Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/005F88606BED11EE9055E54E4AD9E6FC.roa
File: 005F88606BED11EE9055E54E4AD9E6FC.roa (raw, json)
Hash identifier: m2ck6ajrfSZ9zKGfpHEYq9YFobJPYZ+PZBylaLKXFzQ=
Subject key identifier: 61:7A:7A:86:56:F5:2C:4F:6A:6F:FE:90:F6:4F:A6:DF:82:60:C9:65
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0DD9
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/005F88606BED11EE9055E54E4AD9E6FC.roa
Signing time: Mon 16 Oct 2023 06:26:55 +0000
ROA not before: Mon 16 Oct 2023 06:26:52 +0000
ROA not after: Wed 16 Oct 2024 06:26:52 +0000
asID: 396356
IP address blocks: 102.129.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 Jan 2024 11:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3545 (0xdd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 16 06:26:52 2023 GMT
Not After : Oct 16 06:26:52 2024 GMT
Subject: CN=652cd7af-3b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3b:96:d1:23:42:6a:f3:65:1e:fa:6f:87:b5:
39:59:aa:97:4c:64:b8:77:2b:32:8a:ba:00:b2:c5:
60:6e:2b:6e:4e:61:58:33:eb:8e:cb:9a:5e:49:fa:
05:ee:d0:ae:57:e7:8f:0e:22:99:61:3c:3a:dc:be:
be:a2:c3:1b:10:1c:8f:90:b1:8b:b6:bf:b4:56:a8:
c7:c7:a2:84:7d:4d:3b:f2:41:b2:9a:d5:77:be:9b:
92:2f:54:f8:52:24:0f:7a:a3:10:e4:cc:e4:41:d5:
f7:de:fb:e9:6c:4e:80:10:db:d9:72:cf:42:b1:9d:
44:40:77:41:cc:ae:2b:3e:03:35:e6:b9:97:d4:3c:
89:40:d5:1e:ca:9c:62:ad:0d:94:ab:cd:9b:79:67:
cf:6d:8e:8a:20:1d:b9:44:65:8e:b3:f0:4b:b1:d8:
40:6c:b6:26:53:f9:03:20:fe:9c:b9:dc:8f:d3:2e:
ef:00:ff:fb:aa:d1:11:3c:9d:d4:09:09:9a:62:4a:
a7:4d:f2:1b:46:8b:c9:6d:a9:77:da:1a:8f:cb:a8:
be:20:a7:b1:37:e2:f6:2b:52:1d:7a:b6:b7:4c:c1:
3e:c0:9b:2e:32:4b:c4:56:41:8f:1b:40:35:60:a3:
ab:c4:57:ee:d7:93:15:9c:c0:e1:5d:d6:e7:93:fe:
b4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7A:7A:86:56:F5:2C:4F:6A:6F:FE:90:F6:4F:A6:DF:82:60:C9:65
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/005F88606BED11EE9055E54E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.173.0/24
Signature Algorithm: sha256WithRSAEncryption
40:29:ee:14:41:13:d1:64:f1:a7:ad:65:df:ee:27:55:f6:96:
a4:24:fd:72:89:73:80:a2:7d:ff:cc:1e:06:83:e9:d9:b8:7f:
bf:56:b7:2d:a5:8e:1c:c6:3c:60:9b:0d:03:dd:d0:13:88:e7:
ab:22:d0:d3:ee:a3:fa:bb:d5:5e:ea:47:b3:ca:18:78:2c:32:
e4:8d:f0:0c:b2:07:31:95:1b:13:d9:94:70:a2:6c:fd:74:fa:
bd:8c:60:5a:83:58:69:3c:2d:29:33:c7:39:9a:9d:14:f1:0e:
2c:ff:6b:f2:75:39:aa:11:6a:a5:dc:c6:42:e6:3f:4d:3f:0b:
60:da:a9:5b:45:ba:8c:58:be:d1:35:64:68:a5:81:f5:e7:03:
f7:4b:7c:09:12:ca:53:5f:6c:be:af:9c:40:ae:ad:c7:44:b0:
64:58:76:cf:73:5f:fa:c1:34:42:e6:82:f4:e7:6f:47:c1:dc:
65:2a:d5:2c:2f:91:e0:48:ab:eb:64:f7:66:2b:b2:48:5b:84:
f6:1e:07:3e:e7:e1:ba:9d:66:fd:16:f1:12:fc:58:c9:75:82:
1a:f5:ca:1c:a9:ac:81:70:5f:6a:11:1c:93:17:f6:16:0f:e1:
d1:2d:41:1d:d8:b9:84:f6:b9:fe:2c:a7:97:21:91:73:9c:60:
09:0e:14:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 13 12:58:06 2024 by rpki-client on console-ams.rpki-client.org