Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E79393B0806711EDB2FFD789F1222468.roa
File: E79393B0806711EDB2FFD789F1222468.roa (raw, json)
Hash identifier: g9xe3WV+wEIDgDqA1OVnrsfMHyRXRG5U5wEq9R87DbY=
Subject key identifier: 88:11:C1:F2:AE:B5:8C:D6:DB:C1:FE:D6:A6:4C:00:77:6D:BB:A9:53
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 097A
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E79393B0806711EDB2FFD789F1222468.roa
Signing time: Tue 20 Dec 2022 13:12:07 +0000
ROA not before: Tue 20 Dec 2022 13:12:02 +0000
ROA not after: Wed 20 Dec 2023 13:12:02 +0000
asID: 61317
IP address blocks: 102.129.182.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2426 (0x97a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 20 13:12:02 2022 GMT
Not After : Dec 20 13:12:02 2023 GMT
Subject: CN=63a1b4a7-c6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e7:58:eb:a5:e1:6a:7a:44:3c:b7:03:91:4a:
0e:c5:e6:6d:cc:b2:44:8b:17:ae:bb:b8:c3:fd:31:
a2:d4:df:de:ba:19:2d:2c:e8:18:ce:98:28:59:84:
19:ae:94:cb:1e:7e:02:44:85:8b:50:d3:b8:02:e9:
81:7c:07:ac:2f:7c:f0:98:12:76:6b:fc:73:34:3c:
4d:85:8a:b3:8f:65:96:92:21:7f:62:65:3c:82:32:
29:a4:6f:dd:53:a9:bd:39:be:ec:c7:f9:7f:7b:0d:
f7:28:03:86:ba:be:6e:31:06:f2:83:01:d8:90:b6:
13:3b:79:77:40:7b:26:53:03:4e:81:bf:f6:d5:19:
eb:7b:c6:02:47:b2:d3:56:b6:8f:85:b3:f4:e3:cd:
68:25:f5:4a:b6:d0:b8:16:fd:ad:25:ec:a1:61:f3:
0f:c7:bc:18:ab:e4:8e:06:7d:9e:ff:22:3b:1f:ec:
1f:c1:a5:41:7e:1c:d8:28:26:14:43:19:97:1f:93:
1e:60:fa:0a:c2:13:36:4c:4d:62:fb:36:86:e6:72:
ad:55:a4:7f:a0:51:e6:9f:4b:2b:f0:39:21:52:0c:
59:67:b2:75:0a:e2:1d:43:e6:0a:ed:f7:0a:7c:e0:
18:dc:0f:dc:fd:ed:68:67:0e:cc:a6:88:03:6e:eb:
13:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:11:C1:F2:AE:B5:8C:D6:DB:C1:FE:D6:A6:4C:00:77:6D:BB:A9:53
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E79393B0806711EDB2FFD789F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.182.0/23
Signature Algorithm: sha256WithRSAEncryption
69:50:00:36:34:5f:cc:50:2b:0f:bf:fc:02:0b:91:c2:ba:6e:
49:9a:be:eb:91:52:4c:fa:1a:1d:d7:8f:36:17:88:62:5d:1a:
e1:83:86:0a:db:33:29:ca:61:ae:be:ca:ab:01:f4:39:90:bc:
57:32:d5:0b:35:ec:eb:1f:72:5a:73:2c:6c:f7:03:e1:1b:5d:
a5:3b:91:b8:cd:d8:db:38:b4:89:43:69:f0:af:0d:14:d2:ca:
13:c5:d4:e3:71:b1:ed:7a:df:eb:b9:c0:ab:d1:22:8b:77:e9:
62:fd:5f:c3:d0:a9:4c:87:60:48:51:99:ef:d8:25:be:39:02:
15:be:0d:79:f5:35:43:96:8f:35:3e:39:1a:f5:92:2d:c8:e9:
44:c3:47:d3:e9:a7:7c:ea:f2:1b:55:96:00:6f:03:4c:74:1c:
64:01:ec:2d:45:9c:24:fb:1a:06:63:d7:fb:4b:96:f9:f4:87:
c0:f2:b0:58:2e:22:e8:8e:1e:88:36:5e:7e:21:2f:01:e1:b9:
0a:87:bf:eb:b7:12:da:a3:46:e3:7d:c0:2e:4a:17:82:dd:7c:
14:ce:97:d1:48:3d:f8:ae:06:fc:14:91:25:72:e3:7f:a9:16:
e4:a8:21:7e:90:36:4a:bf:e9:97:32:bf:43:fe:f8:fc:61:8f:
4f:f5:e4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org