Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/242F3C4C376111EE8929A02E4AD9E6FC.roa
File: 242F3C4C376111EE8929A02E4AD9E6FC.roa (raw, json)
Hash identifier: cDEFMs7R6PNCi8Szcx7oshQVZ5jcO0oOdlFUmKQqqnQ=
Subject key identifier: 10:1A:72:98:60:93:4F:DF:25:5A:05:C5:33:19:8F:0C:B1:3A:1E:0B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0CC1
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/242F3C4C376111EE8929A02E4AD9E6FC.roa
Signing time: Thu 10 Aug 2023 09:34:45 +0000
ROA not before: Thu 10 Aug 2023 09:34:42 +0000
ROA not after: Sat 10 Aug 2024 09:34:42 +0000
asID: 49468
IP address blocks: 102.129.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Sep 2023 10:09:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3265 (0xcc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 10 09:34:42 2023 GMT
Not After : Aug 10 09:34:42 2024 GMT
Subject: CN=64d4af35-95d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4d:94:65:1a:ec:56:08:12:ec:9a:0d:30:b3:
ee:3b:73:e9:5e:8e:f2:c2:ff:8f:8c:2a:35:ed:46:
01:65:f6:3f:81:25:b8:f5:a8:45:1f:b1:6c:e0:cc:
44:e1:a9:78:6c:75:b6:f8:fa:9f:b6:b3:40:7e:f6:
a6:ec:40:5b:39:13:94:a9:a2:ce:62:32:d5:49:dc:
10:bc:dd:0c:18:f5:64:d8:32:9e:be:eb:31:70:e4:
d4:c8:c0:06:a7:4e:b7:9e:f5:d9:97:8c:23:02:13:
a0:8c:42:50:58:90:c0:72:d6:4a:69:e5:ae:40:dc:
49:7d:a4:82:18:a2:18:60:32:47:87:8e:fa:52:65:
af:65:2b:5b:b9:e4:55:9d:03:50:d0:5d:1d:dc:31:
86:e7:01:b4:24:19:66:b1:01:fb:dc:f0:9c:e8:3c:
fc:aa:44:41:5a:09:75:c8:17:0b:ed:8b:dc:09:b5:
3a:dc:53:9e:c7:27:15:2c:40:2e:de:8d:78:eb:6f:
36:13:93:f6:3e:15:de:e8:ac:50:a6:4b:4e:48:ed:
29:65:22:9a:7a:f4:de:a9:1d:3e:59:c0:91:d5:56:
05:19:27:88:5f:c8:4c:33:c3:d9:6d:a6:2f:1c:e4:
ad:8a:43:97:ab:60:75:4b:9e:13:bf:64:06:fb:19:
3a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1A:72:98:60:93:4F:DF:25:5A:05:C5:33:19:8F:0C:B1:3A:1E:0B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/242F3C4C376111EE8929A02E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.157.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:76:26:a9:bc:97:38:d8:07:61:3c:75:41:ac:2b:00:39:59:
ae:fd:18:3f:7d:d0:6f:c0:4c:4f:78:8e:b2:3d:25:5b:a6:76:
dc:60:08:ae:56:d1:d3:d4:45:fb:52:00:16:68:1c:45:eb:6c:
c5:d3:07:4c:07:de:13:64:f0:bc:19:4a:8f:f4:09:f8:c4:ea:
68:13:be:35:a7:dc:45:4a:6d:73:e1:e2:85:9f:54:1a:b9:d9:
0e:2a:2f:37:2b:91:2f:ec:d2:71:23:31:e2:c5:5a:41:e8:0d:
b1:c6:0a:77:7b:b0:0a:03:4b:82:cd:85:a7:d9:6e:bb:b8:0b:
08:b9:ee:a5:42:47:97:b9:a2:ed:1a:71:67:73:8b:f5:53:3a:
d1:1a:80:65:57:1d:95:98:c4:dc:ed:42:f7:22:46:c8:a1:8b:
74:65:9a:24:59:e1:16:bd:0c:79:81:b0:81:36:51:5b:d7:22:
de:3f:50:c4:bf:69:c7:23:44:5a:6c:f1:ae:c2:59:9d:40:9f:
70:63:85:5b:f0:27:f7:e8:60:c7:75:89:92:0b:32:92:67:58:
2d:77:54:2d:53:07:fa:b1:73:35:5c:ae:0e:79:d9:27:2e:34:
db:36:26:af:89:c5:a9:5b:9d:ba:05:01:50:ce:2d:c7:53:00:
56:3e:fb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org