Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1794FCBA718C11ED88D03DA9F1222468.roa
File: 1794FCBA718C11ED88D03DA9F1222468.roa (raw, json)
Hash identifier: 9vfInOCYT5Yhwsb8Wcu+bO16xUEKVHNyOoR0K3U4sJg=
Subject key identifier: E0:B1:45:E8:81:05:4C:20:68:AB:9A:51:22:BE:7D:19:85:9B:82:BD
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0926
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1794FCBA718C11ED88D03DA9F1222468.roa
Signing time: Thu 01 Dec 2022 15:23:22 +0000
ROA not before: Thu 01 Dec 2022 15:23:19 +0000
ROA not after: Sun 01 Dec 2024 15:23:19 +0000
asID: 212335
IP address blocks: 102.129.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 12:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2342 (0x926)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 1 15:23:19 2022 GMT
Not After : Dec 1 15:23:19 2024 GMT
Subject: CN=6388c6ea-01e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:81:8a:ea:ff:82:26:15:1f:0c:8e:a8:19:d2:
0d:c5:61:49:07:7c:27:7a:89:f9:80:3e:26:d1:dd:
a6:6c:d4:12:bb:81:29:a1:2a:e8:3b:b1:60:4d:8f:
e5:12:38:8d:6a:f5:b2:5e:99:9a:00:ce:65:20:ca:
7c:18:b8:da:b5:d5:b8:8e:40:d2:b4:c4:2f:f4:ac:
30:db:22:65:84:d7:87:24:4b:70:e3:f7:13:4d:45:
0a:7b:48:b8:a5:a0:81:4c:2d:a2:d9:7d:fb:87:77:
31:0b:5d:39:1f:92:5f:9c:3b:f2:fc:b4:26:3f:2f:
8c:cd:f6:fe:10:d5:5e:8b:e0:5a:bc:19:2e:96:f3:
d9:39:89:70:ab:fb:e8:31:65:26:2f:cb:18:ec:76:
1a:30:80:dd:17:b9:43:4b:61:a8:30:b0:01:b1:3f:
a3:69:9d:02:31:ea:cd:0e:1f:ef:38:81:8f:90:46:
17:c6:5c:fb:e7:35:23:98:46:46:8f:51:8a:7d:e2:
dc:84:b2:ad:59:eb:c9:2e:a9:58:fb:7c:23:7b:c1:
00:95:27:80:92:c1:8f:8a:79:92:b9:c2:7b:a1:6d:
40:dc:60:e8:a2:cc:cb:6a:3a:66:e0:a4:4e:3e:32:
87:6e:96:48:f7:1d:50:a4:c3:8f:58:a7:b3:43:fd:
b8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B1:45:E8:81:05:4C:20:68:AB:9A:51:22:BE:7D:19:85:9B:82:BD
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1794FCBA718C11ED88D03DA9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.149.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:77:b5:da:b9:61:f6:8c:28:c0:bc:c6:4a:82:51:c8:a9:80:
e4:5e:22:9d:15:24:a4:62:b3:c6:d2:fb:d8:21:02:fe:9c:40:
d1:9b:e8:f7:09:5e:7b:62:1b:58:54:7d:a8:d1:3b:db:00:d0:
b9:42:4e:c4:6a:f0:49:63:b8:55:03:35:7b:53:c2:3d:5b:e5:
07:5d:23:9a:5f:36:39:c8:97:70:73:f6:0b:e0:29:02:fc:00:
2a:55:be:72:b1:da:d4:13:db:5f:d7:dc:cb:84:dd:27:f0:41:
40:7c:10:28:d1:5e:e4:37:ef:83:73:f8:35:4f:1c:c9:77:5b:
a0:38:2b:99:08:9a:69:0a:47:7a:a5:68:88:a3:aa:14:78:33:
b1:e6:48:73:a4:c0:0d:ab:7b:ae:72:a5:88:36:e5:da:64:16:
6d:c1:e2:97:fa:b3:07:6c:d2:2e:55:d2:ca:fa:99:12:ba:b0:
12:48:45:b2:9a:5f:2a:65:b6:a0:3a:5f:f2:16:3a:0d:4f:1d:
02:61:7b:78:9d:cc:42:f3:0b:71:00:98:a5:6b:76:43:72:ef:
c5:bf:67:f4:1c:ee:7a:e2:6b:b5:2c:33:9f:78:81:e3:93:df:
10:bd:33:81:11:e5:86:34:e9:f2:cf:7a:4a:45:f1:74:81:46:
01:84:8d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org