0:f7:7e:15:8c:1d:
a1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:53:CD:49:CD:99:57:78:D5:21:5B:A9:91:D1:86:1A:16:4B:D4:A7
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B9FD2A92A27211EDBD83F386F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.203.0/24
Signature Algorithm: sha256WithRSAEncryption
81:49:05:0c:ba:ba:40:a6:fa:a0:fa:64:1f:18:c7:5b:d4:3b:
45:52:63:4b:ce:2f:8d:28:e4:6a:9e:d1:73:38:08:52:6b:bb:
38:b7:8b:60:b3:cd:fc:9c:f9:b4:d0:e4:86:8b:90:db:d4:49:
9e:40:fa:36:8e:22:6d:51:72:0b:f5:cc:cb:28:14:d4:12:19:
8a:d4:5a:ad:7c:70:b1:09:4d:8a:bd:20:40:d4:60:e5:6f:fa:
34:78:e2:de:ae:ce:2f:9c:56:65:dd:11:65:5f:8a:39:96:15:
34:34:8c:10:fc:02:a5:b6:20:52:ee:40:e5:ef:53:0f:51:8a:
21:f4:d4:37:97:34:db:ae:50:06:d7:dd:97:aa:db:07:7e:8a:
37:a5:8e:41:20:f9:5e:c5:8c:13:f4:18:94:39:80:28:c0:37:
f2:e5:3f:ea:2d:7d:3b:49:5e:93:48:5f:8d:c3:dc:12:32:b0:
0f:a4:16:22:14:36:f3:40:ba:0e:a1:2c:73:71:34:60:73:0b:
87:be:95:ce:0c:73:16:86:fb:0e:44:28:c8:e7:c9:16:9e:b9:
52:2c:b4:cf:ba:fc:b5:60:63:98:85:74:85:4a:93:62:c5:f6:
66:9e:4c:bb:3c:be:7a:41:8a:99:09:cc:0b:f3:65:49:69:9b:
48:5d:a0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org