Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E81BFCF6EBEB11ED86980C6B4AD9E6FC.roa
File: E81BFCF6EBEB11ED86980C6B4AD9E6FC.roa (raw, json)
Hash identifier: BQhPBmWTfKnDR5HOyqHMarmQ5YhQR+e/ej6RQJpZIdA=
Subject key identifier: 96:35:AE:E0:F1:2E:BC:EC:E3:37:D4:5A:2F:63:7B:AE:6C:03:4B:7D
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0B53
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E81BFCF6EBEB11ED86980C6B4AD9E6FC.roa
Signing time: Sat 06 May 2023 08:56:36 +0000
ROA not before: Sat 06 May 2023 08:56:31 +0000
ROA not after: Thu 15 May 2025 08:56:31 +0000
asID: 984
IP address blocks: 102.129.173.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2899 (0xb53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 6 08:56:31 2023 GMT
Not After : May 15 08:56:31 2025 GMT
Subject: CN=64561644-2979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:3d:9a:c3:06:fb:65:0e:e8:bb:e0:a3:be:35:
b5:24:e9:7b:8e:a7:e0:a5:c3:8d:2b:f5:19:88:43:
c6:95:34:40:4e:7a:33:6d:91:cc:98:49:42:d0:4a:
49:b4:38:58:cd:f9:ca:61:08:f3:e9:e7:1d:9e:23:
9d:1b:bf:b8:56:9d:8f:b7:24:38:3e:09:a0:ce:8f:
c7:48:82:88:80:2e:b1:4b:98:96:88:30:01:92:02:
74:e3:0f:8d:fe:2e:ce:be:cd:03:25:e6:e1:36:3a:
12:87:ed:ee:b4:08:c8:9e:1d:4a:6b:39:27:74:bd:
d2:0e:e4:44:9e:f5:87:b2:52:7b:57:bd:dc:aa:32:
0c:03:4d:16:3b:2d:86:48:ea:70:04:f0:d6:b1:ba:
2b:dc:ce:8a:20:ab:7a:91:1d:6d:d0:65:34:fd:8d:
90:94:30:93:d6:7e:81:67:63:0b:c7:2d:ed:62:e1:
1d:9b:26:1d:b6:82:f4:27:36:97:ad:a3:b1:c9:f7:
42:e9:df:39:4a:af:27:1d:e0:e0:61:1e:80:c6:67:
bc:15:93:a2:c3:4b:d8:90:d9:95:ea:41:7b:34:70:
0a:aa:96:f6:b1:70:06:21:60:39:6d:4f:fe:ac:99:
8b:5c:88:47:81:98:2f:3a:ab:09:f4:84:32:b4:08:
62:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:35:AE:E0:F1:2E:BC:EC:E3:37:D4:5A:2F:63:7B:AE:6C:03:4B:7D
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E81BFCF6EBEB11ED86980C6B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.173.0/24
Signature Algorithm: sha256WithRSAEncryption
73:6e:bf:9b:e4:c2:9c:8f:72:46:e6:34:9c:e8:71:22:06:f5:
42:85:db:3c:01:96:bc:b9:c1:e1:39:b7:43:b5:c0:df:6f:8e:
9d:ae:be:5e:2a:35:f1:02:97:18:f4:a0:4e:05:a9:f2:88:01:
54:48:a2:f1:1c:77:35:35:7c:3f:9f:9f:bc:7e:c6:ae:fd:48:
7a:33:16:bb:cd:98:88:ce:e0:ec:b9:dc:97:d7:98:a2:ef:3b:
52:f5:00:aa:1e:4f:a3:55:f9:ae:44:5e:43:1b:ca:31:a1:77:
3c:7b:a3:bf:e3:77:2d:3a:ad:08:02:1a:04:dd:eb:89:5b:46:
a3:da:56:01:14:b5:ea:25:56:2e:70:cd:5e:af:55:30:22:cf:
95:6b:e9:38:16:7b:c5:89:ac:16:c5:7f:3d:a3:9c:29:1c:4e:
bc:07:02:63:f7:ad:e2:c5:ed:4c:33:0a:8e:e4:3f:b8:d5:a5:
71:fc:f4:ef:c3:53:c8:fe:88:b1:c1:03:0b:65:f8:44:16:55:
54:e3:9f:26:ca:cf:d7:43:d7:06:59:82:f9:4a:91:34:62:26:
31:d6:1a:5e:59:3d:b5:fe:8e:e5:90:56:61:e9:7c:b8:e3:1e:
08:3f:46:a1:7b:6f:58:5e:88:26:df:df:d1:2a:3b:fc:2f:bc:
ee:be:dc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 6 07:51:49 2023 by rpki-client on console-ams.rpki-client.org