Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/063488902A1111EDB47B85E9F1222468.roa
File: 063488902A1111EDB47B85E9F1222468.roa (raw, json)
Hash identifier: iDK0PUoHTL0dQ+AoLg94/vCQz/zkXiZn2mzAc4FPuOU=
Subject key identifier: 7E:DE:F2:27:DC:5C:86:0A:F4:EF:EB:21:18:95:9C:EC:10:7B:F4:F0
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 07CF
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/063488902A1111EDB47B85E9F1222468.roa
Signing time: Thu 01 Sep 2022 16:13:33 +0000
ROA not before: Thu 01 Sep 2022 16:13:29 +0000
ROA not after: Thu 05 Sep 2024 16:13:29 +0000
asID: 23470
IP address blocks: 102.129.206.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 Mar 2023 09:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1999 (0x7cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 1 16:13:29 2022 GMT
Not After : Sep 5 16:13:29 2024 GMT
Subject: CN=6310da2c-b498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9b:5e:04:21:db:e7:1f:08:b9:19:03:0a:6f:
30:80:be:f6:5e:11:06:0e:52:65:47:7e:ef:6b:af:
a0:50:12:aa:33:c8:c9:b3:5b:34:16:ee:70:17:76:
6e:2a:e8:e3:d2:97:fb:cf:0f:7a:d3:e9:6a:d1:5c:
8b:b8:84:15:97:c4:b5:48:31:17:18:77:f6:53:b6:
dd:bc:16:10:3e:44:72:bd:f9:29:0b:a9:f9:53:4b:
84:62:42:24:2d:19:ff:59:c2:2a:a7:c3:27:be:f3:
49:e6:91:78:ca:03:d8:66:2e:50:43:44:c6:11:c6:
ba:88:4c:f4:b7:89:bc:cb:a4:ed:7a:bd:e5:77:db:
66:c1:78:2c:dc:58:89:d7:10:4e:4d:25:4f:92:f2:
11:49:b7:94:2f:45:24:3a:b9:74:ba:61:18:1e:5c:
4e:f1:d9:47:0d:6b:ad:71:66:d0:c3:15:bd:ab:2e:
f6:e3:5b:9d:75:7b:7c:6c:09:81:74:69:e4:e4:12:
ff:da:c5:3e:6b:94:de:8e:69:0c:6f:6b:5a:50:d0:
1d:45:ec:8c:ef:2d:af:cf:14:a7:c2:81:a0:5d:15:
ea:74:4e:b3:5c:97:49:44:ab:da:11:ab:cb:33:97:
38:53:96:25:35:72:84:e3:13:7c:d5:b7:30:b4:70:
7a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DE:F2:27:DC:5C:86:0A:F4:EF:EB:21:18:95:9C:EC:10:7B:F4:F0
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/063488902A1111EDB47B85E9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.206.0/23
Signature Algorithm: sha256WithRSAEncryption
11:4c:af:c1:d5:7e:09:e6:a7:7e:d4:b3:09:bc:cc:24:4f:8d:
9c:56:9a:33:82:11:b2:27:d1:dd:d5:90:59:c3:03:32:42:b7:
c9:d7:e3:9c:ca:d7:ba:53:31:4e:25:30:a7:74:14:11:2a:55:
4b:ae:0c:60:a3:7e:7b:55:3f:c5:fb:f0:f9:d2:1a:3a:ec:84:
42:20:20:07:44:ce:aa:1a:19:b0:ab:ca:2c:2f:6c:87:f4:48:
f6:01:ed:4f:18:03:ca:ee:c8:f6:2c:8a:3b:8e:f7:b8:7f:dd:
a6:d3:0a:c6:45:e9:d5:25:1b:60:29:34:bb:9b:d9:d4:4f:03:
8c:05:6e:40:32:a3:bc:ad:c8:dc:ef:6d:fc:c4:e4:a7:50:02:
90:8c:63:f1:76:09:35:20:58:55:b2:16:47:5e:bc:64:85:6b:
3c:d9:90:89:9f:98:44:a1:48:98:71:ad:2f:eb:6d:b1:3d:ef:
1b:e1:d4:86:ba:83:b7:e9:ac:68:be:8a:27:3e:ea:80:49:53:
11:fb:5f:98:57:02:f0:33:69:0c:a8:ee:2c:f5:a5:c7:8a:31:
b8:b5:6a:b4:55:86:a4:4d:21:ef:be:f5:c2:f4:47:71:34:4f:
04:4d:8e:11:4d:46:cb:d1:ab:b4:2f:66:93:af:d0:86:77:3d:
3c:c4:3a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org