Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2DF3536C045D11EEAE21AD594AD9E6FC.roa
File: 2DF3536C045D11EEAE21AD594AD9E6FC.roa (raw, json)
Hash identifier: TborV26FpHdb6wM4kmz01PPwYj5WPxTCBmBZOVEqMLc=
Subject key identifier: B6:DC:98:90:FF:D5:41:46:F6:BD:79:D2:C3:EA:F3:1D:A0:EE:6A:F6
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0BCB
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2DF3536C045D11EEAE21AD594AD9E6FC.roa
Signing time: Tue 06 Jun 2023 11:27:54 +0000
ROA not before: Tue 06 Jun 2023 11:27:51 +0000
ROA not after: Sun 08 Jun 2025 11:27:51 +0000
asID: 6939
IP address blocks: 102.129.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Jun 2023 11:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3019 (0xbcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 6 11:27:51 2023 GMT
Not After : Jun 8 11:27:51 2025 GMT
Subject: CN=647f183a-4aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c7:3e:a8:94:5f:5f:44:b8:2a:05:0c:39:1e:
d4:77:42:9a:3c:7c:83:ee:07:1a:01:2d:5f:91:34:
4b:bc:47:4d:67:c3:dd:5e:45:d0:9d:08:ea:19:7a:
d0:96:88:80:6a:d2:75:26:65:0b:99:d6:ae:54:e7:
14:0c:c5:d6:57:7b:ba:6d:8e:9d:a4:7b:36:92:28:
72:44:ab:fe:37:43:2f:15:8c:f1:d0:fd:48:1e:81:
a4:75:ea:c1:cc:9a:63:ab:94:41:64:1e:83:05:f6:
70:84:f5:37:3f:db:a8:4e:14:be:4a:87:ff:74:4b:
b3:c8:d4:5d:d8:66:3e:8e:77:34:e3:1c:4b:99:19:
13:d1:40:0c:5e:03:0d:bb:3a:35:d3:6e:ac:24:38:
af:7b:4b:9a:da:5d:c9:c8:13:eb:e5:c9:88:8d:31:
6c:38:be:e6:4b:f4:91:d0:bb:4d:a9:28:c6:69:0b:
48:23:bf:8a:47:04:c6:2d:f7:bc:fe:68:b1:63:d5:
88:d2:d0:d9:ee:bb:95:e8:1d:5a:7c:6f:e7:25:3f:
3a:a4:81:c9:45:d5:24:0b:1a:1e:f0:f6:49:c2:a6:
92:11:da:34:38:a5:23:7e:bc:18:be:13:3b:65:3c:
b0:5f:f3:1a:cd:18:fe:c9:47:63:cf:a1:20:87:d8:
5b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DC:98:90:FF:D5:41:46:F6:BD:79:D2:C3:EA:F3:1D:A0:EE:6A:F6
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2DF3536C045D11EEAE21AD594AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.246.0/24
Signature Algorithm: sha256WithRSAEncryption
33:ae:8b:78:db:18:cd:5f:0b:ee:be:3c:a4:04:f0:49:a2:f9:
c8:72:ea:2c:44:e0:ee:c4:33:63:e4:5e:2b:aa:1c:a6:89:87:
7c:84:87:7c:b5:d2:e3:c0:88:1c:e7:56:fd:90:1f:2a:b1:f4:
81:b1:6a:b6:df:ab:d3:ad:68:72:0c:7d:c4:c2:6d:3d:81:88:
40:ec:a9:74:f3:ad:44:50:96:a5:7f:d3:1c:f8:92:cf:8d:e2:
da:11:fc:b0:32:e4:fd:f6:58:f0:8a:c8:ce:b5:19:cf:c4:90:
29:32:38:91:ef:ea:b1:93:6d:71:c4:f1:34:7b:80:1b:78:ad:
36:d9:72:58:ef:0f:f2:a0:fa:29:65:8d:22:fd:e0:c2:a0:fa:
7a:55:23:97:0c:fb:61:ed:02:57:38:0b:4a:cf:89:5d:c1:99:
4e:bb:1f:0d:fb:e8:16:2a:77:52:41:a8:c3:7b:a6:75:5c:32:
7e:cd:5c:4f:62:e4:50:4a:e2:7f:d2:2e:d5:74:87:99:fe:12:
a5:25:ed:27:d0:e9:c8:c6:b0:59:a9:3e:b6:50:61:62:35:09:
da:ff:3d:d9:c6:95:d7:d8:36:09:ba:28:0f:9c:86:28:5d:bd:
25:a4:c1:8c:6f:b5:49:1d:b8:9c:59:00:09:6a:46:d4:fb:16:
ce:01:50:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:23 2024 by rpki-client on console-ams.rpki-client.org