Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D609B0AC641911EEA7763F6F4AD9E6FC.roa
File: D609B0AC641911EEA7763F6F4AD9E6FC.roa (raw, json)
Hash identifier: ZRxxmrZwp2V3MGYIf18zdH/2zqGFrQAy1AfT21ToAv0=
Subject key identifier: 49:58:26:AE:CB:EA:CC:71:7D:6A:D6:63:B3:A1:67:69:D5:EB:1D:31
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0DAE
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D609B0AC641911EEA7763F6F4AD9E6FC.roa
Signing time: Fri 06 Oct 2023 07:27:42 +0000
ROA not before: Fri 06 Oct 2023 07:27:39 +0000
ROA not after: Sun 06 Oct 2024 07:27:39 +0000
asID: 834
IP address blocks: 102.129.140.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3502 (0xdae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 6 07:27:39 2023 GMT
Not After : Oct 6 07:27:39 2024 GMT
Subject: CN=651fb6ee-8835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:37:36:5c:2a:94:b6:01:76:9e:3b:c8:2f:7e:
88:f5:94:c5:64:88:27:e6:81:43:da:70:c3:fc:ad:
60:fa:35:4b:f5:88:2e:3f:e8:ed:b6:70:60:6b:26:
94:bc:39:9b:29:b7:8f:e3:82:63:4b:c1:12:7a:db:
93:b5:dd:c9:6e:52:e5:c4:51:76:85:88:f6:88:03:
c0:cc:57:7d:6c:4a:46:24:c4:13:6e:3c:5b:e1:3d:
92:04:89:91:d9:e3:28:19:00:90:27:57:bf:20:fe:
27:11:83:d0:4b:5a:69:0d:a0:30:7c:b4:ff:d8:6b:
b1:2d:b5:76:ab:aa:78:6f:59:e7:35:84:f0:94:b6:
27:5a:e5:90:10:c1:43:ca:c8:6f:c0:2c:ee:bc:95:
69:b7:bf:c5:b0:14:cf:05:f0:66:de:4f:e3:b9:59:
8b:12:55:26:80:51:44:d0:e0:93:ab:d3:aa:0e:b4:
57:e0:1e:1e:74:82:39:dc:b0:96:9b:e4:3f:a0:4c:
be:c9:f0:e2:56:70:5f:21:7c:94:12:be:b4:90:61:
77:aa:3a:96:32:b6:75:78:a8:3c:67:1f:51:23:b8:
61:08:81:ca:ef:de:b5:da:9f:df:34:db:d0:09:05:
3b:b8:66:d0:65:4f:57:c7:b5:16:6c:5b:16:03:04:
ae:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:58:26:AE:CB:EA:CC:71:7D:6A:D6:63:B3:A1:67:69:D5:EB:1D:31
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D609B0AC641911EEA7763F6F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.140.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:d9:82:8e:cb:6a:9f:8c:cb:66:bf:82:f1:a2:13:5c:4e:44:
e4:29:7c:13:c0:4f:a9:11:db:a0:a7:71:01:e5:cc:39:b7:c3:
41:4f:d0:b5:62:b2:de:f6:12:36:eb:c1:84:6c:b4:13:eb:4e:
2e:92:f9:1e:f5:cf:b9:ad:b1:b2:c7:52:31:c5:54:55:bc:c0:
49:94:0d:da:9a:d0:fa:db:c9:49:b2:3e:a4:c3:e3:fb:1d:6a:
cd:37:1e:7d:61:e0:08:8a:24:89:a7:aa:20:c9:0c:62:e3:84:
35:ef:1b:54:0d:51:2e:ec:d3:5d:58:ad:93:7e:cb:24:5f:d8:
cf:5b:86:62:fd:c1:be:28:e2:2b:27:66:87:c5:a2:e3:e6:28:
d2:bd:d6:b7:30:81:9a:cb:f4:ec:bd:ea:89:51:da:c4:f2:f3:
c7:54:be:cb:e2:7a:ea:e6:c7:a5:7d:b7:d9:11:43:45:08:23:
3c:1f:f0:02:7f:55:00:1f:c2:8c:e4:9c:d8:61:85:52:45:ed:
ce:84:de:c6:5e:56:bd:80:b5:dc:2f:41:c0:c8:9b:2c:6b:6d:
7d:73:fd:73:6d:5f:d4:1b:dd:ff:df:35:9a:fa:ac:4b:16:f7:
31:1c:16:5d:40:89:7a:72:07:9d:f7:1d:ac:6f:97:f9:65:66:
46:f6:be:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 10 09:48:03 2023 by rpki-client on console-ams.rpki-client.org