Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4F96BAB2BB9611EFB1612250762E951A.roa
File: 4F96BAB2BB9611EFB1612250762E951A.roa (raw, json)
Hash identifier: 7O6Wk1aRManHdFM/wrcIFDZ/KbIgT50lGntmiNy9ZT0=
Subject key identifier: E8:57:8A:AC:E8:98:73:5F:C0:D3:89:32:9F:AC:7A:93:82:BE:47:9A
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1319
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4F96BAB2BB9611EFB1612250762E951A.roa
Signing time: Mon 16 Dec 2024 10:12:53 +0000
ROA not before: Mon 16 Dec 2024 10:12:49 +0000
ROA not after: Wed 16 Dec 2026 10:12:49 +0000
asID: 834
IP address blocks: 102.129.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Dec 2024 14:24:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4889 (0x1319)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Dec 16 10:12:49 2024 GMT
Not After : Dec 16 10:12:49 2026 GMT
Subject: CN=675ffd25-de56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:48:87:35:ad:9f:04:6a:31:6f:35:70:9e:
4d:fd:0b:04:6c:33:88:5d:78:ba:cc:c5:7f:06:05:
4b:5c:98:0a:69:65:e8:eb:2f:93:9c:32:c4:b5:3b:
f2:db:46:a6:c2:d3:f4:97:fd:f6:13:a9:9f:72:65:
e1:62:6f:2a:ea:bc:a6:a9:86:20:42:63:45:76:21:
54:8b:65:39:30:6b:09:c6:04:e5:f9:3c:b6:4f:c9:
80:4f:55:79:c9:7c:6b:81:c2:3c:d7:12:fb:ee:50:
2f:60:4b:22:08:30:b7:7c:bc:62:d5:46:88:21:31:
d1:31:6f:83:0b:fe:39:ea:4e:d6:1e:2c:10:69:96:
12:ee:d6:97:69:f2:82:b3:81:a5:98:f9:12:36:8f:
33:02:7e:9e:d4:be:b9:c0:4b:89:ac:46:b0:b1:e4:
43:3c:3b:9d:98:54:ff:34:cd:80:e2:07:eb:72:26:
5a:1e:ae:c6:c9:de:3f:fe:15:66:cd:bc:74:a6:9a:
72:fd:be:b8:a2:60:cd:ca:eb:8f:31:34:ae:4c:cb:
0a:ef:46:ca:25:87:2d:cb:52:db:6c:74:13:55:44:
d3:b5:60:d3:9f:c4:ef:00:ef:d6:6e:67:57:3b:ca:
92:e0:df:b6:2b:65:12:bc:3f:08:12:f4:0e:5d:e6:
75:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:57:8A:AC:E8:98:73:5F:C0:D3:89:32:9F:AC:7A:93:82:BE:47:9A
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4F96BAB2BB9611EFB1612250762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.195.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:d7:a5:7b:06:91:c4:0c:32:0c:2b:51:07:d3:d4:c6:b5:98:
97:65:cb:dd:f7:89:ad:5c:52:c0:d1:20:09:fe:18:07:0a:40:
4e:cd:51:85:eb:39:53:61:68:a0:95:a5:21:87:96:b6:c1:d8:
6c:b6:ed:6d:23:c4:b8:28:46:03:e0:13:6b:63:23:47:5d:75:
5d:ee:43:29:b5:26:67:10:9f:c8:c6:21:9a:31:ed:62:65:1d:
a7:d2:8a:cd:a4:af:c8:e7:21:bd:1b:04:f8:c8:54:ab:6f:70:
6c:cf:8d:77:79:1b:3b:c1:b8:11:e8:8f:da:bd:56:3c:0d:f1:
f3:c7:fd:d5:bd:87:e4:3f:df:01:14:be:a1:f8:7b:60:77:ba:
13:f5:dc:15:4f:6b:81:65:8b:31:56:0b:00:8f:e6:65:69:22:
11:af:39:4d:4b:99:7e:a0:30:34:3d:7f:fa:10:23:e3:63:5e:
ae:7a:9e:10:87:83:e8:94:11:dd:40:04:1c:32:1d:b1:9c:20:
24:a0:02:15:d5:6c:fb:d2:98:22:b2:e0:7b:0c:23:46:6b:c3:
cd:ce:43:a6:60:95:3b:eb:b7:c1:2d:3e:86:ff:35:f3:c2:e7:
ce:92:de:43:c9:52:96:61:02:db:00:ef:8d:b3:ab:31:f3:90:
03:79:55:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:47:29 2025 by rpki-client