Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F38718E853BD11EE9A4B0B3E4AD9E6FC.roa
File: F38718E853BD11EE9A4B0B3E4AD9E6FC.roa (raw, json)
Hash identifier: 9vO74PgY1F7qP8SquSrD8PtopHHy4cJAl+7yuN6yovA=
Subject key identifier: 56:16:50:50:36:D0:38:23:94:3F:D8:5D:78:EC:D1:34:E7:0B:28:4A
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0D59
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F38718E853BD11EE9A4B0B3E4AD9E6FC.roa
Signing time: Fri 15 Sep 2023 11:49:39 +0000
ROA not before: Fri 15 Sep 2023 11:49:36 +0000
ROA not after: Sat 20 Sep 2025 11:49:36 +0000
asID: 213060
IP address blocks: 102.129.206.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3417 (0xd59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 15 11:49:36 2023 GMT
Not After : Sep 20 11:49:36 2025 GMT
Subject: CN=650444d3-09b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2b:06:a5:1d:79:d0:c0:91:af:23:d4:06:12:
e8:b5:e5:d3:8d:bf:2c:c7:d1:e4:70:62:15:a3:0f:
82:ff:7b:5e:d9:7f:ee:c0:66:22:02:7a:b8:31:70:
42:9c:36:35:4e:de:69:79:e4:bb:51:b0:11:1b:a0:
93:ac:b7:19:c4:ca:3c:ed:5c:ad:7b:f1:d6:b6:01:
d0:e6:c3:35:4d:f7:5f:35:c1:98:09:44:05:2e:27:
33:05:ac:49:5e:26:ed:b0:a6:15:d7:e7:68:b2:df:
29:7c:3a:b4:52:ae:73:1a:ed:1c:57:f9:be:96:ca:
c1:7e:74:f4:1a:e1:49:cc:00:f9:1a:be:30:bd:34:
fe:ab:2f:9d:e4:f7:7e:08:5d:39:05:f3:0c:3f:dd:
7a:e9:d6:bb:75:e0:78:c2:ef:40:34:cf:76:f9:97:
14:e2:38:fc:96:94:e6:fd:23:18:7f:5c:28:c8:47:
26:62:35:36:14:28:d9:11:61:77:3d:2a:44:bd:58:
1b:03:34:3c:57:e4:1d:69:41:11:1e:26:26:8c:7f:
c3:37:98:54:ef:1e:c3:c0:e7:60:73:50:e3:a9:23:
38:1c:e4:5a:cb:d1:e7:35:96:11:71:b6:d9:81:a3:
a3:65:82:90:83:30:f4:bd:cc:13:07:4e:2a:20:63:
e3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:16:50:50:36:D0:38:23:94:3F:D8:5D:78:EC:D1:34:E7:0B:28:4A
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F38718E853BD11EE9A4B0B3E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.206.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:f2:b9:0c:4f:cd:65:2e:23:07:54:cf:ab:c5:f9:ff:fc:59:
61:40:e2:60:22:56:35:ea:ea:bf:dd:96:6b:22:08:e1:21:2c:
d3:45:da:bc:de:50:aa:26:52:0b:ed:b2:01:2f:e2:af:ca:4c:
61:ce:b6:79:47:cd:44:ea:dd:ac:d5:b2:69:18:a9:67:fc:b3:
e1:c2:fd:a2:c9:bb:5c:c9:44:7d:a1:91:15:7d:70:3d:7b:b4:
91:28:b8:08:00:c2:b4:e6:fc:3c:2a:67:4f:77:43:80:96:b5:
40:08:0f:d3:a3:5d:17:6d:02:02:12:48:44:db:7c:18:51:58:
6a:8d:0e:29:99:d8:5a:1a:91:13:ba:4e:f7:8d:c9:74:6d:90:
90:e5:92:a0:09:2e:31:05:22:9b:b8:68:50:86:5e:1e:15:0a:
c2:ef:11:33:43:89:f4:aa:eb:5c:b2:ff:20:ac:fe:ee:30:80:
88:e3:16:97:fc:65:d1:9e:5c:32:02:c7:15:38:78:da:b5:34:
04:59:2a:27:92:c6:a9:05:2f:21:b3:10:c2:29:ab:8e:99:dc:
b5:5c:9e:79:cf:86:7f:41:26:8c:f1:66:0b:27:ad:fc:3b:84:
8d:21:f9:34:72:44:7b:97:86:2a:a2:fb:43:41:40:43:48:c1:
34:45:59:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 20 12:29:00 2023 by rpki-client on console-ams.rpki-client.org