Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/33ADB8965A6611EFB45A9B8D762E951A.roa
File: 33ADB8965A6611EFB45A9B8D762E951A.roa (raw, json)
Hash identifier: jZm545jdu3plNpY3nzkx76R6585ebsWw9pWqkWCvLFM=
Subject key identifier: 31:42:04:9C:BA:FC:31:7A:2C:32:0A:4F:33:25:79:80:6C:6E:51:A4
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 11B4
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/33ADB8965A6611EFB45A9B8D762E951A.roa
Signing time: Wed 14 Aug 2024 17:54:07 +0000
ROA not before: Wed 14 Aug 2024 17:54:03 +0000
ROA not after: Fri 14 Aug 2026 17:54:03 +0000
asID: 834
IP address blocks: 102.129.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 09:31:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4532 (0x11b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 14 17:54:03 2024 GMT
Not After : Aug 14 17:54:03 2026 GMT
Subject: CN=66bcef3f-9d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:99:86:70:9f:b5:d1:7d:af:0f:d9:5e:38:c0:
16:d8:71:74:02:70:86:91:db:93:1a:3a:c3:cb:93:
b1:26:d1:fe:81:a6:fe:8a:c1:e6:8c:af:2c:e7:eb:
5e:dd:04:a0:07:17:ad:5e:17:ef:65:7c:73:81:82:
d1:58:32:3b:1e:d2:a9:d5:85:36:c9:0b:95:f0:2b:
df:5d:ea:e9:da:6f:f4:53:9d:fc:84:f2:4e:d6:d7:
cb:e0:04:03:e7:f3:1a:71:86:fb:73:ff:36:4d:68:
6a:50:09:08:3f:15:76:a0:af:ca:7a:e9:ce:f0:fc:
73:55:74:bc:b8:95:30:74:e4:e9:a0:c2:83:c0:88:
86:41:3e:16:02:96:3e:d3:e3:8b:75:26:ea:fd:c1:
cb:c4:03:02:f8:c5:e0:fb:6c:e0:c9:72:d9:d4:93:
84:83:61:d2:48:0b:e3:01:f2:ce:87:16:ec:0f:0b:
e6:63:1f:d0:70:9b:b9:e2:80:16:0d:ce:a4:fe:61:
3d:7c:99:0b:72:91:02:16:5a:58:08:18:3f:92:8e:
98:be:fe:f2:b9:7d:b4:f2:c2:b4:e3:d5:12:0e:10:
60:e5:3d:ac:58:1d:46:f6:bf:8e:f0:9a:6b:5d:4f:
d3:70:12:a2:b7:c1:b4:c1:0c:9e:44:c4:b6:19:ff:
66:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:42:04:9C:BA:FC:31:7A:2C:32:0A:4F:33:25:79:80:6C:6E:51:A4
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/33ADB8965A6611EFB45A9B8D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.245.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:08:27:c4:7c:20:62:25:7e:a0:b5:88:f1:2f:f7:48:8c:6d:
b0:ff:fe:e7:0f:ee:b7:e2:7f:65:e8:c9:d4:91:09:3a:d0:53:
1f:1a:88:cb:69:75:0b:78:ab:4e:b2:ed:e4:64:36:81:3a:ab:
13:99:21:27:40:b5:f4:6a:67:fd:70:22:fe:8c:dd:57:94:4d:
fc:67:4f:15:ed:07:cf:5c:39:13:6e:4b:f8:3f:44:df:b5:25:
23:4e:89:d4:00:3c:78:dc:10:4b:a6:6f:d2:ec:40:0e:6f:dc:
b3:da:46:82:f8:bd:98:3c:bc:47:fa:39:08:e2:c9:74:fb:fb:
9d:e7:82:78:cc:11:87:89:8d:4b:2a:87:0b:52:45:8f:38:3c:
a0:d7:62:8c:a0:22:13:90:e7:de:a5:ed:4d:e0:52:61:7d:da:
bf:8d:8c:bd:26:4c:e3:57:98:fe:7a:00:c6:14:82:60:a0:c8:
5f:1f:57:93:c6:76:48:a0:09:ff:4f:16:36:12:19:90:b6:28:
80:8a:5a:a4:48:83:43:7f:d0:78:97:b9:ed:f0:39:d8:0b:7f:
c2:72:d8:86:5e:7f:cf:e5:8f:28:5c:bc:24:71:26:29:dc:af:
17:4a:fd:e8:f8:76:7d:c2:31:58:a6:58:33:14:fe:83:63:75:
83:9a:e2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:09:59 2024 by rpki-client on console-fra.rpki-client.org