Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EE8083CCF2EA11EDAFA8B0514AD9E6FC.roa
File: EE8083CCF2EA11EDAFA8B0514AD9E6FC.roa (raw, json)
Hash identifier: laAHauDiW7xUUt5smyezcZnSLowFtrb7uNZE3kEuDUY=
Subject key identifier: A9:29:5B:6D:7F:09:CF:7D:25:B9:C9:01:CD:55:43:F4:C4:4F:E7:B7
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0B73
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EE8083CCF2EA11EDAFA8B0514AD9E6FC.roa
Signing time: Mon 15 May 2023 06:37:16 +0000
ROA not before: Mon 15 May 2023 06:37:10 +0000
ROA not after: Wed 14 May 2025 06:37:10 +0000
asID: 834
IP address blocks: 102.129.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2931 (0xb73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 15 06:37:10 2023 GMT
Not After : May 14 06:37:10 2025 GMT
Subject: CN=6461d31b-4b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:17:6e:14:33:35:e3:e2:91:ad:d3:92:a9:24:
94:33:15:31:31:fa:fc:3c:f6:0e:48:af:8d:c3:6b:
e7:5d:4d:58:17:89:c7:1d:e0:e6:69:87:32:61:c0:
9f:e6:26:85:78:f8:3f:b5:ed:0f:25:80:64:08:ea:
c1:bc:4e:f2:c3:ff:54:dc:30:3a:ae:58:63:14:b2:
cf:f9:5e:31:a6:72:25:60:83:52:16:4a:e5:29:44:
20:66:50:16:e1:0c:5f:d5:ca:dd:9c:0a:92:b2:90:
78:49:65:a1:cc:fb:f5:35:9e:56:a6:26:ae:e5:0c:
91:34:c1:0e:0d:e7:ca:70:32:ec:4f:f5:14:1f:57:
ad:a8:07:62:98:05:a9:93:93:dd:de:3a:32:d1:fa:
63:5e:f4:36:5f:47:3d:9e:34:93:0d:a4:04:d5:bd:
f9:98:7e:74:9a:29:3a:71:66:6e:36:3b:b5:85:97:
52:0e:f9:56:47:5f:68:82:26:4d:42:c1:2f:ea:29:
d3:55:57:10:a3:f8:4c:e1:9b:6a:c9:16:4c:c8:15:
91:0d:38:b3:9f:31:a8:f2:02:36:18:c4:e7:92:fc:
46:71:84:d0:ca:46:2e:92:ac:84:1a:ed:d7:2a:5d:
95:11:e2:70:71:82:a0:c6:1e:1e:70:6a:8d:51:2e:
05:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:29:5B:6D:7F:09:CF:7D:25:B9:C9:01:CD:55:43:F4:C4:4F:E7:B7
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EE8083CCF2EA11EDAFA8B0514AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.207.0/24
Signature Algorithm: sha256WithRSAEncryption
af:80:34:fa:33:cf:68:6a:b7:e0:f2:74:e7:b1:f2:9b:35:1a:
c4:42:63:59:dd:a3:01:68:e0:17:31:95:70:c6:9a:86:98:32:
3f:9c:48:0b:02:d1:14:e1:0b:f7:aa:b2:ca:9c:d6:3a:40:7c:
05:63:60:e0:36:a4:28:37:50:80:1b:62:5b:71:5d:02:9c:15:
0a:38:02:8a:9c:57:db:3a:6d:62:08:02:eb:0f:cb:c6:fd:9c:
7c:9b:69:6b:2f:97:f0:cf:ed:6c:e3:bd:52:3c:16:a1:2c:4c:
9b:6d:6d:72:4b:58:4d:3a:fc:a4:9b:0b:0f:db:9e:2f:d0:c6:
5c:be:ce:14:d3:98:bd:fa:99:98:77:41:0a:e0:eb:3a:57:f0:
8a:5d:ed:33:77:58:a0:5f:48:a8:93:cf:bf:f6:aa:a6:0e:9e:
49:ea:4f:88:01:e9:62:0f:d9:88:fd:88:27:89:fe:b7:d2:4c:
e1:91:5a:f5:8a:df:50:e4:df:72:b3:a5:45:48:9f:1f:37:cc:
0f:29:ca:9d:38:db:26:25:b2:67:68:37:cc:6d:d5:fb:b5:93:
92:71:05:d0:19:69:b8:27:2c:cb:5a:8c:bb:92:40:5a:b4:3f:
53:8f:dc:5c:b4:9c:08:ef:e4:f2:ba:40:e7:81:e2:70:ee:d3:
7c:b7:7e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org