Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4DFB645E644511EE80FD7D754AD9E6FC.roa
File: 4DFB645E644511EE80FD7D754AD9E6FC.roa (raw, json)
Hash identifier: BoMztgYwl6OxbL6KzE+RRYjDcvy54HJRpsZEY3Ocs8U=
Subject key identifier: 6D:63:40:0A:2B:E4:75:13:E8:96:8E:39:5B:78:0B:19:B0:E9:28:5C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0DB0
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4DFB645E644511EE80FD7D754AD9E6FC.roa
Signing time: Fri 06 Oct 2023 12:38:52 +0000
ROA not before: Fri 06 Oct 2023 12:38:48 +0000
ROA not after: Wed 23 Oct 2024 12:38:48 +0000
asID: 20473
IP address blocks: 102.129.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 07:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3504 (0xdb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 6 12:38:48 2023 GMT
Not After : Oct 23 12:38:48 2024 GMT
Subject: CN=651fffdc-811c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7c:93:3b:a0:c3:78:8c:ff:41:5f:11:e8:1f:
0a:09:a0:e6:3b:4c:b6:06:34:d1:73:9f:ea:ff:a7:
a3:15:93:c8:94:e5:c4:d8:7c:a6:77:c8:59:09:8c:
b8:ff:af:6f:b3:19:9b:af:cd:38:5d:c0:b0:f9:a4:
4a:59:df:5c:cd:49:b6:95:e8:bf:64:7c:00:c5:03:
52:a7:f5:29:3b:e4:55:e4:d3:d2:20:dd:9c:a9:7d:
c1:16:d9:77:0e:a6:9c:50:79:5d:17:56:db:06:75:
c2:f8:96:45:2f:da:6b:cb:06:ac:f7:75:94:87:7c:
d8:a9:ff:2d:fc:df:ef:80:57:43:29:01:3e:42:ed:
e7:f2:40:31:e7:38:e8:01:d9:15:26:9b:07:d1:a1:
2e:61:c5:a9:80:81:79:60:9e:fe:b1:20:a1:be:42:
1f:b7:ee:23:d0:a2:ae:07:6a:d8:8b:d7:87:c3:00:
47:e3:22:a2:76:0f:e6:38:01:4e:5e:ce:0f:db:75:
3e:b8:23:90:db:e2:bf:18:07:ae:48:96:44:1f:30:
a4:1e:8b:62:48:ce:a7:ab:a3:55:b2:e2:c1:4b:76:
c9:66:cd:85:3a:ed:a3:c0:0f:b5:14:3c:de:3f:0c:
4c:13:3c:27:46:d8:fc:d3:11:16:df:c0:a1:cd:5b:
21:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:63:40:0A:2B:E4:75:13:E8:96:8E:39:5B:78:0B:19:B0:E9:28:5C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4DFB645E644511EE80FD7D754AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.207.0/24
Signature Algorithm: sha256WithRSAEncryption
af:e8:f2:15:74:94:ff:83:67:be:dd:dd:59:d1:86:a7:7f:30:
86:5f:0f:0c:d7:83:4b:5f:1c:98:c7:12:10:fc:9f:d8:fc:a9:
aa:ec:3c:88:f1:bd:9b:d6:23:74:9f:fc:0a:1b:b6:16:24:5c:
6d:37:48:20:09:42:dc:67:e1:83:f6:aa:66:6c:23:21:b1:3e:
c7:8c:9f:5f:82:2d:f2:d6:4b:e9:06:a8:f0:26:81:74:b3:10:
3a:d4:6c:ee:fe:7e:8e:d0:92:9a:62:23:84:ff:05:07:ae:a7:
cf:55:2a:30:63:3e:9d:3e:66:01:f8:21:6b:03:ec:e8:8d:5a:
7a:4d:56:64:2a:83:9c:bd:08:32:ae:64:31:f6:47:7d:7c:57:
2e:af:60:d0:1a:c2:97:b9:d0:71:19:b2:89:b7:95:3c:05:64:
5f:f1:5b:8a:b2:ee:80:9d:4c:54:8a:05:73:75:c9:d8:cb:62:
75:9e:42:e6:16:45:09:6a:f4:9a:73:3d:84:79:e4:aa:f2:25:
c2:4f:79:80:76:0e:5a:90:a3:c5:81:d4:7f:44:5e:e7:44:28:
24:9e:2c:c9:ea:a6:42:cf:7c:9d:3a:9a:3c:29:26:59:57:73:
a7:47:bb:c8:b7:fd:c8:1b:79:87:91:8e:17:98:7b:ed:d3:68:
75:f5:db:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 08:44:36 2024 by rpki-client on console-ams.rpki-client.org