Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3BBFBD821F4611EFA6999C057DDC24C2.roa
File: 3BBFBD821F4611EFA6999C057DDC24C2.roa (raw, json)
Hash identifier: KvpH827KnM/uBxsoLLVHVczJ/7iwMm7PLYtInvUNVj4=
Subject key identifier: D5:B6:42:01:67:59:E1:33:9A:7B:8E:AC:87:64:EF:13:D8:2A:8C:DF
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 10A2
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3BBFBD821F4611EFA6999C057DDC24C2.roa
Signing time: Fri 31 May 2024 12:06:38 +0000
ROA not before: Fri 31 May 2024 12:06:35 +0000
ROA not after: Sun 31 May 2026 12:06:35 +0000
asID: 834
IP address blocks: 102.129.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Jun 2024 15:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4258 (0x10a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 31 12:06:35 2024 GMT
Not After : May 31 12:06:35 2026 GMT
Subject: CN=6659bd4e-43ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:70:ec:a5:06:3a:fc:37:a0:b4:9e:02:d7:ee:
81:ec:16:2f:ac:61:a7:b0:4a:7e:21:7a:ee:a7:1e:
74:cc:ef:5d:66:09:24:90:20:90:43:dd:c8:36:05:
68:bd:8b:64:d8:f9:10:38:66:54:4d:ea:90:24:af:
d0:77:17:18:28:4c:60:5e:b8:a9:8a:c1:02:4f:b8:
c8:f9:27:e7:aa:0b:98:91:71:cc:8d:47:df:7d:fd:
c2:0a:89:00:75:58:ca:b8:0b:bf:bf:77:c1:c6:c2:
d4:47:44:af:71:7d:f7:3b:d7:84:36:a4:0a:17:1b:
53:d4:22:54:f9:e2:b5:75:1b:be:44:40:36:aa:de:
4a:52:57:4c:1d:d1:18:bd:a5:18:87:cf:37:ae:38:
7c:e0:00:82:34:80:40:11:b3:2f:0e:32:60:cd:9c:
1b:11:1b:71:8f:8c:7e:3c:c4:8e:76:08:a2:12:2c:
e1:fc:6a:c9:20:62:ad:21:21:70:ed:4e:be:d9:ed:
ae:66:0b:0e:45:8e:8c:28:ec:ce:29:95:93:06:40:
c7:f7:58:7e:5f:4b:b9:bd:b4:2c:e8:1b:2a:53:02:
02:71:c3:d8:84:dc:c4:1a:ca:5f:d1:4c:04:ec:da:
33:6b:e8:6d:ec:18:1c:30:fb:09:8c:c9:9f:ae:18:
d4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B6:42:01:67:59:E1:33:9A:7B:8E:AC:87:64:EF:13:D8:2A:8C:DF
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3BBFBD821F4611EFA6999C057DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.245.0/24
Signature Algorithm: sha256WithRSAEncryption
26:1a:92:c4:04:99:3e:68:5a:5c:5d:c8:1f:85:d0:72:5e:3f:
5f:7a:9d:c7:af:34:09:5a:8b:f5:96:c6:04:39:bd:f4:08:8d:
08:a7:4d:ef:7f:33:66:b6:4a:13:1b:81:5e:b7:fb:69:e6:68:
18:a2:aa:af:7b:78:d1:96:f1:d9:54:b6:07:84:39:67:55:4e:
da:12:5d:06:22:4d:de:ec:45:2b:00:bb:8b:0d:a9:14:ba:4c:
ac:39:6d:0e:93:ed:64:bb:48:ea:b5:44:97:b3:90:89:10:57:
88:66:99:09:63:2a:01:f6:17:b9:1d:0c:16:a4:83:2f:ae:c4:
f1:1f:e2:d2:c5:74:49:d2:e2:58:1a:83:09:cc:a3:a2:cd:32:
c4:86:0d:94:72:2e:0b:60:bd:28:8e:6e:e8:4f:c6:50:01:ba:
30:64:bc:82:e0:f3:b6:8b:4d:0b:6d:d1:f2:27:81:23:3c:01:
24:00:0d:33:56:99:4e:e8:cb:2c:7c:d4:c8:7d:4d:38:ac:d8:
bb:c3:40:87:94:61:14:9d:ee:8e:c3:22:ae:ea:3a:e3:29:29:
54:3a:69:b4:76:ea:5c:9e:6f:70:d5:70:45:33:47:48:78:ee:
5b:28:c7:9d:51:e8:be:84:3e:79:50:3a:26:7a:fa:64:19:a6:
08:05:cb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 19:32:59 2024 by rpki-client on console-ams.rpki-client.org