Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C435F7A6634111EE9F5C70434AD9E6FC.roa
File: C435F7A6634111EE9F5C70434AD9E6FC.roa (raw, json)
Hash identifier: HpGE2Ze3VE+mXF98MKkxHCR+exN0NdYkevpiavASn8A=
Subject key identifier: 54:5B:87:0C:EB:CC:94:7A:16:99:AA:6C:AA:9F:3D:70:6D:FC:45:D8
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0DA7
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C435F7A6634111EE9F5C70434AD9E6FC.roa
Signing time: Thu 05 Oct 2023 05:41:01 +0000
ROA not before: Thu 05 Oct 2023 05:40:58 +0000
ROA not after: Sun 05 Oct 2025 05:40:58 +0000
asID: 212238
IP address blocks: 102.129.206.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3495 (0xda7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 5 05:40:58 2023 GMT
Not After : Oct 5 05:40:58 2025 GMT
Subject: CN=651e4c6d-9312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a7:e1:5f:f7:e9:c6:5f:d4:53:9c:3d:54:ff:
25:89:02:c5:b6:26:97:12:6e:9a:fb:6a:e3:b8:b1:
47:84:20:71:52:e7:76:64:8e:c5:40:5d:f7:94:a8:
5d:06:ff:ad:18:05:8a:df:d4:2a:69:7a:f7:cb:fc:
98:42:da:2c:ea:62:25:9a:e7:53:77:24:23:02:d2:
20:8d:48:75:4b:74:2c:c1:be:31:57:09:c0:8c:8f:
f6:51:40:9e:dd:56:de:5f:17:a9:26:43:88:4b:1b:
5c:e6:9e:57:c6:11:03:5d:5f:21:33:d9:07:79:30:
f5:4b:d6:b1:2b:18:1b:92:66:cd:ba:01:84:97:ab:
03:ef:e3:fd:e6:55:c2:f5:cb:15:60:d1:4c:05:ee:
d0:2f:77:99:ca:d4:88:4f:77:e1:90:41:5d:a0:84:
b2:de:96:9b:1c:4f:c3:e6:eb:24:04:5c:0b:54:d8:
31:b1:ca:21:5c:05:25:96:12:5f:83:2e:58:a6:6e:
88:d9:28:b8:fa:8b:07:b9:8d:02:d9:49:7e:07:f5:
c9:32:07:1d:08:7d:b9:48:fc:70:52:ad:f4:6b:95:
41:e8:57:ed:c1:1f:a8:3b:44:29:4e:7f:a9:b1:79:
48:cf:6e:15:81:11:81:4f:b2:31:31:62:4c:fd:fa:
ea:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5B:87:0C:EB:CC:94:7A:16:99:AA:6C:AA:9F:3D:70:6D:FC:45:D8
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C435F7A6634111EE9F5C70434AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.206.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ba:f2:32:05:e0:61:69:0d:55:86:a2:f0:0e:fa:5e:5f:39:
a1:9a:f4:18:76:4d:75:8e:63:d2:a2:25:b8:1a:e6:d2:f8:7f:
55:7c:4e:f5:9c:58:1d:e5:7c:34:27:8d:a7:94:c6:80:79:dd:
9b:7c:85:b6:aa:94:f2:b8:34:22:90:13:d4:f4:1d:8c:d3:68:
1a:bd:d1:5d:da:31:06:62:42:e6:55:52:2c:d8:3e:57:94:32:
79:2f:cf:b2:37:16:75:ba:c3:56:90:9c:b4:90:78:b5:7a:08:
3b:d4:08:e2:ae:12:e1:09:87:e7:32:c5:d3:6b:ab:bb:82:1e:
95:f7:bf:53:90:62:88:88:c5:03:74:45:fb:9a:62:3f:b8:46:
d1:4c:ef:08:c4:c3:d7:29:eb:b4:e0:4e:df:ab:b7:b1:b2:bb:
a2:0a:aa:ed:5f:e3:c9:69:02:b7:74:66:cd:29:1c:75:e9:e6:
3b:71:59:98:0c:61:e6:f6:55:cf:52:cb:ac:6d:98:6f:79:e4:
c0:72:b9:eb:ac:f7:b0:0d:c9:65:43:85:f4:3a:ab:3b:3d:95:
32:38:d1:2d:7b:a4:b9:87:01:04:68:27:cb:b6:6a:1b:e4:d4:
8b:5c:0a:1b:94:d7:89:78:a7:e5:97:33:26:fc:60:64:00:6c:
73:b3:86:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 5 10:53:24 2023 by rpki-client on console-ams.rpki-client.org