Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2D8D16F458A511EF84B5CABE762E951A.roa
File: 2D8D16F458A511EF84B5CABE762E951A.roa (raw, json)
Hash identifier: YVWt2ApHC4pdufGDIJ89juco+/dbBbkv4GN6gwjVmVE=
Subject key identifier: B0:6F:28:A6:C3:0C:05:79:B1:06:76:72:65:3C:F0:C1:D0:95:02:C9
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 11A6
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2D8D16F458A511EF84B5CABE762E951A.roa
Signing time: Mon 12 Aug 2024 12:19:53 +0000
ROA not before: Mon 12 Aug 2024 12:19:50 +0000
ROA not after: Wed 12 Aug 2026 12:19:50 +0000
asID: 834
IP address blocks: 102.129.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 07:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4518 (0x11a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 12 12:19:50 2024 GMT
Not After : Aug 12 12:19:50 2026 GMT
Subject: CN=66b9fde9-a5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:44:74:c6:62:26:d9:84:29:14:b3:12:97:8d:
3e:e3:4a:9e:d0:c5:13:ce:01:a9:a5:4d:65:84:12:
ce:47:b6:4e:6f:91:38:a9:c2:a6:e4:31:82:ab:aa:
3b:f8:b9:26:92:b8:bb:78:60:42:f5:32:55:02:19:
62:d5:c8:6a:00:a1:71:95:17:5c:65:50:f6:55:6a:
f0:fc:05:ba:81:7a:ee:8b:32:19:78:e1:0b:df:8b:
94:1e:fe:b9:bb:e3:a6:0d:68:01:1a:b1:7d:33:06:
2c:7e:80:2c:be:72:d5:9b:b6:87:4a:79:11:7e:d1:
e9:51:a4:29:8c:c3:46:73:76:dd:a0:18:b3:6a:64:
45:8c:f2:41:07:85:78:b4:49:19:8c:30:ce:27:b8:
54:09:ee:b7:c5:2b:c2:64:d1:cb:c0:6c:ae:d6:e4:
19:b4:70:99:ca:37:4f:7a:ea:d3:9e:38:09:4f:41:
2a:04:9c:eb:00:18:6e:5d:9b:42:fa:d9:9f:b7:78:
eb:47:c5:9e:d8:65:1f:61:11:08:ef:1c:18:3a:0d:
f0:14:d7:96:f1:a6:3d:7d:cd:4b:b5:5a:aa:1c:f4:
e6:45:40:93:f3:31:62:fe:bc:ff:56:0f:7f:22:86:
78:de:c4:d9:60:8a:a0:d3:db:73:85:84:92:9e:ae:
6d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6F:28:A6:C3:0C:05:79:B1:06:76:72:65:3C:F0:C1:D0:95:02:C9
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2D8D16F458A511EF84B5CABE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.199.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:8e:41:b2:6a:10:78:81:4c:b1:8a:ce:d3:f5:02:b4:7c:98:
0d:aa:d6:5e:ee:0f:5f:3f:e6:9d:6c:4f:aa:98:86:c6:c5:55:
21:45:48:67:53:e8:b4:2d:ee:83:3f:18:16:3a:dc:72:a3:b5:
c4:89:92:bb:48:5f:f2:5b:fd:47:a5:6d:6c:d7:46:2a:b0:94:
48:a5:cf:a6:9a:26:58:12:95:fa:e5:2e:f2:ec:b0:ae:fb:f6:
34:d5:f6:f2:4e:e9:11:ee:5f:94:03:88:1d:7d:3b:ed:03:c5:
2a:77:dc:f0:fc:d3:e5:3c:ea:35:e9:26:84:d1:31:dc:0d:07:
f0:fe:c7:28:ca:ab:68:6a:69:ce:65:c8:29:67:4a:3a:ae:f6:
84:ed:6e:4d:7d:1d:8f:d9:4d:29:37:e3:02:d5:44:4a:1e:4c:
47:45:65:d9:38:56:a7:b1:66:67:e6:a9:e8:a4:95:78:85:2e:
51:e6:03:10:04:6a:c7:d6:07:16:d4:15:74:cd:b4:38:96:13:
59:f5:3d:c6:63:d2:f8:dd:ea:43:d6:86:a5:b7:54:af:a8:62:
2d:5e:8f:90:67:45:83:c8:b4:b6:28:1a:45:ec:9c:97:81:a7:
71:5e:d0:43:d0:74:96:95:f1:37:9e:25:f2:8e:2e:6c:f9:63:
30:a0:54:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:47:20 2024 by rpki-client on console-ams.rpki-client.org