Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4B2C9CC4083911EEADEDBF7B4AD9E6FC.roa
File: 4B2C9CC4083911EEADEDBF7B4AD9E6FC.roa (raw, json)
Hash identifier: 6uWzQqRV7LzH8R4cs4NpvGeGy8GO7IA9BLdhxq8ULZs=
Subject key identifier: 40:81:01:20:1D:3B:B9:F9:43:EF:B4:6B:FD:F2:A4:6E:AF:55:65:8C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0BEF
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4B2C9CC4083911EEADEDBF7B4AD9E6FC.roa
Signing time: Sun 11 Jun 2023 09:21:06 +0000
ROA not before: Sun 11 Jun 2023 09:21:00 +0000
ROA not after: Wed 11 Jun 2025 09:21:00 +0000
asID: 834
IP address blocks: 102.129.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Jun 2023 06:22:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3055 (0xbef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 11 09:21:00 2023 GMT
Not After : Jun 11 09:21:00 2025 GMT
Subject: CN=64859202-2724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:43:04:af:2c:02:19:e5:68:aa:39:cb:78:76:
e8:6d:6d:2f:54:a5:6d:51:a0:6e:2f:a7:e5:04:22:
27:01:e0:6a:0a:7f:88:4c:1f:11:0c:65:67:12:32:
5b:d9:f8:df:db:43:48:f6:d3:c0:6b:e5:6e:ad:cd:
49:ac:4a:5e:51:cb:ef:1c:cb:0b:dc:85:8a:83:2e:
60:0f:aa:66:9e:9f:c2:09:bc:d3:10:32:14:8f:fe:
ee:44:c9:5c:f7:1b:29:54:47:ac:0e:28:31:09:d1:
9d:c4:27:c5:f9:cb:90:f2:3e:59:9e:4b:45:f3:ed:
79:80:1f:c5:68:12:f7:5c:06:81:5a:14:3b:dd:b3:
22:54:80:7f:8d:c5:d0:4b:b2:fc:5a:5f:eb:4e:4e:
b9:18:c1:48:24:e8:bb:05:21:46:b1:ea:cd:f7:d6:
f7:f9:0b:e9:ca:97:cd:15:72:e2:f2:70:fa:25:d2:
69:e2:21:07:30:8a:e7:68:a7:7e:d1:1a:80:ed:1f:
93:59:0a:f0:e0:38:48:01:c6:7b:e7:63:d6:d0:6b:
06:fd:ef:e9:fa:9c:0f:e1:65:a7:03:4a:0e:fd:54:
12:ab:47:13:24:46:df:75:80:47:0f:4f:38:66:dd:
a7:4d:98:15:9a:f8:c2:96:be:a8:ee:01:cd:11:a7:
9d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:81:01:20:1D:3B:B9:F9:43:EF:B4:6B:FD:F2:A4:6E:AF:55:65:8C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4B2C9CC4083911EEADEDBF7B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.208.0/24
Signature Algorithm: sha256WithRSAEncryption
71:4e:02:2d:a4:78:28:c8:85:28:f8:87:02:04:cc:75:3e:48:
45:de:0b:b4:2c:6c:89:3a:9d:3f:e3:5c:b9:37:ca:c8:17:e5:
01:04:81:3d:dc:c0:3d:80:b4:ad:40:4b:95:65:13:f7:7f:e8:
d8:80:72:4d:22:4b:af:2e:11:3e:69:97:c4:59:a2:47:7c:25:
f3:74:cf:36:2a:d4:cd:f8:31:37:0d:1d:8c:df:54:6c:94:51:
0a:94:a3:d1:8f:be:e1:97:25:5a:f3:41:d4:b6:26:5a:9a:06:
e0:c9:d2:8e:ae:1e:f5:21:30:f9:a8:e8:d0:a1:c2:64:b2:28:
a0:26:18:56:b3:df:9c:57:b4:2a:29:a3:2a:60:e6:79:d4:fb:
cb:b9:c5:df:61:fd:16:9d:6b:2c:be:75:81:8b:e0:ab:59:39:
cb:e9:95:6c:15:73:44:0e:e8:f0:87:c8:69:73:48:0b:64:43:
3f:d3:0b:6f:2e:12:5b:77:5b:eb:96:83:43:2b:c4:44:a2:39:
ba:f2:34:f8:6e:ce:71:72:e1:9f:b3:ff:80:bb:13:af:80:fb:
2b:84:be:41:e1:51:1a:23:72:0a:d6:e1:0c:5a:b0:ce:92:fa:
93:78:e8:26:0f:7c:30:4e:cb:87:6f:f4:90:f7:08:6a:09:92:
32:f9:16:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:23 2024 by rpki-client on console-ams.rpki-client.org