Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E9146DCA181711EE8CC46D104AD9E6FC.roa
File: E9146DCA181711EE8CC46D104AD9E6FC.roa (raw, json)
Hash identifier: fK3XfhEfSjHZzxrAO3Dj0Xipu4NU0GGpBBfA3MtxvMs=
Subject key identifier: 77:82:EA:C6:73:F5:66:3A:68:26:3F:D2:72:06:6F:FF:55:37:A1:9C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0C44
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E9146DCA181711EE8CC46D104AD9E6FC.roa
Signing time: Sat 01 Jul 2023 14:02:27 +0000
ROA not before: Sat 01 Jul 2023 14:02:23 +0000
ROA not after: Sat 05 Jul 2025 14:02:23 +0000
asID: 834
IP address blocks: 102.129.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3140 (0xc44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 1 14:02:23 2023 GMT
Not After : Jul 5 14:02:23 2025 GMT
Subject: CN=64a031f3-4a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cf:72:ad:9a:d9:15:5e:23:a6:fb:a1:86:cc:
04:26:37:20:3d:75:26:54:09:f5:71:89:c4:5b:44:
3d:c3:d4:93:66:3a:ad:73:26:07:4e:0b:79:9c:79:
d3:36:71:53:49:5d:36:8a:48:96:82:6a:0c:69:64:
db:a1:37:84:d1:64:29:2b:f6:87:42:84:ef:96:38:
03:b3:a4:b6:94:a4:0c:69:f0:c0:1e:78:0e:75:13:
6a:eb:6a:67:0d:a6:4f:19:3e:9f:a4:ab:2f:3a:d6:
27:ba:6e:cc:3e:5a:eb:74:79:ab:44:3d:75:2b:fa:
e6:37:3e:f9:d7:0e:42:b9:e4:89:18:20:8e:fe:eb:
a6:19:1e:88:c6:0b:f1:9b:d4:aa:50:8c:61:0c:25:
4e:33:64:41:36:b6:3a:ec:92:0d:fc:c0:37:83:ba:
a5:2d:5f:9f:91:3e:89:4d:1c:e1:fb:74:a1:6f:24:
23:f6:64:e4:ff:fc:38:6c:1f:ad:d6:c0:33:61:1a:
56:18:c0:8d:7e:04:23:28:23:7f:cf:87:f4:95:c5:
a7:6a:35:78:b9:4c:09:33:82:33:08:e5:db:58:9a:
0b:24:ae:20:21:8d:93:7a:5f:2a:92:98:97:8d:01:
41:06:f1:a6:9b:a5:c9:64:7c:b9:7d:d5:e7:49:c2:
44:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:82:EA:C6:73:F5:66:3A:68:26:3F:D2:72:06:6F:FF:55:37:A1:9C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E9146DCA181711EE8CC46D104AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.165.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:53:a9:38:c8:0a:70:41:a3:c9:34:fb:b5:04:3d:b7:1f:88:
4d:dc:0c:87:be:96:03:92:e0:ef:0b:ab:ce:8b:98:35:23:59:
d4:fa:87:fa:84:32:39:49:1c:1d:25:4f:db:1d:86:08:78:65:
14:13:43:8b:ac:95:dd:85:09:e6:81:8e:3e:e1:c1:66:b2:2e:
21:1c:70:ae:d5:f6:2b:eb:7c:07:02:77:f6:2e:ac:74:8e:4a:
32:75:ce:38:ce:e7:f0:a8:bb:18:bd:f2:4c:61:d0:e2:84:76:
5a:52:a6:4d:aa:4f:45:b2:30:90:df:47:23:72:67:bc:f0:06:
c4:82:c7:92:b9:cb:cc:92:b5:ba:e3:cf:ff:28:9d:2d:91:36:
8a:9e:55:5a:1b:35:fa:c3:ad:78:32:fd:67:ac:ca:e7:ae:5f:
89:6a:93:22:b2:5d:ad:c3:fc:8b:be:1f:4f:ec:26:1d:55:b8:
a9:5b:ee:45:fc:e8:46:30:82:08:54:16:bb:27:8e:1f:d7:b7:
87:41:73:91:d9:ea:05:01:9a:d8:e2:31:09:73:a4:89:b8:24:
6d:cc:cf:f0:b8:b0:a3:bc:90:da:65:ee:33:a3:98:58:56:84:
b2:15:0c:91:f7:b8:0d:dd:0a:db:f2:11:44:6c:f4:79:39:e2:
da:68:ad:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org