Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1C602EB4249111EE999524854AD9E6FC.roa
File: 1C602EB4249111EE999524854AD9E6FC.roa (raw, json)
Hash identifier: uQ1r+1ooO/yWw97yGWiDhOxhEsXMUjVtzGMSBArkILc=
Subject key identifier: FE:F9:50:69:5D:47:9E:2D:14:2C:98:C8:DA:17:28:38:4C:2E:70:B6
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0C81
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1C602EB4249111EE999524854AD9E6FC.roa
Signing time: Mon 17 Jul 2023 11:00:16 +0000
ROA not before: Mon 17 Jul 2023 11:00:11 +0000
ROA not after: Wed 17 Jul 2024 11:00:11 +0000
asID: 147186
IP address blocks: 102.129.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Aug 2023 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3201 (0xc81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 17 11:00:11 2023 GMT
Not After : Jul 17 11:00:11 2024 GMT
Subject: CN=64b51f40-91a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:60:38:ce:02:d4:72:01:77:6d:f1:7c:80:9e:
0e:5b:de:a9:84:f4:88:df:bc:d0:b2:ed:cb:31:6b:
26:23:db:b7:4c:2e:0c:08:1c:2f:f2:b1:8a:e1:2f:
df:9e:d1:f8:40:33:60:e1:30:e8:12:59:73:3d:3d:
6f:6b:d4:b4:e2:a7:d0:2e:a4:94:af:f9:bc:ee:0f:
2f:d2:69:78:0a:9a:99:2d:e8:e7:e3:5d:1b:d4:85:
3f:80:8d:4f:88:19:a7:7b:14:39:6a:e3:71:6f:50:
70:1c:29:f1:b3:25:05:25:19:27:54:16:c2:cd:b4:
0d:81:90:53:d5:bb:55:39:62:5d:57:31:b4:86:9c:
d4:06:45:03:b8:b9:bb:88:55:16:ec:4c:82:e4:9e:
81:62:8c:30:13:ff:59:5b:ac:6d:31:81:03:2f:73:
95:dc:e1:ec:42:53:f3:b4:92:f7:68:1f:66:b9:85:
c5:f7:fb:24:3f:59:e7:83:37:96:5b:3d:95:66:a4:
14:79:23:c4:b9:e2:f4:70:50:75:fa:4a:ea:3a:e1:
e0:f1:47:6b:12:19:e8:b8:a4:82:17:f2:b1:1d:aa:
96:6c:92:48:59:7b:51:f2:2f:fa:8a:5d:c4:72:6e:
df:07:70:8a:3e:3e:5c:30:e2:fe:b2:7e:fa:bc:ed:
a0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F9:50:69:5D:47:9E:2D:14:2C:98:C8:DA:17:28:38:4C:2E:70:B6
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1C602EB4249111EE999524854AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.167.0/24
Signature Algorithm: sha256WithRSAEncryption
94:d8:d2:c0:ca:29:cc:b3:03:ef:1c:38:7e:7a:76:3e:7b:e9:
ef:55:ce:7d:c0:e6:c6:1b:55:d0:90:c0:ff:76:75:66:da:18:
43:46:27:77:8f:e2:12:e1:6a:6f:90:46:6a:a8:1b:2f:70:01:
33:1c:dd:1a:7a:d6:76:dc:a0:c9:e2:b1:f9:a7:24:ca:58:c3:
8f:eb:ad:44:cf:e2:16:d7:7a:ba:8d:15:0d:1e:91:70:a2:7a:
24:5a:10:51:9e:3e:50:c6:9b:7d:cb:ff:57:f9:50:88:72:ea:
59:fe:aa:46:86:28:0c:d9:92:00:3c:a4:bf:8a:f4:4c:53:d3:
59:1b:31:72:71:db:39:4d:7e:1e:a4:22:43:13:0b:67:b5:fa:
a5:7b:46:21:2d:c5:19:ce:70:31:52:a3:30:7e:98:5c:01:e0:
2c:33:7b:b7:d6:29:88:e6:09:73:0c:64:e6:39:23:07:dc:93:
1b:4e:d3:ac:98:d3:09:5a:ad:cf:67:ce:c6:32:c3:13:27:ad:
b3:a2:d5:fb:0d:0e:8d:63:4d:52:b2:2e:c5:be:20:a3:39:a8:
79:10:48:e5:a8:22:fe:d2:9f:72:85:1c:a5:c7:cf:74:50:32:
65:67:45:82:e8:c5:b2:51:55:b1:6d:43:1f:c4:fe:ca:e8:1f:
3e:36:d7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:23 2024 by rpki-client on console-ams.rpki-client.org