Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C93C7ED44A2211EDA2B855EEF1222468.roa
File: C93C7ED44A2211EDA2B855EEF1222468.roa (raw, json)
Hash identifier: ZegYOS+wSNQjpRhzg67ZaWNy7l/v5eSyzJ/0ULYo+R8=
Subject key identifier: C4:47:3C:00:1A:52:F9:38:05:73:9A:A5:F8:E5:CD:EA:D8:02:BC:12
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0850
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C93C7ED44A2211EDA2B855EEF1222468.roa
Signing time: Wed 12 Oct 2022 11:41:18 +0000
ROA not before: Wed 12 Oct 2022 11:41:13 +0000
ROA not after: Thu 12 Oct 2023 11:41:13 +0000
asID: 61317
IP address blocks: 102.129.150.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2128 (0x850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 12 11:41:13 2022 GMT
Not After : Oct 12 11:41:13 2023 GMT
Subject: CN=6346a7de-f0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f7:07:51:a6:7c:47:c5:c1:38:54:ab:c9:5b:
7a:f5:59:8e:50:6a:d0:a3:45:21:c5:9f:03:23:f2:
08:78:37:a6:ca:f7:fb:2c:db:32:16:90:65:5d:57:
92:06:f6:99:3f:ee:c6:4b:01:78:52:1d:d2:da:0e:
93:cc:6f:8b:42:fd:a0:13:16:06:21:25:c3:a3:fb:
de:71:90:5f:6e:77:c5:44:6f:c8:ed:96:63:dc:86:
c1:5a:26:4a:fc:ea:a7:0f:db:ae:3e:84:e7:ab:a2:
f4:50:48:f3:0e:4b:f2:42:00:75:f5:cc:57:9f:96:
3b:8d:6b:73:50:ad:37:ed:7a:b1:4d:9f:a5:c0:49:
e7:31:31:62:27:96:78:30:0a:37:63:a5:7e:56:e5:
e0:35:68:89:d4:8d:b9:d6:d7:eb:51:6c:ca:70:9b:
3a:52:7f:88:9d:d3:df:b3:0e:99:de:ce:c7:1e:b7:
64:0d:3d:24:4d:6b:50:5d:96:04:60:fb:06:b2:d7:
06:1e:77:42:2e:a8:ef:08:fc:dc:e7:84:67:2a:d5:
99:24:ac:88:ea:d9:5e:32:45:4e:c7:1b:c0:7b:52:
f8:f1:d1:15:84:17:cd:b6:49:52:99:3d:20:b8:ea:
27:5d:72:bb:fd:0d:bc:be:d8:67:1e:45:c5:35:e0:
ec:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:47:3C:00:1A:52:F9:38:05:73:9A:A5:F8:E5:CD:EA:D8:02:BC:12
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C93C7ED44A2211EDA2B855EEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.150.0/24
Signature Algorithm: sha256WithRSAEncryption
17:dd:31:be:e0:f1:50:6f:05:72:91:e1:23:47:be:e2:cd:04:
4c:0d:4f:af:89:10:f9:9a:57:52:e7:4e:60:e0:96:b9:8f:79:
e9:cf:af:7e:72:ce:c4:64:ad:e8:e5:08:b2:3e:f5:a4:4d:1b:
f6:cf:88:9a:9e:85:ef:1e:8c:e6:17:36:20:f8:12:ba:86:c7:
e9:b7:61:b2:10:35:74:6b:38:8f:35:66:1e:f5:af:53:c0:21:
77:a3:c2:1c:ee:be:d1:b6:b9:c4:69:95:b1:08:c9:68:d8:46:
1c:45:cf:6b:dd:02:e3:cb:cc:ed:8a:6b:42:4d:5d:04:7e:8a:
b0:85:59:24:c6:43:1a:f4:d2:b8:1d:52:a7:01:5e:85:02:c0:
9b:67:da:44:39:d7:77:c2:2f:5d:3a:51:79:9a:42:cf:e2:a5:
e8:1b:80:c5:0f:53:54:af:64:d2:c3:cd:77:34:2c:b6:50:35:
24:e7:cb:db:5c:03:30:9f:ad:38:31:d6:0b:f9:96:c7:cf:61:
80:6a:40:28:25:7d:ce:33:5e:81:f9:37:dc:0a:87:f5:eb:88:
8a:67:65:a6:f2:7c:27:7f:21:56:53:22:15:82:5a:20:bf:34:
55:c5:c9:5f:4c:c7:e6:bc:4e:1c:eb:fc:4b:8f:e0:18:04:4c:
9e:60:af:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org