Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FD8452AC4B1211EDB26DB8DEF1222468.roa
File: FD8452AC4B1211EDB26DB8DEF1222468.roa (raw, json)
Hash identifier: xr6tLacWkep113GFC4u0NRVGBfePbBd+MOT17dNSzH8=
Subject key identifier: 94:F6:76:1A:64:2A:BF:AC:6D:C6:1E:9C:01:DA:98:9B:A5:21:EF:17
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0857
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FD8452AC4B1211EDB26DB8DEF1222468.roa
Signing time: Thu 13 Oct 2022 16:20:45 +0000
ROA not before: Thu 13 Oct 2022 16:20:40 +0000
ROA not after: Sun 13 Oct 2024 16:20:40 +0000
asID: 60721
IP address blocks: 102.129.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2135 (0x857)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 13 16:20:40 2022 GMT
Not After : Oct 13 16:20:40 2024 GMT
Subject: CN=63483add-7721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:65:18:72:2a:13:1e:a6:df:61:b2:83:27:3e:
9e:69:e9:7a:e6:25:b5:77:8b:40:ac:e0:f0:49:01:
ac:d7:46:13:ca:84:d2:03:14:6e:c5:32:59:b2:2d:
53:b8:79:7b:1e:1b:1a:17:4d:2a:9c:d9:8f:26:c2:
fb:eb:e0:dd:53:ca:b4:8f:bd:09:eb:4a:17:86:50:
f7:76:c0:5b:5b:3c:65:26:4e:54:42:a0:b4:45:10:
eb:62:82:72:02:0a:1e:ca:12:ea:2a:5c:3a:eb:a9:
e9:cb:db:27:f8:5f:61:d7:5e:43:00:b9:0e:9d:b1:
b1:4b:f6:c3:59:0e:00:c4:f3:c1:04:85:de:11:eb:
d0:c4:8f:c6:43:e4:3c:c2:d0:55:93:69:67:1c:39:
37:55:e5:3f:59:be:54:db:47:cb:ea:ad:69:80:25:
66:78:79:66:d2:3f:e5:97:a8:69:05:38:92:3c:46:
9a:21:37:7f:2c:77:e6:83:c1:db:de:5a:ea:b9:0d:
53:68:0a:4e:0c:53:4b:62:63:4b:35:c8:04:db:a1:
1c:aa:aa:81:18:10:7d:35:ac:f3:c2:26:66:87:61:
bb:47:9a:a7:18:e7:f1:09:a2:de:cf:38:09:24:56:
68:4f:c6:cf:ba:eb:9b:fa:4b:1c:eb:ce:2a:19:8f:
c3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F6:76:1A:64:2A:BF:AC:6D:C6:1E:9C:01:DA:98:9B:A5:21:EF:17
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FD8452AC4B1211EDB26DB8DEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.151.0/24
Signature Algorithm: sha256WithRSAEncryption
03:fd:b5:7c:14:9a:47:b4:02:f0:5b:09:6f:d5:74:fa:09:ff:
31:90:96:6f:92:fb:72:3c:c5:58:5c:75:93:f3:0c:23:6a:13:
72:8e:de:f5:3a:17:fa:f9:02:b0:7b:06:be:66:c8:5c:bb:9f:
73:84:d9:1f:dd:3c:4e:5c:6f:a6:f7:f0:67:cf:af:1b:98:5b:
6a:8f:47:3a:38:4f:74:31:1f:c5:f4:65:32:d3:18:93:e5:36:
44:a3:c6:b8:19:0a:f4:3e:40:5b:c7:58:7b:56:64:9f:b1:c9:
37:ec:64:9f:94:06:ff:a3:33:65:77:5a:fc:e1:4b:44:2c:f4:
7f:cc:8d:29:3a:a3:4f:14:8a:29:be:df:13:5a:7e:b6:08:01:
b3:6d:f0:5b:1a:ba:26:85:14:ca:c3:f5:58:42:04:d4:c3:ec:
64:a5:e3:4b:f8:09:df:57:d7:84:b0:39:6f:0c:d1:95:6e:7e:
02:69:1f:60:0b:67:90:c7:ca:0c:9d:11:3e:72:bc:50:4e:68:
8a:a9:50:7c:f6:1c:f8:bd:17:81:51:56:a0:e4:0f:2e:e6:69:
7c:84:42:30:bd:f9:00:65:75:d6:e4:17:5c:ed:22:d1:2e:07:
2a:00:ac:59:9e:d2:75:0f:66:ef:fe:31:a5:81:3c:cf:e6:24:
4a:67:2e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org