Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/32649A84D7D711EEA34058C5775412E6.roa
File: 32649A84D7D711EEA34058C5775412E6.roa (raw, json)
Hash identifier: 7wnbiUGp1OfgWjA+Nabomtc84roW+vJYnXZA5nn7DjI=
Subject key identifier: C2:4E:4C:DA:C1:06:A0:13:E9:DE:22:22:64:84:5C:41:E1:5E:68:D8
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0F99
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/32649A84D7D711EEA34058C5775412E6.roa
Signing time: Fri 01 Mar 2024 14:22:56 +0000
ROA not before: Fri 01 Mar 2024 14:22:52 +0000
ROA not after: Mon 02 Mar 2026 14:22:52 +0000
asID: 834
IP address blocks: 102.129.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Mar 2024 06:39:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3993 (0xf99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 1 14:22:52 2024 GMT
Not After : Mar 2 14:22:52 2026 GMT
Subject: CN=65e1e4c0-aaae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:21:32:9a:57:e2:20:dd:39:a5:8c:40:24:a9:
1c:67:02:b8:8b:20:ef:a4:59:1e:8a:9d:6c:f1:4e:
25:12:14:7b:cf:f2:b8:4e:f1:9a:c0:bb:56:bc:17:
6d:14:b1:4c:97:e0:07:21:e7:07:69:2a:f0:9a:d6:
97:15:30:6b:0a:62:4c:cf:75:21:41:51:e5:aa:5f:
cb:d2:70:30:61:e1:72:cb:4a:69:2c:e3:40:19:96:
a6:40:20:97:65:92:f6:bc:71:45:7c:b7:6f:e4:b2:
f1:d9:91:33:85:1e:02:a8:ef:97:86:f9:bd:48:39:
f0:83:51:91:ff:26:f9:62:eb:7f:c2:2e:c3:b6:b0:
46:8b:45:8d:27:f4:1b:bc:e5:23:5e:ce:07:03:70:
21:9a:b6:cd:52:f0:5e:6e:3f:76:0e:94:0a:06:e1:
16:52:78:f4:da:aa:22:53:15:84:d0:3d:b9:4c:a0:
04:b0:82:ee:82:5a:20:5d:14:3c:4c:10:d8:37:e9:
b1:8f:69:65:d8:7b:6f:ba:02:23:e2:af:2f:4b:43:
4c:5f:ef:d1:d2:6f:fa:d3:ba:60:9a:60:e0:88:f8:
5b:d2:31:fb:a4:2a:03:dc:34:3e:dc:6e:63:3c:c5:
bd:4e:ab:e9:7e:38:c4:f1:cf:fd:9a:c0:6e:67:e2:
aa:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4E:4C:DA:C1:06:A0:13:E9:DE:22:22:64:84:5C:41:E1:5E:68:D8
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/32649A84D7D711EEA34058C5775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.213.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:c7:42:80:a5:5b:c9:1a:51:14:b1:4e:31:67:11:b0:93:d5:
45:c9:46:19:2b:5f:44:4f:8a:9a:3c:66:3c:ba:4f:11:5d:b8:
c5:0c:64:ea:bf:cd:ce:35:05:c3:cb:3a:f4:ad:76:65:14:3d:
c8:e1:c4:b8:84:a4:93:09:04:b5:f4:4e:e6:8e:de:42:d2:0a:
03:76:d5:9b:51:74:41:86:7f:c4:9c:55:f3:b5:6b:7e:42:56:
e6:f8:30:2c:5d:6e:be:68:fc:2f:ce:6a:c3:0d:cf:b1:9b:67:
3c:3c:67:74:56:ad:6d:8f:80:0c:4b:dd:f2:c2:5d:93:b9:23:
3e:22:42:4f:98:eb:13:ef:ad:90:4d:e3:68:0b:aa:b7:b5:b0:
6f:59:fc:ca:42:c9:6a:1e:30:13:e2:b6:eb:54:04:0c:e6:ff:
39:f0:7b:9d:08:3c:5c:4f:12:33:2b:7a:84:62:07:66:95:df:
1f:18:90:6b:72:d9:a0:64:80:e7:2e:f1:87:96:e0:8c:1b:ca:
61:9e:9e:ba:10:65:2e:f1:86:81:5e:a1:42:69:73:6f:36:62:
3c:df:fd:62:9b:1a:8b:35:1a:60:e5:2e:54:6c:15:9f:20:35:
11:6b:1b:6f:0e:88:2f:31:d4:7f:fc:0e:d3:9f:f9:76:6c:b8:
eb:28:fe:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 7 11:00:37 2024 by rpki-client on console-fra.rpki-client.org