Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C130F936352211EE95460D804AD9E6FC.roa
File: C130F936352211EE95460D804AD9E6FC.roa (raw, json)
Hash identifier: +9Vc2DAQ4XptgLMvObuJcEThlBMSBoBfUCO1J8XsYOk=
Subject key identifier: 2A:B0:FA:A2:EB:B3:BC:58:F1:96:24:A5:B0:D2:53:27:03:9A:06:64
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0CB2
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C130F936352211EE95460D804AD9E6FC.roa
Signing time: Mon 07 Aug 2023 13:03:08 +0000
ROA not before: Mon 07 Aug 2023 13:03:05 +0000
ROA not after: Tue 13 Aug 2024 13:03:05 +0000
asID: 834
IP address blocks: 102.129.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3250 (0xcb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 7 13:03:05 2023 GMT
Not After : Aug 13 13:03:05 2024 GMT
Subject: CN=64d0eb8c-fe98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ae:63:26:09:1e:8c:6f:be:1b:f0:be:a5:18:
7e:1f:e5:64:52:c7:94:86:13:5e:b7:5f:db:dc:66:
03:89:aa:2d:63:26:ce:e9:b8:7a:f5:da:72:2f:df:
2c:61:45:54:cd:3e:c7:34:f5:61:bf:3a:f0:be:a2:
b0:39:16:85:53:50:48:eb:c1:0e:c5:eb:55:72:61:
79:92:f1:6c:d6:e4:14:61:f0:09:e2:ab:94:08:51:
38:31:be:45:38:b2:07:08:b0:e3:e9:5c:e8:7d:3d:
de:5d:5c:64:8d:fc:0c:a8:d9:4a:17:82:06:19:00:
f5:d8:64:e9:fd:3d:67:b6:44:9e:78:5c:03:39:d5:
06:90:72:e7:5c:63:17:84:c0:49:b3:bf:8d:91:31:
19:44:d0:88:d3:e0:ef:b7:2c:ce:14:10:47:0a:0a:
b3:9e:31:f2:30:f9:13:e4:26:cd:42:cd:f1:e3:c1:
28:7a:25:21:51:4d:a8:2d:b5:66:d1:ec:11:0d:f4:
a2:e1:20:2c:fd:78:db:03:9c:0c:a5:18:00:fc:1b:
66:18:ab:1c:6b:d6:14:87:a4:d6:01:17:40:21:5d:
26:e9:0a:db:a0:0e:80:55:f9:a3:ae:39:98:0d:cc:
0e:5f:44:c1:d6:18:b3:53:c1:0b:96:57:b0:d0:d6:
64:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B0:FA:A2:EB:B3:BC:58:F1:96:24:A5:B0:D2:53:27:03:9A:06:64
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C130F936352211EE95460D804AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.167.0/24
Signature Algorithm: sha256WithRSAEncryption
11:b7:c6:f5:d9:ae:c0:a1:30:03:dd:f4:8d:d6:ee:a1:97:ba:
a3:48:67:22:95:81:d2:d9:ee:25:e1:30:ab:ee:2d:e6:47:7d:
85:08:a0:0e:d1:52:43:e2:21:46:29:67:90:e7:c2:f7:ed:86:
ea:a2:3a:8e:8c:cf:b2:96:61:94:64:76:a9:41:82:74:aa:a1:
2b:0d:d5:a5:34:5d:52:59:47:75:d1:28:9a:36:62:c7:5a:e4:
c2:5a:76:30:a2:f0:c8:e2:79:7e:ed:81:e4:69:42:9e:26:27:
13:51:3c:21:50:d6:d6:cc:20:89:0d:03:10:0e:dd:4a:f9:93:
38:7e:eb:1b:47:9f:8b:86:15:35:89:ed:ac:99:d3:0f:c7:21:
61:87:c2:b1:19:ff:64:43:57:6e:d2:d9:ea:3a:4e:ef:be:b7:
01:32:0f:57:e5:dd:e5:b5:41:45:f7:93:26:3b:1f:5c:fd:8b:
21:5c:15:83:38:59:3f:60:0f:ba:aa:d7:f8:0a:a8:ad:9c:a4:
fe:4a:6a:f4:4a:68:88:b8:ab:46:47:a6:f9:9b:1d:f0:76:ae:
2b:cf:36:73:ae:6c:5b:01:7f:da:5b:e3:8c:f5:5a:96:28:4a:
58:4f:73:d7:59:8b:be:ce:0c:2f:88:7c:f2:53:a7:51:61:6d:
d1:15:f0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 13:01:26 2023 by rpki-client on console-ams.rpki-client.org