Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EAE12BD8B42C11ED89A4E6F7F1222468.roa
File: EAE12BD8B42C11ED89A4E6F7F1222468.roa (raw, json)
Hash identifier: YTeVmYyb41KE9tDm0gRWJSvfXdmjTl2tZRJ0rz4hXIA=
Subject key identifier: D0:2C:4C:7A:77:2D:8F:02:A8:44:A7:08:58:3C:76:5B:18:8C:4D:97
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A6C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EAE12BD8B42C11ED89A4E6F7F1222468.roa
Signing time: Fri 24 Feb 2023 10:20:53 +0000
ROA not before: Fri 24 Feb 2023 10:20:49 +0000
ROA not after: Sat 22 Feb 2025 10:20:49 +0000
asID: 61317
IP address blocks: 102.129.134.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2668 (0xa6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 24 10:20:49 2023 GMT
Not After : Feb 22 10:20:49 2025 GMT
Subject: CN=63f88f85-475b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a5:b1:15:1d:f8:18:34:d2:ad:d3:e7:1d:9a:
cd:99:a1:64:7d:a6:0d:73:69:9e:bb:4d:37:9f:48:
9e:fc:53:c4:db:70:25:7a:86:4a:a6:ab:98:2d:4c:
0d:f7:eb:f2:73:84:a6:ea:92:f3:cf:58:9c:05:d5:
4e:24:66:81:0b:da:b1:83:99:9f:a9:b2:02:47:f9:
0d:4d:3e:23:c3:e5:b2:8f:b8:7c:67:8b:d9:b9:f3:
fb:4a:82:0c:6e:f3:bc:fa:21:a7:13:53:92:c3:82:
a9:4a:d4:c1:14:47:3d:00:4a:d5:4b:5e:91:b6:89:
f0:95:3f:e2:ba:be:42:8a:18:9c:b6:d6:d2:2b:4c:
9c:52:7b:80:c9:db:be:38:d1:0e:b9:ee:24:e7:01:
dd:85:47:a5:9d:15:2c:29:c4:b4:0d:c8:c2:aa:02:
e0:16:6d:f5:4e:c4:4c:ce:d3:8b:0e:27:a3:f7:d8:
29:f6:b9:d6:c0:40:3b:9f:a5:6e:93:86:48:a8:d2:
d1:dd:34:49:28:24:2e:31:b2:18:bc:5f:8d:0e:5f:
1c:e1:75:a0:f6:2f:8b:51:43:a7:c2:04:7b:66:32:
70:da:7a:76:92:2c:d5:cf:4c:25:16:13:08:ad:76:
0c:4a:e8:03:45:00:c7:3e:32:3b:43:bb:94:40:51:
17:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2C:4C:7A:77:2D:8F:02:A8:44:A7:08:58:3C:76:5B:18:8C:4D:97
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EAE12BD8B42C11ED89A4E6F7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.134.0/24
Signature Algorithm: sha256WithRSAEncryption
87:2f:fb:20:03:3b:61:53:b5:56:93:2b:fd:94:17:81:43:e8:
ed:48:37:26:2e:7b:60:1c:3a:85:e4:22:3d:fa:c2:26:c3:0a:
ec:2c:9b:52:12:50:43:ff:42:9c:24:d4:9d:ca:76:f2:21:ab:
f1:11:7c:4c:44:96:8b:71:da:9a:77:63:83:81:84:6f:d1:1f:
f6:d0:19:42:48:5f:42:b4:2e:ab:0d:06:70:21:79:24:ca:80:
e9:bf:5f:25:18:67:1f:6e:4e:a1:17:33:f9:6a:ef:2f:e6:f3:
dc:3d:a7:b2:9a:d2:99:c1:98:a2:59:95:8d:0f:85:16:db:e9:
82:93:d6:4c:db:24:ee:2c:6b:6f:f1:37:0c:25:65:56:f9:cc:
1f:c4:19:fe:83:38:54:c2:19:bf:3b:f7:aa:e5:b3:8f:8a:6a:
e0:25:80:61:1c:b4:88:e7:51:c7:62:fe:7a:33:68:3c:f2:b3:
5c:c3:e8:ee:11:da:ed:b3:bd:a1:6c:eb:b5:d8:59:65:09:e4:
a3:ba:62:7a:c8:48:f7:8c:e0:83:58:e0:32:a5:1d:3e:4e:96:
10:5e:2a:4a:f0:24:73:35:80:aa:f8:33:cc:df:b6:89:94:08:
22:10:e4:d8:2d:93:0d:5f:c6:c8:4e:73:bf:6f:49:ee:0a:98:
3c:28:9e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org