Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C48FA8E42E8D11ED8F513FE9F1222468.roa
File: C48FA8E42E8D11ED8F513FE9F1222468.roa (raw, json)
Hash identifier: 4VYK0b0NEejSXe/5kieL7dU1iK5Mb6aA2PwuCeQVImk=
Subject key identifier: A5:81:C9:9A:1B:D8:58:EA:63:2C:4B:6C:4F:37:BC:B5:21:0D:07:A5
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 07E5
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C48FA8E42E8D11ED8F513FE9F1222468.roa
Signing time: Wed 07 Sep 2022 09:16:34 +0000
ROA not before: Wed 07 Sep 2022 09:16:29 +0000
ROA not after: Thu 05 Sep 2024 09:16:29 +0000
asID: 43260
IP address blocks: 102.129.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2021 (0x7e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 7 09:16:29 2022 GMT
Not After : Sep 5 09:16:29 2024 GMT
Subject: CN=63186172-fc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:61:d7:02:95:97:75:2a:4f:b7:dd:0b:3a:3f:
12:25:17:10:1f:f8:ee:63:69:b7:5d:7c:6e:11:dd:
fb:bf:e2:2b:cf:fb:6a:1c:e2:bb:34:7c:85:d6:eb:
71:34:4c:b1:40:f0:10:c9:7d:ae:55:9a:28:98:25:
c3:54:56:1f:86:35:ea:56:40:0f:35:a2:f7:df:4c:
1a:6b:39:c6:39:1e:6b:de:28:64:1d:a2:29:75:ae:
f7:42:a9:38:9d:f9:e1:41:77:28:a9:bb:38:79:18:
15:94:7d:42:3d:c8:59:2c:53:b2:38:93:3a:4f:21:
d8:56:13:14:31:dd:36:a5:80:e2:53:ce:40:4b:4b:
37:79:8b:e5:56:7a:fc:ba:0b:27:2c:48:48:ac:89:
51:61:30:dd:bf:bf:e8:b3:4f:e0:94:d6:5d:b7:4a:
97:87:cc:91:f6:c2:2a:ac:cd:cc:14:90:92:06:e2:
ca:41:07:27:68:27:5d:9a:11:84:4b:1c:66:f7:95:
7a:8e:8f:4a:29:97:5b:14:aa:92:b9:24:94:b6:d7:
f2:e7:fe:b7:e6:dc:53:65:e0:c5:6b:ec:a4:73:5b:
65:a0:a2:5e:3a:8a:85:e1:f1:7f:06:fc:5b:80:29:
a3:0e:e1:df:3b:5e:af:fe:48:9a:e8:2a:90:67:87:
58:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:81:C9:9A:1B:D8:58:EA:63:2C:4B:6C:4F:37:BC:B5:21:0D:07:A5
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C48FA8E42E8D11ED8F513FE9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.208.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:3c:08:53:fd:2f:d1:46:8e:fd:a0:63:ff:55:b8:7c:a8:2a:
ee:53:b6:25:f4:31:86:14:e7:b8:0f:9c:57:c0:12:b7:d8:c6:
d8:ae:e9:29:d2:de:a8:10:f1:f9:96:4b:19:7d:f6:ee:f3:9b:
e3:4f:6e:2f:6a:07:7c:5c:09:2f:16:8d:f1:86:68:2d:7a:52:
2a:e5:ea:7e:54:6c:3e:08:e5:da:29:87:46:3b:1b:68:9f:a0:
df:d7:11:16:00:8e:9f:3e:a8:88:f3:44:59:9f:b5:4a:f0:de:
a0:0d:51:66:20:88:ee:a4:57:f8:82:f5:55:18:77:7f:1d:3c:
c8:c3:f7:b5:d7:4d:3d:44:25:73:2b:ef:b4:21:f2:a9:32:52:
46:9c:ca:11:b8:5b:9b:56:4c:75:ab:0e:af:b3:e7:a0:06:f8:
1f:37:88:cb:12:ba:17:14:8d:28:e7:3f:05:fe:94:59:59:eb:
4a:0e:bc:6e:a5:fa:7b:cb:94:7a:f3:85:d2:a8:8b:74:88:9d:
8c:28:ad:04:ec:65:e9:71:ca:b5:14:ab:17:99:ea:dc:d2:96:
ea:be:bf:c1:8f:fb:3d:31:47:a7:7d:dd:0c:f8:f0:22:e8:76:
26:db:1f:1b:04:32:e3:84:89:8e:35:c4:f0:b6:fd:b0:53:e5:
22:03:ed:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org