Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/127703C06FAE11ED8B8A7B8CF1222468.roa
File: 127703C06FAE11ED8B8A7B8CF1222468.roa (raw, json)
Hash identifier: /1M5bRgaYAtOJ0uSzCGAEA9Oj80yGobya8EACzQnlV4=
Subject key identifier: D1:65:26:40:A3:A1:EC:AD:73:71:C7:E2:BB:52:FC:8B:A5:F8:EA:EF
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 090D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/127703C06FAE11ED8B8A7B8CF1222468.roa
Signing time: Tue 29 Nov 2022 06:21:34 +0000
ROA not before: Tue 29 Nov 2022 06:21:31 +0000
ROA not after: Sat 30 Nov 2024 06:21:31 +0000
asID: 49581
IP address blocks: 102.129.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 28 Jan 2023 07:28:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2317 (0x90d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 29 06:21:31 2022 GMT
Not After : Nov 30 06:21:31 2024 GMT
Subject: CN=6385a4ee-e64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2c:7b:23:bc:32:5f:d2:9d:22:9e:02:1e:58:
31:11:3b:c1:a5:f6:55:2e:e0:9c:a0:1b:66:17:22:
7a:e5:cc:d1:d9:41:0b:cf:06:4d:56:32:97:28:f9:
73:2a:38:da:ba:b7:89:89:82:4b:a5:75:34:4c:c8:
23:c1:10:85:b9:26:d8:be:82:ea:b6:c7:d9:a9:25:
c8:ab:de:00:a1:a4:72:ea:36:eb:a9:ba:88:04:c0:
ca:54:8b:27:50:e2:44:13:a5:83:1d:f6:56:27:da:
f2:b4:ee:6d:86:f3:6e:47:2c:1c:ba:c4:db:b8:af:
7a:59:e9:dd:c0:db:e5:7c:41:5f:39:ed:1c:81:81:
28:64:cf:ad:f0:bc:b9:0a:0b:18:1c:f6:90:04:00:
81:53:79:ea:54:c8:d8:b0:9e:09:09:64:3f:47:18:
56:7e:c7:7f:41:c6:96:d8:80:e3:0a:40:96:5e:96:
44:d2:75:f5:08:8c:e7:1b:6f:9c:b5:79:40:45:38:
ab:03:f6:08:92:21:92:bc:13:f1:18:bb:ca:a1:37:
d9:84:fb:5b:7b:14:9e:bd:99:95:dc:e5:21:36:03:
94:96:51:16:bc:b6:45:6c:e3:04:2d:12:18:ac:c0:
cd:08:51:db:60:d2:e3:77:53:15:d4:a3:2f:4a:77:
db:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:65:26:40:A3:A1:EC:AD:73:71:C7:E2:BB:52:FC:8B:A5:F8:EA:EF
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/127703C06FAE11ED8B8A7B8CF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.140.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:7f:47:38:58:b2:79:cd:aa:b7:c1:5c:54:ba:2e:22:dc:6e:
20:5c:a1:48:54:aa:67:c8:73:b1:5b:c5:aa:49:83:b6:07:10:
63:0b:e9:0d:98:8e:a7:ab:ea:64:5e:e9:0c:7c:ff:54:46:a1:
db:77:c7:51:76:38:d4:64:38:6b:75:eb:96:42:5a:2a:32:e3:
d8:9b:40:ba:a7:3c:be:58:92:5d:92:99:4c:41:8b:f5:c9:2f:
8c:44:4c:93:63:cb:60:ed:57:07:8d:d7:09:c9:d5:94:ca:dd:
af:6e:25:47:bd:1a:4a:6a:9a:e2:e2:bd:94:3a:20:54:d6:f0:
69:ec:3e:05:2d:77:ac:2c:1b:ff:40:e7:56:cd:f7:59:29:43:
71:c0:9d:d8:d8:e4:e9:7e:df:54:6a:b9:bd:1c:af:66:64:9b:
73:27:8a:97:28:5c:10:71:1f:fb:76:51:96:74:39:c4:aa:6f:
aa:25:46:ec:0e:ce:0d:e5:72:57:2e:c3:ac:96:1c:cf:b3:41:
9e:9f:80:fe:c2:1b:89:e4:f1:b4:00:a1:87:54:86:02:40:0a:
22:e1:3d:ef:47:e9:1b:05:31:18:01:72:b2:0e:b9:8b:5f:32:
86:45:8f:7f:4e:11:1f:81:18:42:b1:77:b6:d1:bd:12:d6:da:
63:04:3a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:23 2024 by rpki-client on console-ams.rpki-client.org