Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D220B4547D6011ED99378CB1F1222468.roa
File: D220B4547D6011ED99378CB1F1222468.roa (raw, json)
Hash identifier: NcORkNQOElusAWm/PcpRV5ckVcha2wksRmosgljbTEw=
Subject key identifier: 7D:2F:96:84:81:91:2D:2B:A1:3B:FF:7A:24:EC:36:FB:C7:02:1D:5D
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0968
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D220B4547D6011ED99378CB1F1222468.roa
Signing time: Fri 16 Dec 2022 16:43:51 +0000
ROA not before: Fri 16 Dec 2022 16:43:46 +0000
ROA not after: Mon 16 Dec 2024 16:43:46 +0000
asID: 60721
IP address blocks: 102.129.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2408 (0x968)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 16 16:43:46 2022 GMT
Not After : Dec 16 16:43:46 2024 GMT
Subject: CN=639ca047-19b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2b:86:38:ed:ad:39:d9:87:43:e6:54:a7:15:
c8:5f:47:f9:15:84:a3:2b:85:70:a2:ba:9b:ef:01:
15:f6:f9:d2:0a:07:c2:b9:e8:9d:f4:30:1d:8d:c2:
6e:76:d7:bb:a4:5f:f3:6e:b0:76:47:77:5e:d9:41:
2e:cf:73:e3:25:47:57:1e:f7:57:15:b5:2f:df:42:
ab:46:22:db:5b:d8:67:9e:3a:cb:b3:1d:10:3b:db:
f7:cb:d0:76:47:5b:71:e0:2b:6a:9d:b2:7f:8d:dd:
b5:f2:88:0a:14:71:f8:b0:cb:cb:42:bc:7a:26:b4:
4c:50:b1:6a:c9:4f:36:d4:3b:08:65:2a:90:86:54:
ec:e0:aa:00:d3:7e:ec:49:eb:9a:0c:0f:94:28:56:
2a:44:a3:60:f9:a5:08:54:56:e0:14:34:b2:fb:e2:
8b:ac:ef:14:d8:be:30:55:dd:cb:96:a5:6c:62:74:
96:ae:c4:14:3f:01:04:8f:ec:e8:04:fc:1a:72:da:
f0:f6:c4:5f:d8:4b:d4:20:64:d7:4b:e4:6f:b9:2d:
56:be:9e:47:05:81:87:d8:48:f5:13:ff:ed:3f:11:
ac:4c:c0:8a:0e:12:5a:aa:6c:19:03:74:6e:ab:f2:
ef:04:34:47:01:e0:94:2a:7e:b9:29:28:75:fd:ee:
74:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2F:96:84:81:91:2D:2B:A1:3B:FF:7A:24:EC:36:FB:C7:02:1D:5D
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D220B4547D6011ED99378CB1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.217.0/24
Signature Algorithm: sha256WithRSAEncryption
64:1f:1c:c1:1f:5f:88:8a:70:70:40:bf:c1:15:cc:a8:2b:d9:
57:65:5f:63:34:2b:4e:5a:1a:f1:d2:f9:d3:3b:22:5d:73:5f:
b5:8f:1e:0c:19:1d:2d:6f:3e:88:07:4a:03:6c:cb:f6:24:c0:
d8:c8:c6:32:ba:2a:ca:94:b1:25:67:d5:2e:0d:d9:86:11:2e:
02:02:cc:38:ae:9f:17:ef:93:27:02:a0:81:8f:7f:79:76:3c:
a5:0e:2b:b2:ca:ea:53:ca:91:fa:77:47:72:46:af:ed:c7:ac:
8c:24:8b:32:6c:22:17:26:06:72:0a:e8:b4:1e:75:7b:01:b3:
06:e7:85:d9:4a:b3:9d:53:71:05:18:00:7b:22:de:1a:ff:6d:
53:62:17:84:6c:4e:f3:4b:2f:d0:ae:7a:8a:4a:c9:19:6c:57:
94:1f:dc:e3:ee:79:ee:c5:15:c4:42:7a:31:37:f5:e0:1a:62:
1e:65:0d:c9:56:d6:95:32:01:60:4c:9f:2a:fd:c2:f0:8c:2c:
24:29:09:13:ab:91:1a:83:ab:c7:ab:ee:d9:f1:16:a8:da:ba:
5c:af:2c:75:59:ce:f7:ce:ef:41:64:c2:2d:da:78:a3:3f:8f:
71:9f:c0:9a:9c:6f:f3:86:c8:5d:fe:d0:75:3c:a2:97:3d:c5:
eb:b4:d3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org