Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/14C55E461A6311EE984498874AD9E6FC.roa
File: 14C55E461A6311EE984498874AD9E6FC.roa (raw, json)
Hash identifier: /uOnpB6fzt0h7Py7C2ZiWuAnpYzxfq51J8JuKQEzULU=
Subject key identifier: 8C:C7:9C:9E:37:59:AF:C0:7E:D8:F6:35:78:69:43:94:60:D0:F7:97
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0C4E
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/14C55E461A6311EE984498874AD9E6FC.roa
Signing time: Tue 04 Jul 2023 12:05:35 +0000
ROA not before: Tue 04 Jul 2023 12:05:30 +0000
ROA not after: Sat 05 Jul 2025 12:05:30 +0000
asID: 834
IP address blocks: 102.129.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Jul 2023 16:47:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3150 (0xc4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 4 12:05:30 2023 GMT
Not After : Jul 5 12:05:30 2025 GMT
Subject: CN=64a40b0f-71ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f7:e3:a5:ee:75:2c:63:25:4c:70:28:b6:e9:
26:e3:40:95:71:a3:a4:63:bd:6d:7d:e8:10:ae:45:
b1:08:e0:65:2b:b0:88:dc:fd:91:d5:5c:92:2e:00:
b0:81:1b:4a:05:a4:19:4a:f6:ad:82:3b:14:9c:cc:
c5:c2:b0:89:72:56:24:9a:f6:2a:fb:56:a1:dc:f3:
d1:cd:18:39:e9:6c:68:f4:34:5b:e9:db:9c:0e:0b:
0e:3e:21:53:b2:69:c9:45:b0:ef:c2:2d:43:5b:47:
4a:70:9a:db:04:9c:9a:cf:c0:47:c7:f7:a9:c7:59:
a0:f9:7e:2e:c4:16:7a:f9:a3:5d:76:8e:51:aa:bb:
41:7b:07:0d:3a:a2:1c:0a:2e:29:41:76:56:79:e5:
66:ca:f6:88:1c:f7:57:de:fa:b6:67:22:84:78:69:
07:54:89:1f:4c:62:74:a0:55:b8:34:c6:76:88:34:
ac:57:38:0f:ed:08:19:e8:e3:63:fc:c7:68:72:a7:
21:51:cc:a3:cb:f4:79:ea:21:6c:b5:03:51:70:54:
73:fa:34:19:04:f2:e7:f4:84:9a:6d:10:22:6d:f1:
fc:c2:7a:47:2d:6a:13:06:4d:14:f8:49:e7:c7:56:
34:e8:98:22:65:2f:82:a2:63:85:36:96:a5:2b:ff:
f8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C7:9C:9E:37:59:AF:C0:7E:D8:F6:35:78:69:43:94:60:D0:F7:97
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/14C55E461A6311EE984498874AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.190.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:30:3f:c4:59:fc:9a:31:9c:a9:c5:e3:96:9d:ef:ea:ec:47:
07:c2:60:f3:fe:95:62:36:cf:0d:5c:29:12:9f:d8:d8:fb:bb:
52:f9:ec:ca:1a:6d:af:75:79:1e:dd:0c:34:00:1f:87:12:69:
41:c0:17:f0:63:b7:19:66:85:d3:31:f4:5f:17:fe:e3:d7:02:
6b:59:1e:d9:61:26:8b:3c:06:d3:ca:7b:87:0f:72:88:8d:ce:
ca:e9:b2:5f:23:11:61:3a:3f:3a:b1:4a:83:8e:c5:7a:2b:31:
3d:b1:b6:96:9e:83:5e:63:1f:8f:c1:25:24:ce:5c:32:81:d7:
5f:96:53:60:e9:bb:b3:fc:2f:b5:0b:e3:bf:62:82:dd:5b:a0:
fd:1a:9e:09:27:a5:71:7e:31:63:45:f1:cd:48:db:7d:e8:1b:
68:3e:cb:77:37:0c:16:5f:59:a4:1f:05:df:c6:24:39:fd:2c:
34:89:2f:35:fc:17:1a:2e:38:0e:da:2c:62:9b:bd:23:88:f4:
b3:d0:34:a4:4e:6f:d8:e6:eb:0d:a3:94:46:47:18:91:01:fb:
e1:44:4d:7e:73:dc:ba:85:1a:4a:bd:46:2a:30:9e:b8:6b:de:
9f:d0:44:04:f7:68:96:8d:5d:71:e8:85:78:c1:24:ca:bc:5e:
18:13:96:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org