Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/31FFC2766BEE11EEAB69B4524AD9E6FC.roa
File: 31FFC2766BEE11EEAB69B4524AD9E6FC.roa (raw, json)
Hash identifier: 5DizvIDdf/L2UkE+9lt8tm6EDZSHi1RpMX7mRH+pjVU=
Subject key identifier: 27:00:8B:61:F4:04:DC:C3:5D:A8:20:94:85:7C:18:C7:94:22:FE:6C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0DE0
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/31FFC2766BEE11EEAB69B4524AD9E6FC.roa
Signing time: Mon 16 Oct 2023 06:35:28 +0000
ROA not before: Mon 16 Oct 2023 06:35:25 +0000
ROA not after: Wed 16 Oct 2024 06:35:25 +0000
asID: 62240
IP address blocks: 102.129.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 06:37:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3552 (0xde0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 16 06:35:25 2023 GMT
Not After : Oct 16 06:35:25 2024 GMT
Subject: CN=652cd9b0-0a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b3:d4:be:35:b6:43:7d:3b:15:aa:d1:16:ac:
06:00:62:f7:e3:7b:04:b1:22:5e:58:13:f8:cb:84:
15:63:9f:54:60:4d:08:5d:9f:1b:6c:00:f3:90:10:
ba:37:d4:d5:2e:58:70:ed:e2:02:45:36:65:34:a0:
68:0f:1d:5e:22:9c:a7:d2:67:f5:2b:30:94:59:be:
b4:4e:91:d5:6f:f9:f1:97:79:67:3f:c7:ff:a7:74:
a6:3c:a4:29:59:b9:f7:cb:69:89:48:f5:ac:ea:7c:
b3:ff:c3:a3:c2:f3:a6:69:3e:cd:c5:c1:0a:3a:62:
49:b7:07:90:4f:bf:77:43:2f:bb:6d:8d:d0:ac:52:
71:cb:23:1d:dd:bf:f1:c9:36:fe:a4:91:ea:10:35:
d6:e2:bc:21:a1:9e:2b:3d:6d:8b:c8:a0:cf:40:e8:
dc:a2:4c:a5:5d:3c:b2:9a:1c:c6:c4:a8:64:01:fb:
87:27:0f:4a:22:d0:31:f3:f0:e0:be:f5:fb:52:f9:
36:ef:14:c5:e0:4d:e0:4d:f1:6d:95:47:43:ab:b4:
cf:05:e2:cf:80:7e:ad:10:58:a5:e1:b7:18:09:72:
27:a4:e7:b1:a5:7f:ad:e9:f3:02:8c:f4:56:54:e5:
f5:c5:51:4d:73:3a:ed:c8:ca:c5:eb:c2:a9:32:51:
1a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:00:8B:61:F4:04:DC:C3:5D:A8:20:94:85:7C:18:C7:94:22:FE:6C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/31FFC2766BEE11EEAB69B4524AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.195.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:da:64:c1:86:75:82:5b:01:b0:81:69:f3:65:bc:a4:2d:83:
87:bc:97:11:42:d6:5b:e6:eb:db:09:27:38:79:30:4e:2f:02:
f8:3a:72:37:e4:a9:6a:e4:10:17:c3:4f:33:40:d9:cd:0c:37:
68:ed:b6:7e:92:36:71:69:f2:f2:94:6d:83:44:c6:48:c2:99:
65:a9:bd:1a:f5:d0:bd:27:18:66:0b:4d:1b:e2:63:ad:f7:f5:
52:0a:73:01:ad:89:26:e9:97:f1:50:04:57:d7:2f:bb:2b:2b:
ae:33:e5:cc:b3:d2:a8:fd:cc:a5:d5:88:d8:6a:03:29:4a:d9:
45:54:2f:f6:57:53:5a:0d:0e:87:e2:8c:13:92:28:bf:3d:a3:
67:b2:85:84:19:ca:2b:a8:fb:b8:38:98:da:06:09:c2:19:49:
d7:29:94:42:33:24:c6:e5:8a:87:1a:08:21:77:e0:5f:9f:0d:
2b:bb:8e:28:dd:88:2b:e1:f6:d7:bd:31:a9:55:2c:5d:b5:f3:
a0:bf:c0:d1:31:51:09:48:9d:c0:f9:22:4f:a9:41:12:cd:22:
81:46:d6:53:32:15:7f:ef:03:b5:aa:34:62:f2:cc:71:79:62:
69:a7:5e:82:a6:31:aa:31:0e:3d:10:2f:0c:c3:1c:51:19:71:
34:a6:02:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 09:06:50 2024 by rpki-client on console-ams.rpki-client.org