Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/438039F4641911EEB63C816D4AD9E6FC.roa
File: 438039F4641911EEB63C816D4AD9E6FC.roa (raw, json)
Hash identifier: ufeXLt+Q41tEt3TlZxisH4Ki7fb/DtDeSYIq0lXf6AA=
Subject key identifier: 9E:96:08:5D:46:D9:22:A7:1F:38:08:E4:16:18:9C:E8:EB:8A:B0:06
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0DAC
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/438039F4641911EEB63C816D4AD9E6FC.roa
Signing time: Fri 06 Oct 2023 07:23:36 +0000
ROA not before: Fri 06 Oct 2023 07:23:33 +0000
ROA not after: Sun 06 Oct 2024 07:23:33 +0000
asID: 834
IP address blocks: 102.129.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Oct 2023 06:25:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3500 (0xdac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 6 07:23:33 2023 GMT
Not After : Oct 6 07:23:33 2024 GMT
Subject: CN=651fb5f8-0fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d4:ee:3a:42:2e:89:f8:bc:83:db:a4:0f:0e:
8d:5b:9f:c3:6c:fc:35:85:da:3a:4b:2b:5a:57:5c:
e0:c2:76:84:4f:3f:d1:50:c7:e1:bd:6b:fc:92:cb:
7b:2a:f3:c9:fa:3d:4d:4b:09:52:ea:04:b9:65:73:
f8:67:ae:ea:b7:5c:ab:47:bc:d7:31:f4:d7:f2:ef:
75:2f:b5:69:0c:be:32:0b:e7:62:a6:40:1d:a1:2b:
e1:ac:3d:98:6e:76:11:ad:73:54:e0:cd:af:7f:bc:
50:11:c5:55:ff:53:89:0a:9d:15:a9:8d:b2:4e:d4:
53:22:27:2f:19:9a:0e:2c:07:fa:83:d9:c6:ae:b3:
ed:c0:39:54:ca:13:99:80:e2:f5:4c:63:8a:da:21:
27:a6:21:66:a5:e7:66:86:17:e6:30:b6:2a:f6:c5:
23:71:4d:1c:df:a9:94:0c:61:8f:a8:e1:49:8b:c6:
5b:23:88:c2:0f:e1:26:84:03:2c:3a:36:1c:48:6f:
df:20:b6:8f:e5:1f:be:af:8e:fc:2d:e7:eb:5f:20:
24:ec:14:83:31:ac:ac:9e:56:5b:27:77:c7:b4:e2:
c5:71:c0:1c:85:94:60:96:0f:e3:3a:50:33:98:16:
dd:9c:96:fe:ea:23:05:fc:d1:2e:3d:0a:92:97:05:
09:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:96:08:5D:46:D9:22:A7:1F:38:08:E4:16:18:9C:E8:EB:8A:B0:06
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/438039F4641911EEB63C816D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.173.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:63:5b:fb:98:cf:99:8c:bb:78:9c:4b:c5:a3:1d:ea:2c:f6:
67:65:ea:5b:b3:81:7e:f5:c2:22:40:22:40:f5:55:b9:e8:14:
4b:79:54:dc:da:b6:dc:ed:1a:df:e1:a0:9c:91:04:c4:ab:4f:
ce:03:35:4e:be:fe:d2:a7:82:fa:69:e5:dc:52:a5:37:de:99:
0e:90:c6:7c:ef:12:1f:d8:c3:87:9d:49:29:70:39:99:81:17:
5b:45:e5:26:25:ee:9e:c0:a5:00:0d:6f:45:3c:7d:77:d7:d1:
69:d0:4f:84:d8:4e:f5:32:a3:be:16:6d:21:ed:7c:ec:02:d8:
85:bb:94:f4:32:6d:01:31:38:c3:58:a8:86:30:75:2d:72:ea:
bf:20:e4:2a:e5:bb:8c:7f:d3:c7:ed:e4:ce:dc:da:d8:0b:53:
62:9d:b7:bb:48:3b:b8:34:a2:9b:91:73:db:c3:c5:aa:57:42:
d6:37:75:c3:fe:21:60:52:5e:19:2b:11:10:ea:41:71:ee:dd:
e2:59:a9:ca:d8:0e:dd:66:01:ad:02:d0:0f:03:4a:f2:cf:ce:
12:c6:56:b3:92:6e:37:c8:af:87:36:83:d0:7b:d8:1a:db:f2:
89:71:40:21:ce:a3:71:5c:9f:14:df:ba:08:2b:60:ce:43:66:
57:f8:98:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:23 2024 by rpki-client on console-ams.rpki-client.org