Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CFB6D9A0F2DC11EC904956E8F1222468.roa
File: CFB6D9A0F2DC11EC904956E8F1222468.roa (raw, json)
Hash identifier: /Ga5qdnmO3s6ZtBRno6c/9a/ofTITuA1PVQLw2PvYqg=
Subject key identifier: 3D:F6:D3:BE:99:7F:8F:27:6E:24:DA:18:9D:DC:0C:84:A7:32:13:6E
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 06AA
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CFB6D9A0F2DC11EC904956E8F1222468.roa
Signing time: Thu 23 Jun 2022 10:11:13 +0000
ROA not before: Thu 23 Jun 2022 10:11:08 +0000
ROA not after: Sun 23 Jun 2024 10:11:08 +0000
asID: 207459
IP address blocks: 102.129.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1706 (0x6aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 23 10:11:08 2022 GMT
Not After : Jun 23 10:11:08 2024 GMT
Subject: CN=62b43c41-be40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1e:cd:a5:74:cf:da:48:c6:c9:24:56:f8:d8:
f1:c8:62:5f:0f:09:ee:43:95:5f:53:30:14:a7:06:
e2:96:95:39:28:08:66:ac:b8:96:5c:dc:50:29:3b:
a4:d1:ec:46:bf:19:21:97:92:ed:15:85:ec:fe:4f:
d1:06:4c:26:a2:34:5e:0c:85:56:73:1f:b9:6b:b1:
13:eb:18:12:a9:ae:fd:83:68:60:f0:d9:34:65:7f:
a6:04:c2:ce:0e:49:7b:b9:44:64:ad:d3:99:85:26:
34:63:7f:99:56:d3:21:f5:41:02:ce:bb:10:15:96:
3b:5b:d3:03:59:e1:7d:70:0c:27:3d:9b:a1:2a:1b:
3d:ec:e0:86:cc:48:bd:d4:0c:73:fc:d8:30:9d:be:
88:62:04:f4:9e:e2:19:9c:14:38:50:36:59:94:2d:
03:18:44:9d:49:4c:1b:90:c9:c7:d4:5a:3a:f4:21:
38:ab:df:d1:89:74:a4:20:db:09:e5:63:2d:bf:34:
51:b5:ce:5c:a0:a5:af:70:a5:dd:90:9e:98:c8:b8:
0d:9b:6f:54:a5:70:0d:e4:cb:52:0a:5e:20:8b:09:
09:f4:ea:a8:90:98:0c:b2:f1:85:f3:0f:a0:aa:97:
d9:a0:8b:50:82:0e:1c:14:96:5a:38:93:39:0f:72:
12:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F6:D3:BE:99:7F:8F:27:6E:24:DA:18:9D:DC:0C:84:A7:32:13:6E
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CFB6D9A0F2DC11EC904956E8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.216.0/24
Signature Algorithm: sha256WithRSAEncryption
94:77:09:35:89:d9:ee:a6:f1:d1:e7:2e:72:6e:bc:b3:c3:c6:
b6:9b:b5:4b:97:49:50:88:62:c0:db:94:99:1c:47:ef:e3:dc:
a4:ba:d3:e8:75:51:00:47:e7:31:20:43:0a:a0:c6:4f:09:29:
60:23:f8:3c:10:cc:f2:d9:21:49:c0:99:01:f4:04:6d:cd:bc:
15:f3:1c:b6:c5:4a:73:15:c3:f0:2a:9b:07:4a:56:7f:9c:8c:
38:2c:a1:7f:8d:b4:9c:06:90:94:a8:2e:ba:96:6c:8b:56:63:
ef:ea:cc:8d:ee:cd:bc:23:fd:91:4d:61:ba:01:40:b9:00:0d:
42:c2:15:fe:42:ba:a0:ec:70:a5:2c:50:a3:c8:c6:70:be:d5:
2a:ff:be:30:49:5d:7b:c1:9d:4f:dc:d4:3b:fe:00:24:4d:ab:
ae:11:81:45:2d:72:01:aa:29:ad:f5:ae:5d:84:db:1b:08:b0:
e4:b0:83:a7:04:e3:5e:33:09:4f:cb:83:b1:db:b5:4a:8f:a2:
d2:2c:bf:73:e1:62:be:ae:c9:9c:3a:a7:22:a9:25:83:07:08:
bb:b6:31:60:fd:96:38:de:47:c2:1f:64:87:98:15:a7:cc:27:
5d:f5:a1:6d:36:37:ab:20:aa:74:f3:36:2e:da:4b:26:01:33:
94:00:d2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org