Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DBA90C0416BE11EE9B85F7724AD9E6FC.roa
File: DBA90C0416BE11EE9B85F7724AD9E6FC.roa (raw, json)
Hash identifier: V8kuuo9HhpgLm+yVfjcLWGKSwha/E/WWb04EYmiVVwM=
Subject key identifier: 68:19:86:54:A9:92:77:11:5B:DA:BE:0E:9A:12:DC:75:33:0E:1F:83
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0C3C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DBA90C0416BE11EE9B85F7724AD9E6FC.roa
Signing time: Thu 29 Jun 2023 20:52:28 +0000
ROA not before: Thu 29 Jun 2023 20:52:21 +0000
ROA not after: Sat 28 Jun 2025 20:52:21 +0000
asID: 834
IP address blocks: 102.129.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3132 (0xc3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 29 20:52:21 2023 GMT
Not After : Jun 28 20:52:21 2025 GMT
Subject: CN=649def0c-9d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:43:f0:1e:b3:19:88:f8:35:12:36:ca:74:83:
df:f6:7a:34:50:39:fc:11:10:34:e3:21:06:88:cf:
78:df:a0:40:b2:5e:c0:63:92:05:54:fc:66:16:d0:
e4:ad:16:41:60:f0:a7:c4:dd:13:f0:ea:0c:29:12:
3d:45:5f:9a:27:9f:26:05:62:49:69:08:a0:34:ad:
15:32:f9:e4:ad:49:0c:c0:d5:94:1b:51:8a:7d:d7:
5a:13:c9:a2:d5:04:d1:fe:cb:5c:0d:c6:d3:a2:13:
ea:9a:f4:3b:ac:d0:c3:cf:42:f3:b6:73:4d:1c:71:
ae:d6:fa:91:b7:c7:9f:a7:44:2a:17:f9:fe:41:48:
ab:36:46:77:69:94:74:2d:d7:2a:25:4e:34:3c:e2:
6c:7f:28:8f:f9:5c:82:02:ab:cb:8c:0c:7c:f3:cf:
77:91:49:f9:59:98:c0:a2:3e:8b:97:e4:80:15:20:
cf:45:a9:fa:4d:b3:9e:8e:32:97:eb:90:e1:dc:eb:
45:9c:fa:be:86:70:b3:e4:92:ad:0d:f1:49:00:67:
b5:16:d4:ae:da:1a:06:5b:d4:33:34:64:fc:31:98:
95:ac:38:01:7c:a1:ee:04:ba:fc:bc:fc:5e:14:d0:
59:cb:b1:1a:c1:62:21:bd:58:7c:74:6b:b7:8d:7d:
be:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:19:86:54:A9:92:77:11:5B:DA:BE:0E:9A:12:DC:75:33:0E:1F:83
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DBA90C0416BE11EE9B85F7724AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.216.0/24
Signature Algorithm: sha256WithRSAEncryption
30:f7:88:d4:38:46:3c:7b:ac:d9:bf:ea:55:08:96:78:af:47:
f8:16:77:27:dd:06:92:73:eb:95:cb:27:61:a3:94:50:9c:5f:
ea:9f:e1:42:2a:03:f4:7c:e5:0d:90:21:27:7c:c5:d8:60:60:
cc:7b:55:5c:3c:36:a6:b7:16:24:d2:e6:e4:44:de:2c:17:ef:
21:f7:a8:4b:15:b0:84:65:a2:0b:4e:6b:b9:92:81:5b:ec:7c:
90:44:dd:cc:02:89:4a:0f:06:0c:cc:22:1a:37:5b:90:fe:68:
23:4c:b8:de:29:43:0c:70:3f:d0:80:05:66:65:bf:10:23:05:
89:9b:0d:b7:c7:a3:87:5b:55:2f:d7:f7:db:6e:63:cc:66:20:
c9:f7:1b:66:80:d7:63:71:9a:b0:ab:a7:5d:cc:eb:59:a7:11:
93:ea:0c:ea:9c:61:90:1b:92:00:db:58:e5:03:e7:46:30:49:
c1:95:4c:65:3c:88:1a:33:15:c4:af:b4:cc:43:44:74:3a:c0:
59:8f:44:60:6a:ac:3f:87:ea:7f:0d:eb:1e:4e:8f:49:80:52:
91:9f:a9:83:7d:0d:9c:d1:e8:af:d8:d6:9f:c0:c9:52:30:c2:
02:c5:6c:3c:d4:fb:4a:00:c5:5c:fb:0e:c6:3a:49:d8:9c:2f:
da:57:fa:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 12 17:49:54 2023 by rpki-client on console-ams.rpki-client.org