Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FF30F2B4851211EEB57A402C4AD9E6FC.roa
File: FF30F2B4851211EEB57A402C4AD9E6FC.roa (raw, json)
Hash identifier: g9ZOzwHxvg4ZEo3WZrI1/AP8a0MCE3aVDJ1MRTW0AOI=
Subject key identifier: 5F:B9:37:09:55:72:D7:FA:A7:EB:E0:8C:59:7D:AF:1A:05:CF:A7:EA
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0E3C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FF30F2B4851211EEB57A402C4AD9E6FC.roa
Signing time: Fri 17 Nov 2023 06:31:53 +0000
ROA not before: Fri 17 Nov 2023 06:31:50 +0000
ROA not after: Mon 17 Nov 2025 06:31:50 +0000
asID: 834
IP address blocks: 102.129.236.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3644 (0xe3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 17 06:31:50 2023 GMT
Not After : Nov 17 06:31:50 2025 GMT
Subject: CN=655708d9-27ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2b:1e:30:2d:34:a0:33:df:4e:c6:21:be:dd:
44:e6:9e:e8:6f:20:27:98:48:48:d1:d5:16:55:e4:
3d:8e:bb:58:e1:ce:ac:29:37:fa:e5:43:a1:6d:c8:
e3:77:d1:11:72:ab:0a:58:7c:77:07:c1:55:60:73:
01:5f:17:f2:56:c0:5f:e3:3f:5d:25:a6:c9:9c:4e:
31:8f:6a:cf:48:37:0e:60:37:03:ab:7f:97:46:ba:
27:eb:b4:41:02:68:5c:c5:ee:f9:59:a5:1c:a0:6a:
55:df:a8:65:95:52:e8:0a:c4:a2:35:bd:c3:57:46:
30:0e:33:aa:ad:cb:d2:8f:6c:20:27:6e:40:04:ad:
8b:ff:d7:da:ac:e9:1f:50:d5:20:e8:bc:e7:cb:8e:
6d:03:bf:c0:79:16:c8:9c:66:22:08:9f:f0:66:66:
13:21:7f:ab:19:33:83:c6:f4:23:a4:39:6d:82:0f:
b4:6e:29:59:1d:db:2a:f5:d4:cc:61:16:59:2f:ca:
0f:ae:51:72:e5:56:f6:e6:5a:79:ef:62:c1:e8:50:
13:f0:90:d1:34:73:9c:bb:f2:3c:2f:d9:07:ef:62:
33:58:f5:57:3b:66:8e:f9:70:ce:60:b0:bf:0f:df:
33:45:5d:7c:8a:35:c1:b5:f1:29:09:40:d3:74:29:
ee:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B9:37:09:55:72:D7:FA:A7:EB:E0:8C:59:7D:AF:1A:05:CF:A7:EA
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FF30F2B4851211EEB57A402C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.236.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:a1:aa:be:f9:86:68:ef:74:c8:9f:ad:22:4e:c1:f3:f8:81:
50:95:2f:df:03:55:4a:9f:5a:45:bd:bc:ff:4c:64:b3:dc:79:
c6:bb:0f:19:59:0e:c8:4f:59:aa:d9:27:ab:d7:41:8e:90:75:
94:fe:46:da:50:3e:98:b9:7d:a7:58:9a:e9:2f:3d:dc:ed:d1:
71:98:03:46:41:fc:ec:65:4c:19:a1:e0:64:99:a6:e6:18:d8:
f2:5b:44:19:f8:1f:f7:25:5e:d6:6a:b9:df:f3:c1:73:7c:dd:
ac:78:e9:f4:ca:68:3e:09:01:1f:94:c6:7a:d9:50:54:b4:fc:
a9:b9:8f:7f:9a:22:2c:e2:06:1d:ae:f6:93:40:30:44:f4:8a:
45:cc:52:7a:7b:48:b6:87:7e:ed:18:76:15:5c:b0:f5:06:9b:
cf:f3:73:0f:d9:fe:50:26:cd:4d:1b:df:6a:67:7b:d1:34:8e:
d6:ed:16:a2:48:02:1a:96:63:6e:da:3b:1b:22:2d:cd:da:d9:
5f:39:3a:95:79:3d:21:74:21:79:fa:31:3d:f1:84:92:0c:35:
00:58:4b:b5:eb:ef:1d:6a:f9:d8:b6:11:cd:e5:47:f9:38:95:
84:07:d8:f3:83:c0:94:f2:f9:82:13:03:87:08:ac:85:5a:a6:
78:7f:e1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 22 13:20:52 2023 by rpki-client on console-fra.rpki-client.org