Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2E825A4C7C2E11EDA6AA28EEF1222468.roa
File: 2E825A4C7C2E11EDA6AA28EEF1222468.roa (raw, json)
Hash identifier: RzFVOFbg9kWk3+QG9uYMm1/+zTfKYijxY9m4vc2nR20=
Subject key identifier: 15:FF:63:E3:9A:2A:54:E1:E2:1C:12:FF:55:AE:8C:FB:FF:87:25:86
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 095D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2E825A4C7C2E11EDA6AA28EEF1222468.roa
Signing time: Thu 15 Dec 2022 04:08:51 +0000
ROA not before: Thu 15 Dec 2022 04:08:47 +0000
ROA not after: Sun 15 Dec 2024 04:08:47 +0000
asID: 60721
IP address blocks: 102.129.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Jan 2023 11:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2397 (0x95d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 15 04:08:47 2022 GMT
Not After : Dec 15 04:08:47 2024 GMT
Subject: CN=639a9dd3-a787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:79:d3:4f:de:ce:7a:b5:0f:64:2d:33:c9:c2:
7f:11:4a:09:77:c4:cc:b9:29:10:41:3a:9e:c8:48:
69:28:65:b1:42:d1:bb:7e:0d:74:16:54:28:dc:7f:
4b:2d:a8:51:9a:7a:70:95:90:2e:09:4d:50:c6:35:
81:18:f8:c2:7c:ae:ca:df:74:0d:fe:6a:ac:d3:c3:
50:2c:ed:ce:3d:55:52:70:f0:e8:3e:23:79:40:3b:
c3:3a:b8:be:94:28:2c:79:72:7a:68:d8:20:30:21:
1a:fd:de:ec:dd:71:bf:64:4e:76:92:66:79:70:35:
5c:0e:2c:b3:58:fd:18:7b:79:5c:45:69:41:13:38:
a5:58:0a:db:7a:1e:b1:ef:89:63:32:86:ec:cf:b2:
be:fc:99:7c:54:70:bd:94:42:97:4d:e7:09:77:42:
fa:8e:0b:55:cd:32:ef:41:a7:89:f7:49:b7:29:0c:
91:21:e3:ac:b8:ca:21:39:7b:2a:0f:62:c0:d1:1c:
7d:b0:b6:9c:5d:04:04:bb:8c:27:0d:be:a9:e4:28:
18:d3:d1:b9:78:85:8c:a2:45:32:ef:ab:6a:fb:38:
db:f2:a4:7a:cc:13:7d:30:5d:83:3a:b1:63:f0:f4:
44:d7:1c:26:db:7f:90:c7:6f:b5:7d:b8:8c:30:9a:
4e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FF:63:E3:9A:2A:54:E1:E2:1C:12:FF:55:AE:8C:FB:FF:87:25:86
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2E825A4C7C2E11EDA6AA28EEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.244.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:9b:d4:68:63:af:dc:32:35:2a:4c:6f:f8:50:db:50:1e:5e:
95:4c:94:7d:fa:c2:7c:18:8b:0c:bc:c9:d5:d8:46:9f:a3:c1:
de:6e:a4:c3:19:a8:b5:ca:00:26:c3:17:1a:3e:a4:12:28:75:
66:ec:da:1d:cf:b4:f4:11:5a:b0:8e:ea:83:88:8f:96:e2:8c:
b8:4d:13:31:f1:76:aa:e5:f2:19:33:0f:9a:59:d5:bb:78:e1:
59:92:f1:3d:38:cb:9f:90:05:57:dd:58:49:d8:df:a0:9c:db:
4d:f8:ba:5e:44:54:99:25:1f:0f:39:68:a0:b9:e9:86:11:18:
98:3f:30:04:77:3a:ff:82:05:01:a7:21:4f:6d:02:58:43:91:
bb:a3:e0:82:bc:e3:ab:89:f7:70:44:51:16:30:b0:c8:a6:da:
ab:22:ab:bd:ed:b9:39:9f:e5:ee:15:ee:03:d2:cb:0c:fd:41:
a6:bf:8d:2a:29:a4:a1:1e:9e:8e:74:c0:12:1f:9a:ad:f2:48:
fa:f2:5f:84:c5:3b:32:d8:13:8f:aa:ea:ff:1e:14:a4:e3:38:
3a:e4:cf:3f:23:65:24:aa:7b:71:33:fb:60:31:63:49:50:78:
a9:13:75:45:36:80:ee:95:c8:40:9b:a8:eb:a1:e0:66:dc:c7:
9a:de:51:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:23 2024 by rpki-client on console-ams.rpki-client.org