Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F94D41FEB1FA11ED93C2D4B2F1222468.roa
File: F94D41FEB1FA11ED93C2D4B2F1222468.roa (raw, json)
Hash identifier: IE5tjTIQXCwQKnX0lx6Y01KlZKs/WI4kqBK3WwXA2U8=
Subject key identifier: 60:FE:06:54:17:8A:81:B3:63:B8:A6:AE:D8:1F:F2:D6:0D:FE:66:F4
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A38
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F94D41FEB1FA11ED93C2D4B2F1222468.roa
Signing time: Tue 21 Feb 2023 15:18:20 +0000
ROA not before: Tue 21 Feb 2023 15:18:16 +0000
ROA not after: Fri 21 Feb 2025 15:18:16 +0000
asID: 61302
IP address blocks: 102.129.173.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2616 (0xa38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 21 15:18:16 2023 GMT
Not After : Feb 21 15:18:16 2025 GMT
Subject: CN=63f4e0bc-80e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f4:c9:31:3f:3e:33:ea:03:39:dc:c0:f7:b3:
5d:5e:81:0d:3f:99:8d:bd:25:05:e5:bf:bf:48:a4:
18:78:d3:df:d5:1e:a7:f6:42:9e:70:26:1d:46:35:
c6:90:9b:c3:99:79:fc:ab:6a:60:0f:67:ff:7a:c1:
24:0c:7f:25:3d:8a:6c:22:71:86:82:90:58:3e:c3:
b2:4c:5e:09:e3:54:ad:af:60:f6:dd:5a:0c:ad:e1:
8a:d5:34:ab:7e:51:2e:ef:a6:da:e0:e1:33:b1:67:
e7:58:f3:b7:4c:16:7d:f6:b8:3f:ce:9c:f9:41:62:
13:48:4d:5b:93:ce:55:66:7f:57:ea:e1:5d:aa:9f:
24:da:86:89:f9:25:26:33:a7:65:63:14:c7:d9:fb:
df:26:b1:a9:28:63:ee:67:a5:89:42:f7:25:77:1f:
3c:3a:a0:ee:2f:27:78:5a:a4:47:a7:f5:91:c9:68:
70:63:b1:d4:a8:c9:1c:51:8c:8c:ea:fe:3a:26:3d:
6a:21:c2:af:de:38:ee:c2:ae:67:61:83:f7:24:5d:
25:e8:5d:13:61:58:54:26:b0:a9:4a:8f:72:47:8d:
21:71:35:b7:d4:bc:be:e9:f2:00:b2:ab:d9:fa:ad:
21:31:4f:c8:a6:6a:c9:41:2c:d7:91:3b:d3:1c:d3:
cb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FE:06:54:17:8A:81:B3:63:B8:A6:AE:D8:1F:F2:D6:0D:FE:66:F4
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F94D41FEB1FA11ED93C2D4B2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.173.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:dd:bc:d9:c0:99:a8:0a:81:27:e9:fc:60:c9:a0:97:25:4f:
03:ba:e7:fc:ee:ed:45:67:78:0f:fe:1d:7b:aa:43:84:e4:37:
c9:81:ba:ad:34:06:dd:4d:17:d6:b3:e0:c4:9c:8c:03:9b:9e:
ae:dd:35:84:6d:14:9b:0e:ee:f5:b9:6a:da:33:e5:63:88:86:
45:b1:7f:a0:40:2b:3c:8f:79:39:72:e2:b3:57:70:2d:4d:66:
28:8e:8b:93:ad:93:6e:af:c1:18:2f:eb:8d:9f:13:77:50:75:
dc:fc:1e:8c:11:ad:cd:27:18:0f:ac:82:ad:15:21:6f:b8:98:
31:43:35:10:2b:d4:d0:c1:03:70:31:11:8d:e2:36:67:d1:8d:
68:31:01:da:54:ca:0c:88:76:77:64:a8:71:d6:e8:3f:f4:78:
bd:23:f7:02:9e:08:89:a0:7b:67:ed:a0:34:7c:78:d7:5a:fc:
29:35:02:d4:6f:2e:0f:17:28:3e:66:ab:4e:fd:35:db:2a:93:
58:f6:11:70:fa:b4:ca:67:49:44:8a:f3:4c:a5:89:a3:1c:f2:
d1:5b:73:3d:97:39:39:08:b4:2a:82:0c:d4:9f:dc:39:33:0f:
58:f2:97:8d:e8:be:9e:ae:16:04:8e:ab:e5:13:0c:24:39:e2:
78:79:7d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org