Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/42209A6E50C311EDB2AD8E9AF1222468.roa
File: 42209A6E50C311EDB2AD8E9AF1222468.roa (raw, json)
Hash identifier: PPXin1WKSgGTuG0etAxcd+Yc4I/a1SXbKmHMdSNhGHY=
Subject key identifier: 47:29:C6:98:FB:9B:D5:52:F4:EA:B4:A0:1F:83:5E:B9:D0:71:F4:A6
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0863
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/42209A6E50C311EDB2AD8E9AF1222468.roa
Signing time: Thu 20 Oct 2022 22:05:08 +0000
ROA not before: Fri 21 Oct 2022 22:05:02 +0000
ROA not after: Mon 21 Oct 2024 22:05:02 +0000
asID: 133973
IP address blocks: 102.129.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 17:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2147 (0x863)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 21 22:05:02 2022 GMT
Not After : Oct 21 22:05:02 2024 GMT
Subject: CN=6351c614-75a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b1:c7:49:88:14:a0:2c:34:37:e9:16:82:8a:
96:17:5a:f1:b0:47:2b:7b:a9:5d:51:f4:71:37:57:
f9:07:43:40:bf:42:49:e9:88:32:88:b6:e5:a2:1c:
5f:75:48:00:7d:d3:33:2e:f1:52:db:12:15:2d:94:
2b:ea:56:0d:4c:90:bf:c9:08:d0:67:38:ee:d2:0f:
f0:ec:c1:25:15:cb:85:1c:22:4d:cf:cd:2a:6d:e7:
87:a0:de:8b:3c:bf:d8:bb:66:32:8d:68:e9:1b:f0:
e9:05:21:6a:d6:81:43:96:a7:fd:b1:06:0e:48:4e:
6d:1b:c3:d0:bb:b5:7e:df:5f:f6:82:aa:ac:fd:e5:
a2:c1:c3:b9:ff:74:4b:32:35:56:e8:d8:4b:9b:3a:
2a:69:a0:ea:0a:d2:16:b3:04:40:0a:29:30:c2:e9:
65:de:98:db:5b:8e:e4:4e:2d:a9:eb:e3:f1:9b:ba:
3a:10:a6:69:21:cc:a5:79:2d:2a:fc:30:72:a2:d5:
ef:35:11:82:af:82:63:9b:eb:a1:f2:6e:e8:12:9b:
ed:d3:fc:bc:4b:42:b7:e4:7c:03:61:46:57:20:af:
0e:a5:22:b4:e1:52:75:c7:b3:9d:c7:b9:2f:32:22:
84:a5:c3:9b:83:03:8e:29:23:da:1a:f9:5f:38:9a:
cb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:29:C6:98:FB:9B:D5:52:F4:EA:B4:A0:1F:83:5E:B9:D0:71:F4:A6
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/42209A6E50C311EDB2AD8E9AF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.130.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ca:55:76:d7:5c:c8:bf:d9:46:4e:36:1d:2d:61:12:e0:6e:
56:be:37:c5:57:19:d6:3a:3c:a2:08:e2:ad:6b:cc:6d:87:b1:
d6:1a:1f:d9:95:14:78:ba:2d:1f:a5:a4:49:9a:87:90:67:d1:
95:67:e1:de:30:07:5b:6e:63:39:3b:96:8f:b8:19:c6:2a:7b:
f8:c5:57:35:c2:c3:77:db:a4:0f:59:67:64:70:4e:2d:ee:df:
0d:ae:90:10:e5:75:84:f4:19:a3:30:a3:c5:e1:ec:4b:62:65:
98:15:7e:82:65:c3:8c:f5:3f:0f:49:16:45:00:dd:be:59:67:
ed:5e:5a:41:88:55:bc:58:c7:c5:74:9d:3a:2e:90:4b:64:54:
da:3a:ef:68:05:6b:5c:6a:1b:af:94:c8:f7:18:d6:5d:b7:f8:
f1:6b:e0:ec:9e:43:f1:50:e1:9e:14:87:51:f2:79:d1:f9:90:
b4:de:40:6c:15:a1:0c:9e:84:56:64:19:47:74:74:09:72:3f:
b5:c6:6a:40:fa:03:6d:5c:d6:55:37:05:12:e4:1d:1c:51:38:
1c:4a:19:a6:6c:45:4b:10:bd:ee:c6:fb:3e:33:4d:a0:59:1e:
a7:36:8c:31:20:d6:38:60:5f:1d:f0:b0:f6:61:42:d5:d4:16:
0c:6e:f3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org