Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2431CC9839E311EF9D6089AA762E951A.roa
File: 2431CC9839E311EF9D6089AA762E951A.roa (raw, json)
Hash identifier: PsDWXih8PhCGyOJsk6w6KmgBgXA/Id5pBrwzvpMakgM=
Subject key identifier: B1:A6:B7:D9:88:A7:92:EE:99:7A:8B:D2:D1:19:29:73:D1:20:FA:2A
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 113A
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2431CC9839E311EF9D6089AA762E951A.roa
Signing time: Thu 04 Jul 2024 08:55:20 +0000
ROA not before: Thu 04 Jul 2024 08:55:17 +0000
ROA not after: Sat 04 Jul 2026 08:55:17 +0000
asID: 327813
IP address blocks: 102.129.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jul 2024 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4410 (0x113a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 4 08:55:17 2024 GMT
Not After : Jul 4 08:55:17 2026 GMT
Subject: CN=66866378-fd91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:78:4f:5c:b5:07:79:64:8f:50:73:73:ad:d6:
1f:b8:72:e6:8a:35:0e:86:6c:ce:a3:68:ee:8f:ac:
c1:98:92:15:de:b1:f2:46:03:1d:34:4b:3e:00:c1:
a2:d1:b5:1d:d0:52:de:ef:71:c9:16:03:79:e6:dd:
7d:05:02:70:98:51:d4:28:85:43:d4:1c:fd:ea:ae:
19:88:f4:db:08:44:fc:4f:84:2e:58:4e:dd:0d:4c:
51:27:8d:50:f6:7c:3b:12:6f:d6:1b:91:51:24:2c:
00:32:fc:db:82:e0:63:1a:c6:63:7f:70:3a:0f:fd:
68:21:f3:ac:bd:83:d3:51:e5:68:d1:e1:d9:34:cd:
58:6d:c8:e5:ec:ec:20:d3:d0:ec:54:0f:ca:28:91:
b3:73:d1:ee:2d:2f:5f:f9:ab:1b:30:d1:69:a4:ee:
eb:d0:e1:2d:a7:ed:fe:37:f1:8e:de:12:f0:18:d2:
ad:f5:42:62:dc:28:88:8a:8a:27:97:52:71:b2:ec:
0c:eb:e5:9e:d2:19:4a:cd:4f:67:f7:68:60:fb:c3:
5a:b8:10:44:aa:75:ae:75:01:c9:32:6c:2e:db:dd:
c6:ad:90:ba:80:5b:b9:0c:be:33:69:0c:28:18:6a:
6b:f6:5e:ff:af:f0:4d:0d:14:62:35:53:17:c1:ab:
39:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A6:B7:D9:88:A7:92:EE:99:7A:8B:D2:D1:19:29:73:D1:20:FA:2A
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2431CC9839E311EF9D6089AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.245.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:c2:26:47:bd:34:b3:78:8a:25:0e:bf:05:38:5f:59:2d:6d:
9c:6a:4b:10:60:d1:85:d8:72:ec:76:43:ee:1f:bf:a7:0a:81:
26:5f:fc:7a:8c:57:cb:09:9b:f1:6d:41:10:f0:67:34:78:d8:
d8:ca:fe:3b:1b:12:cb:b9:b7:9c:ec:36:c8:3f:f9:12:f9:25:
3c:c3:b8:9e:b9:61:a0:b6:e0:5b:0a:ea:42:c5:57:a8:a0:b2:
c5:63:2a:bb:01:c8:22:0d:73:aa:4a:1e:46:f2:b5:11:1a:02:
90:51:39:86:54:e8:31:4e:33:d1:fa:96:65:46:85:15:93:c0:
c7:cd:0f:76:8b:8b:4f:24:d7:58:a3:2f:d1:aa:ee:b0:d9:d6:
e2:79:5a:0e:74:d5:7b:72:ec:ef:1d:93:b8:93:71:b6:8d:52:
c1:17:18:c8:f1:60:b0:00:67:07:08:a2:52:58:a6:e9:76:cb:
fd:be:8d:7f:28:f3:41:cc:ec:27:f9:61:2c:16:b5:33:0a:f3:
b7:fa:60:76:d9:72:5c:0a:03:a3:3e:aa:9f:74:d9:96:d7:c0:
99:f7:36:22:64:a0:9c:25:61:80:60:d9:f8:96:90:83:6a:03:
14:70:02:9a:98:84:43:b2:b9:31:7a:ca:cf:8d:98:4a:d5:8e:
e1:e6:6e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 16:12:23 2024 by rpki-client on console-ams.rpki-client.org