Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/50F1FF40E73E11ECAC9ACEFAF1222468.roa
File: 50F1FF40E73E11ECAC9ACEFAF1222468.roa (raw, json)
Hash identifier: HEFIFmWpeIvzDd9UO4V2s1bZAhpUiUDAG3PKfq65nxI=
Subject key identifier: B9:51:D8:8B:7B:9F:04:8A:3C:A6:A5:EE:CE:AC:84:92:24:09:9F:C1
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0687
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/50F1FF40E73E11ECAC9ACEFAF1222468.roa
Signing time: Wed 08 Jun 2022 15:18:57 +0000
ROA not before: Wed 08 Jun 2022 15:18:54 +0000
ROA not after: Sat 08 Jun 2024 15:18:54 +0000
asID: 40676
IP address blocks: 102.129.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 Mar 2023 10:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1671 (0x687)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 8 15:18:54 2022 GMT
Not After : Jun 8 15:18:54 2024 GMT
Subject: CN=62a0bde1-5207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5f:72:e4:0d:af:ec:28:3a:67:6c:38:10:ee:
ac:86:88:26:b5:bf:a6:f1:8a:53:0f:75:13:04:ad:
5c:a2:ad:f2:c9:3d:5f:90:32:7d:e4:a1:41:45:c7:
14:6c:57:43:2f:2c:d7:90:86:a5:67:ad:04:5a:69:
a6:30:59:d0:35:b3:4a:5b:d2:60:d7:4a:7f:94:7c:
77:d6:4f:01:29:2c:bc:85:ab:7b:d2:1d:c3:e4:ff:
b4:c8:4a:64:2a:b9:89:79:17:dd:95:11:58:14:35:
d0:64:75:a1:55:fc:7f:1a:df:af:a2:20:b6:ba:2c:
35:4c:3b:5c:89:b2:a6:f2:40:2b:c9:39:95:87:b5:
bf:15:01:79:64:2a:e0:e6:7f:14:62:a9:1d:1a:ff:
81:51:08:73:a2:d0:2e:dd:59:f9:ca:7a:1c:34:47:
8a:79:25:50:41:e9:65:8f:1b:22:95:12:30:cc:2e:
4b:cb:ea:97:75:20:1b:95:38:64:03:30:f8:b0:6f:
13:df:40:88:13:cf:b4:84:d4:ed:2f:49:0c:e6:0d:
ae:cf:87:cf:75:d8:23:58:47:1c:a6:d1:78:b8:47:
f8:6c:7b:49:42:c6:cf:86:3b:5f:00:63:92:6c:82:
91:36:30:5e:94:cc:53:87:25:79:59:59:9e:e9:9e:
af:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:51:D8:8B:7B:9F:04:8A:3C:A6:A5:EE:CE:AC:84:92:24:09:9F:C1
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/50F1FF40E73E11ECAC9ACEFAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.212.0/24
Signature Algorithm: sha256WithRSAEncryption
04:01:f2:29:30:ab:a5:e1:2b:71:a0:9e:b9:12:57:a7:67:de:
43:ac:56:bf:f8:9a:99:ff:44:22:b9:ae:2b:a6:d2:fa:f5:ec:
d4:5a:40:5e:c3:09:4f:ea:5d:42:04:2e:f7:e6:48:9a:3c:f6:
0c:aa:ae:20:fd:11:cc:98:dd:72:cc:eb:f6:86:b1:55:e7:d7:
53:82:da:53:6e:4b:e4:09:24:8f:6b:6b:6f:3e:67:fc:35:19:
4d:c6:1f:23:ca:30:94:fd:ba:93:2e:11:a0:28:6f:ce:bf:33:
77:b4:19:32:65:d7:d2:e2:94:01:3f:aa:3d:33:89:18:05:9f:
25:0a:f8:7e:65:ed:b4:65:42:8e:8d:67:2d:e3:60:2e:a8:74:
42:60:50:fe:2c:ce:c2:33:33:e4:81:65:97:04:6c:51:b3:c4:
30:27:71:ff:61:02:31:39:82:5a:e1:57:66:f0:7f:98:7a:54:
04:01:b7:36:9b:8d:52:4e:ca:84:e2:ef:45:bd:32:63:3a:7f:
e0:85:6d:ca:d6:07:62:bd:9f:a6:10:0e:f7:49:d4:0d:05:7b:
c7:22:fc:89:44:2c:50:74:6c:8e:b0:b5:10:02:2c:7b:cb:79:
05:ca:85:df:76:56:51:45:c7:a8:95:77:01:e1:ef:46:55:64:
62:e9:8e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org