Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BDA9D6429B4411EEA0FF7F0ED25BE465.roa
File: BDA9D6429B4411EEA0FF7F0ED25BE465.roa (raw, json)
Hash identifier: cXxJvjp0BKxGxLrkbbLIxp4vLqvz3A7OTjkNrmdGy+Y=
Subject key identifier: CC:30:BD:64:26:17:24:E8:18:24:17:AB:CB:F3:3B:92:DD:48:8A:F5
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0E8F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BDA9D6429B4411EEA0FF7F0ED25BE465.roa
Signing time: Fri 15 Dec 2023 12:23:24 +0000
ROA not before: Fri 15 Dec 2023 12:23:20 +0000
ROA not after: Tue 31 Dec 2024 12:23:20 +0000
asID: 834
IP address blocks: 102.129.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3727 (0xe8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 15 12:23:20 2023 GMT
Not After : Dec 31 12:23:20 2024 GMT
Subject: CN=657c453c-350a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0a:d1:be:b1:59:de:a8:ca:78:ff:9f:78:32:
a3:da:fd:66:f5:ae:e2:a9:11:8e:d0:d5:ee:f3:03:
ad:f5:bf:3a:7d:b9:20:01:e1:3c:0b:0c:7a:57:1b:
bf:7d:f8:00:40:a3:91:46:22:30:db:d1:15:0b:92:
fa:fc:92:dc:81:ca:af:4a:be:0a:26:89:07:b0:ee:
75:70:a0:1a:66:89:e3:ff:b9:a3:01:c2:d3:24:3d:
c5:25:eb:4f:a3:a6:ae:a9:25:6b:19:86:eb:26:07:
da:57:0b:a8:85:6f:d8:c9:dd:c5:ed:56:8d:89:9a:
f7:60:af:c0:6e:8b:11:bd:e0:01:91:ac:4b:09:e3:
69:ec:f2:e1:75:51:10:8f:59:2f:40:78:ab:f4:e6:
7b:9e:9e:68:e1:60:56:c7:0a:eb:0e:3d:2f:c0:ef:
05:aa:4a:62:fe:e9:79:3e:7b:7a:1d:67:61:82:97:
e6:a3:91:2d:a2:5e:4f:e5:be:f6:57:b9:20:63:17:
01:fe:e5:a5:ff:3e:77:04:99:d3:4a:22:fb:5c:7c:
19:06:82:34:44:cc:58:b5:e8:e9:f9:2c:de:ea:ca:
5b:92:27:71:fb:77:1d:48:43:4c:41:1b:fb:fd:95:
9b:c9:63:dd:0f:2a:9c:81:3a:e5:26:8d:b1:ee:ef:
13:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:30:BD:64:26:17:24:E8:18:24:17:AB:CB:F3:3B:92:DD:48:8A:F5
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BDA9D6429B4411EEA0FF7F0ED25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.216.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:bc:a2:c5:53:68:c4:55:7c:8d:4d:cf:ef:75:e2:43:a3:7b:
91:d5:2f:f1:42:c3:b5:5a:57:f9:e7:08:42:3b:e2:85:3a:57:
40:e5:91:57:51:3c:cf:b1:3b:5b:26:51:57:9b:f8:fc:b3:96:
60:1b:21:ff:09:fd:a2:c2:50:50:78:87:d3:97:52:16:ad:4d:
79:c7:6e:7b:26:4d:a3:58:a8:2d:04:cf:ff:9e:69:c9:73:16:
c5:8a:ea:3e:8e:3e:a2:48:38:e3:a1:d5:99:3c:d3:0d:83:e0:
da:be:7b:e7:6e:ca:36:08:14:43:d3:3d:e9:ae:cb:ef:84:04:
48:24:d2:2f:33:b7:6f:e5:a1:7d:c3:d4:30:a7:c9:a9:b5:4b:
73:14:51:fe:96:2c:36:f7:3d:17:a4:13:5d:07:06:14:1b:b9:
d3:ac:48:f6:bf:78:bf:c1:27:1c:11:21:4a:41:73:6b:26:5e:
86:ef:f6:b8:7a:1f:bd:09:37:9d:b9:af:b7:2e:19:a3:fe:e9:
b2:b4:61:08:06:04:13:ea:dc:e7:68:50:14:da:e9:bb:08:03:
58:50:75:eb:5c:a8:f7:d1:d1:16:be:b8:73:cc:06:15:a1:4e:
07:0f:2f:78:d1:26:03:9c:6b:64:73:9d:d6:cf:6a:52:f6:24:
a8:56:49:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 17 11:36:37 2023 by rpki-client on console-fra.rpki-client.org