Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4D381CB0B37311EE8AE3C0C8775412E6.roa
File: 4D381CB0B37311EE8AE3C0C8775412E6.roa (raw, json)
Hash identifier: JvgougyNV4vUM7PXHXrw8yPkGNDlRWndOU5QuZm7Z3A=
Subject key identifier: 39:DF:FD:BE:1A:93:02:63:BE:56:28:77:D8:5E:45:C5:2F:D4:AF:1A
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0EF5
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4D381CB0B37311EE8AE3C0C8775412E6.roa
Signing time: Mon 15 Jan 2024 06:57:09 +0000
ROA not before: Mon 15 Jan 2024 06:57:06 +0000
ROA not after: Thu 15 Jan 2026 06:57:06 +0000
asID: 834
IP address blocks: 102.129.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 11:08:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3829 (0xef5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 15 06:57:06 2024 GMT
Not After : Jan 15 06:57:06 2026 GMT
Subject: CN=65a4d745-f7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:41:bc:d8:5c:78:27:dd:5c:a4:a6:1d:fb:6e:
1e:a7:ed:34:c3:b2:79:e1:f8:1b:f2:44:75:14:dd:
cf:ff:8d:c8:a8:2f:42:79:51:53:ab:15:67:ef:f7:
c5:ad:3b:4f:19:c9:88:bc:02:b0:6d:b7:e0:2f:3a:
f9:90:c7:db:1a:38:59:b4:23:af:03:f4:00:7d:df:
41:2b:91:4e:a7:7d:e5:a9:a0:14:ee:b4:24:91:23:
ea:6f:43:e0:5b:3e:29:73:e0:2d:93:14:1a:d1:12:
98:d6:82:5f:8e:19:f7:37:60:09:2c:71:f2:5d:e9:
97:5c:23:86:32:e5:98:81:12:12:7b:1b:4d:b7:27:
ad:76:d0:23:96:21:5c:92:91:e5:a9:ec:1b:40:a9:
b7:81:43:10:a8:05:c9:ed:c3:ea:52:27:31:b4:a9:
af:9d:28:56:b2:3e:14:f8:86:67:74:5b:82:1a:1e:
81:6f:bd:cc:11:84:e7:50:7e:36:62:72:d9:a7:c8:
78:78:10:6f:4d:35:61:e0:4d:25:fd:58:52:b1:fc:
94:43:c8:39:02:40:23:b1:8d:90:bf:25:ae:de:f4:
eb:fe:73:cb:31:e7:fc:d0:c7:29:39:4c:01:75:ed:
7d:e1:72:d5:4a:25:fc:64:d8:3b:07:d4:15:09:23:
0c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DF:FD:BE:1A:93:02:63:BE:56:28:77:D8:5E:45:C5:2F:D4:AF:1A
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4D381CB0B37311EE8AE3C0C8775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.246.0/24
Signature Algorithm: sha256WithRSAEncryption
08:51:59:15:7d:84:4c:fe:ae:dc:6b:8c:16:7e:cd:ab:c5:ff:
3c:75:2a:0a:13:cd:3d:58:c5:67:f9:b3:e2:be:79:c3:36:2d:
46:da:bc:bd:cf:6e:43:99:d5:ba:b4:73:65:d6:65:7d:69:84:
a9:8f:9c:ae:49:ca:3e:a2:8b:4a:0c:9d:10:c0:a8:7c:9b:aa:
41:0e:15:14:ef:3e:f5:83:58:8d:10:75:94:02:5e:40:28:f2:
18:e1:16:79:4b:6e:ec:94:8c:be:32:8c:c4:7f:03:15:a0:78:
1c:75:57:dc:60:05:6e:25:95:93:0f:a9:86:cd:0a:5d:ec:f3:
e5:0e:fe:87:32:98:fd:54:87:6c:8f:a1:99:1f:f5:c3:46:00:
5e:d2:06:18:54:f3:ef:cd:39:47:da:2a:30:fd:a6:58:c4:88:
13:bd:2a:d8:4c:ce:89:f3:c9:be:6e:ca:34:44:61:56:e9:4d:
c9:5d:2c:70:e1:56:f9:a7:22:98:11:72:0f:70:00:dd:50:56:
d4:44:84:0f:e0:c0:e5:5f:91:cd:d4:48:6b:f4:ed:bd:e3:79:
67:7b:f7:bb:25:55:dd:3a:98:fc:ce:a5:6f:c8:d8:a9:39:40:
14:ed:92:fd:57:b6:9e:b3:e0:86:8e:a0:c3:fe:08:ac:d3:3a:
95:26:54:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 17 15:53:11 2024 by rpki-client on console-fra.rpki-client.org