Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1E033B82054011EEA7845A894AD9E6FC.roa
File: 1E033B82054011EEA7845A894AD9E6FC.roa (raw, json)
Hash identifier: 4HUD3vu/oRIbp4E08EQISI10ypvC545hxqGGOE++pis=
Subject key identifier: 3B:0F:31:4B:12:53:05:EB:DC:56:AB:DD:A3:6D:D5:5B:62:B6:C0:0F
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0BDA
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1E033B82054011EEA7845A894AD9E6FC.roa
Signing time: Wed 07 Jun 2023 14:32:23 +0000
ROA not before: Wed 07 Jun 2023 14:32:20 +0000
ROA not after: Sat 07 Jun 2025 14:32:20 +0000
asID: 834
IP address blocks: 102.129.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Jun 2023 17:42:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3034 (0xbda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 7 14:32:20 2023 GMT
Not After : Jun 7 14:32:20 2025 GMT
Subject: CN=648094f7-eb19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:c6:8d:d1:ee:b3:3d:cf:4f:5a:7d:31:9a:
13:9a:05:fb:cd:fa:1a:3a:69:5c:dc:10:ed:16:ba:
fc:83:9e:cf:07:9c:87:8a:be:34:45:a1:2f:e3:58:
d7:32:a2:d9:6a:b8:3c:58:19:50:87:cb:4a:54:bb:
54:55:77:af:92:0d:bf:99:33:3b:66:56:5e:02:a0:
bf:2b:0c:db:ba:70:93:af:f7:e2:f6:4f:7c:98:7b:
79:63:89:ed:7d:a2:ff:6f:48:57:67:a0:9d:71:32:
99:ba:d4:11:d6:11:c9:91:b5:6c:29:71:8a:50:69:
83:3e:26:db:df:c8:23:71:14:30:1c:8e:99:8d:bf:
bf:75:dd:20:39:76:df:9a:b3:f2:15:11:a2:c7:8a:
e3:f1:11:96:2c:08:6d:ee:65:d2:0f:e7:60:8a:25:
dd:29:f1:ac:d5:44:f0:30:0d:83:f2:ff:e4:7b:fc:
a5:a5:aa:01:f4:a9:80:d1:d8:41:af:12:b5:2d:13:
26:b9:c1:4e:15:33:c3:84:f9:f9:4c:d8:34:43:c5:
fe:1b:5b:cb:91:38:f4:a7:87:79:1e:86:79:75:28:
84:45:d6:d3:c8:63:5b:7e:1a:ec:5e:52:e3:78:3d:
1f:ab:4a:6d:ab:e8:41:53:78:e6:95:eb:9c:fa:9c:
ad:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0F:31:4B:12:53:05:EB:DC:56:AB:DD:A3:6D:D5:5B:62:B6:C0:0F
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1E033B82054011EEA7845A894AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.134.0/24
Signature Algorithm: sha256WithRSAEncryption
08:39:1b:80:ad:a2:f2:c5:0b:c9:cd:21:a1:5b:f5:92:ff:a1:
3a:c3:23:0d:66:4b:e2:ee:83:c7:71:02:88:95:20:af:37:0a:
0e:9b:4b:ad:ed:53:56:62:90:f7:8d:98:3a:54:ce:28:ef:01:
c5:e2:8f:31:bb:f3:ef:1b:0e:46:f8:3e:2a:97:e5:33:6a:87:
bb:0a:3c:71:55:3f:5d:36:ae:c1:ad:85:91:04:f2:31:a6:24:
b8:0b:bf:d1:3a:3c:3c:d4:39:3c:7d:86:f2:42:26:aa:48:dd:
75:b1:31:fc:a2:63:62:e2:82:cd:1a:66:80:ce:7c:b7:90:c2:
b1:a5:82:ba:86:43:72:72:f6:7d:01:7e:19:ee:1d:84:02:73:
f5:e1:9c:ec:e6:74:fb:81:fd:70:62:15:84:c6:19:fe:04:3b:
a6:a3:ca:40:7f:07:fc:93:66:13:c8:5d:57:72:2e:dc:c7:cc:
d3:8c:25:02:77:f1:52:25:a0:72:7f:73:fe:00:c4:2a:a6:aa:
f2:f4:1b:28:40:f1:68:fc:d3:c9:19:b1:c3:da:3b:95:04:90:
a6:67:16:63:8b:c4:66:e6:a2:37:8a:4f:02:ca:72:85:0c:bc:
2b:5d:f6:a0:fe:d1:d0:af:7b:44:e4:c6:8a:4b:de:5b:19:80:
f4:de:60:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org