Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/04A5EA5647EB11EFBCFE9B59762E951A.roa
File: 04A5EA5647EB11EFBCFE9B59762E951A.roa (raw, json)
Hash identifier: hoHgecFxOw+om/55QfBPaJCmk6PH0E7JQ6A0lzo1i7k=
Subject key identifier: 0E:3F:C9:CA:9E:E6:52:BC:D2:7B:07:6F:0E:09:A9:57:9C:D8:19:4C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1171
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/04A5EA5647EB11EFBCFE9B59762E951A.roa
Signing time: Mon 22 Jul 2024 05:26:59 +0000
ROA not before: Mon 22 Jul 2024 05:26:56 +0000
ROA not after: Sat 25 Jul 2026 05:26:56 +0000
asID: 834
IP address blocks: 102.129.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 06:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4465 (0x1171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 22 05:26:56 2024 GMT
Not After : Jul 25 05:26:56 2026 GMT
Subject: CN=669deda3-b703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:55:f9:70:cb:9c:a7:e3:7a:1e:3c:5a:a8:e5:
d4:03:12:2e:b3:bd:7d:e2:91:fe:41:89:d9:18:cd:
92:70:45:e8:71:c9:cc:f1:f4:cb:1a:56:df:28:91:
d4:c1:e8:c7:85:2c:97:d7:18:8a:9d:6f:76:31:3a:
e2:1a:7c:46:ac:98:99:39:e7:ef:d7:c8:02:a0:5d:
a8:5b:e9:9d:85:85:b3:c3:51:99:a8:79:bc:64:8f:
42:84:e6:7e:9b:17:b0:54:a3:3d:06:7d:3b:62:4e:
5b:f9:e5:df:8c:0b:36:85:e1:81:76:cd:62:cf:b5:
cd:ae:21:7d:27:33:0f:c0:dc:6c:ab:74:fe:06:89:
32:d3:ab:d3:6e:85:48:89:43:07:4b:8a:80:04:99:
52:21:14:7b:a9:6d:ef:c9:0f:0f:19:7c:6b:de:8f:
9c:90:ef:04:c3:98:bf:6e:10:5a:27:ed:01:83:3a:
12:75:53:1b:9c:df:e8:db:25:c7:cc:3b:c7:4d:44:
67:10:4a:10:46:5f:83:41:d6:d2:53:e5:4d:9f:44:
ba:4d:a2:1f:16:47:ff:c1:3e:1e:ba:26:a7:46:73:
c7:c2:5a:64:02:a7:c8:ee:9f:17:b2:3f:64:d2:00:
13:f0:f3:75:b2:94:4f:bb:ed:39:50:d6:87:08:6c:
81:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3F:C9:CA:9E:E6:52:BC:D2:7B:07:6F:0E:09:A9:57:9C:D8:19:4C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/04A5EA5647EB11EFBCFE9B59762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.226.0/24
Signature Algorithm: sha256WithRSAEncryption
59:ae:f9:f5:15:b1:7e:25:7a:c8:92:00:6f:14:75:f7:bb:65:
e8:8e:81:8e:b8:70:9c:fa:4e:86:4c:d9:7e:a8:38:0e:c9:4e:
d8:70:67:27:ca:32:2b:6e:ba:41:ce:4e:82:94:49:a2:a3:9e:
a9:4a:42:ac:e6:3a:45:52:1f:ff:63:6a:53:b6:1e:e2:92:01:
13:23:78:37:1f:00:c5:b6:ed:b2:f4:d7:9a:8c:45:0c:72:b8:
fb:c9:0b:49:92:09:01:60:30:a7:36:a0:31:c8:59:00:8c:13:
ca:db:a3:b8:be:85:90:ed:ef:39:f7:75:41:e8:dd:7b:9f:8e:
90:c6:15:b9:be:e0:4d:61:b2:d7:2c:ab:df:a1:ce:e4:cd:00:
db:35:fe:71:ac:b4:0c:06:09:90:d0:28:bf:5e:dc:49:8a:76:
87:24:d6:2c:a9:f1:a3:28:2d:09:1d:eb:33:bf:91:70:3b:68:
d7:df:96:f7:64:ab:a7:91:9e:5a:a2:20:ba:0e:72:f3:34:f9:
b6:c4:68:5b:b7:6f:f0:52:1c:63:e6:33:d3:2b:57:6c:c5:ac:
59:47:33:24:a9:e2:53:14:06:48:b2:92:bf:41:dd:85:7e:d1:
ee:e2:9f:fc:99:bc:4f:d4:96:0d:2d:46:a9:e2:ac:ee:8c:50:
e6:b5:1a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 09:27:17 2024 by rpki-client on console-ams.rpki-client.org