Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4E226D46640111ED961B5CE9F1222468.roa
File: 4E226D46640111ED961B5CE9F1222468.roa (raw, json)
Hash identifier: 5ezygwQCsoXUoBzQYw/j9KSGiL6LOVhFM2CRZQJz94w=
Subject key identifier: 67:EE:4C:22:4E:2C:55:01:BF:2B:0B:7E:9C:27:AF:BC:EC:C5:35:8F
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 08E0
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4E226D46640111ED961B5CE9F1222468.roa
Signing time: Mon 14 Nov 2022 09:47:09 +0000
ROA not before: Mon 14 Nov 2022 09:47:05 +0000
ROA not after: Sat 16 Nov 2024 09:47:05 +0000
asID: 174
IP address blocks: 102.129.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 07:44:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2272 (0x8e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 14 09:47:05 2022 GMT
Not After : Nov 16 09:47:05 2024 GMT
Subject: CN=63720e9d-b6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e7:b4:c5:af:9c:e6:b0:ff:e4:6e:ba:68:74:
1b:77:9a:c7:87:73:76:74:1a:ae:11:9c:16:02:e4:
d4:29:8d:36:c9:dc:ab:21:59:c7:9e:dd:d1:d8:1b:
0f:a9:2d:91:3a:ff:0d:89:1f:b2:be:74:e9:1e:3c:
13:7d:ba:95:ff:d7:f7:46:49:ea:99:d1:f9:da:a6:
4c:cd:2f:b3:d3:38:c7:c2:3a:2c:56:c6:20:0d:83:
23:20:39:80:7b:38:4f:10:fa:87:85:ca:65:06:11:
61:9d:24:31:10:25:93:b4:83:55:f4:4b:ce:10:f0:
5c:31:01:aa:ea:03:68:41:12:b4:99:c1:59:b9:0f:
2e:60:7f:87:01:c4:b7:e7:bd:98:d9:2c:f5:45:2d:
39:25:58:9c:61:a8:59:51:fb:b5:13:28:d1:38:fc:
e9:db:30:0b:8a:0c:9e:09:14:13:b3:d5:3e:59:e8:
b7:40:d0:92:eb:23:a0:70:dd:42:d4:8a:58:c5:9f:
a1:b0:e3:f1:a8:bd:02:63:01:dc:8e:7d:2b:49:29:
46:5a:4a:26:be:df:bb:e7:0a:0b:0b:b9:30:f8:58:
b8:7e:9c:f8:57:f6:07:e7:60:bb:09:cf:32:39:f7:
3b:3d:82:68:0c:b2:03:29:73:cc:24:49:9d:4f:09:
19:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EE:4C:22:4E:2C:55:01:BF:2B:0B:7E:9C:27:AF:BC:EC:C5:35:8F
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4E226D46640111ED961B5CE9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.252.0/24
Signature Algorithm: sha256WithRSAEncryption
87:2b:56:0f:ac:92:31:95:b0:f9:fe:1c:ae:d0:f1:9b:72:b1:
70:a0:09:90:85:29:8e:5e:11:d8:70:a3:dd:31:1f:31:4b:c1:
96:38:26:15:d4:74:ce:a0:c9:94:04:86:6c:b1:fa:26:03:cc:
92:c5:a8:a4:ef:1f:5e:82:18:27:e3:e5:4e:9f:92:be:65:53:
96:f0:42:8d:9e:4d:af:53:e9:3a:44:7e:f9:57:62:ca:4b:fd:
8e:35:d8:2d:4a:0b:ef:43:5a:5b:bf:a4:f8:85:47:84:74:99:
d2:45:17:86:c5:18:78:df:47:e0:a5:65:c3:75:b4:e2:77:eb:
53:4a:f1:c8:4e:45:08:c7:51:41:3d:c7:06:df:16:48:dd:48:
05:4b:26:8a:82:08:84:16:fc:10:b7:70:41:ab:7f:ae:9b:54:
12:cb:b3:f5:01:32:e2:36:35:ef:c4:bd:45:02:3f:2c:02:cb:
f7:10:8c:47:66:9a:27:04:79:bc:45:df:a5:63:84:34:46:9f:
a3:21:85:71:44:3f:b3:87:2b:f3:78:94:ca:3a:48:2f:7c:4c:
79:86:1d:b8:89:13:c5:66:21:10:d6:ff:4b:b6:d7:90:55:27:
4a:52:3e:4c:b8:7a:f8:83:52:e1:55:fe:65:eb:e3:e3:bf:35:
e7:a8:85:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 10:08:33 2024 by rpki-client on console-fra.rpki-client.org