Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/52A06166998411EE9E887268D25BE465.roa
File: 52A06166998411EE9E887268D25BE465.roa (raw, json)
Hash identifier: tGfa+aG9aJGVWBZNZfKvJMQFgso0kJPwojFUz6xRq9g=
Subject key identifier: 36:E4:8C:48:11:B8:97:96:CD:E3:DA:A0:2A:14:AE:31:A1:84:75:F5
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0E7D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/52A06166998411EE9E887268D25BE465.roa
Signing time: Wed 13 Dec 2023 06:53:30 +0000
ROA not before: Wed 13 Dec 2023 06:53:26 +0000
ROA not after: Sat 13 Dec 2025 06:53:26 +0000
asID: 834
IP address blocks: 102.129.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Dec 2023 11:38:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3709 (0xe7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 13 06:53:26 2023 GMT
Not After : Dec 13 06:53:26 2025 GMT
Subject: CN=657954ea-0ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e7:48:3b:9f:b2:65:d5:88:a9:90:32:ee:bd:
54:20:6e:7a:25:6d:da:33:80:70:56:aa:b2:39:0b:
1a:fb:ae:a0:68:8c:69:1c:db:4f:74:e1:40:24:30:
f6:08:b5:52:3d:0c:2b:21:38:3f:3f:25:f2:f7:2f:
3e:d7:ac:96:34:13:da:cb:00:55:a3:4f:82:6b:91:
01:37:3d:94:9d:e5:31:06:6a:02:5c:82:9b:95:73:
42:34:d4:53:08:3a:ef:9d:6b:cf:65:f2:b5:4c:6c:
51:d0:f1:e3:ab:9e:78:6c:60:2f:ab:bb:19:2a:4c:
16:f3:25:28:20:8c:83:bd:5d:79:03:9e:dc:78:3c:
a8:97:ec:03:c6:61:72:d9:03:dc:18:47:2a:ba:d7:
9d:7d:de:13:bb:a8:4b:6f:0f:70:61:57:54:0b:d7:
22:c7:95:84:e2:2e:7a:96:77:57:6a:b8:d3:0c:2d:
4b:46:68:27:7c:10:0e:2c:d6:25:73:9f:40:a5:86:
c2:aa:99:12:1d:43:a3:51:a0:fd:86:c3:44:8d:4c:
a2:57:28:57:fd:ff:6f:c2:dc:cb:84:3a:78:41:33:
52:84:4e:2b:8f:e4:3d:60:a7:61:db:60:b8:f0:25:
7a:4d:f5:6f:d8:c3:6c:55:4b:b8:d3:5c:37:3f:c9:
fa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E4:8C:48:11:B8:97:96:CD:E3:DA:A0:2A:14:AE:31:A1:84:75:F5
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/52A06166998411EE9E887268D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.246.0/24
Signature Algorithm: sha256WithRSAEncryption
05:80:9d:cb:c4:63:f2:8e:48:1c:a1:ea:f3:dc:52:0b:fb:9b:
c5:53:18:a1:6d:9c:02:79:ab:4a:59:a3:f4:bc:12:a4:31:fe:
eb:c6:56:21:e4:1a:e5:dc:9c:9c:a8:9d:9f:e1:54:a6:4e:11:
83:ec:a7:68:72:fb:d0:93:c9:17:11:dd:2a:9d:46:70:a0:05:
6b:2f:72:5c:4d:cf:9f:52:95:23:c8:9b:be:ba:04:11:46:cd:
1c:1a:c7:df:39:56:a6:99:e1:dd:b0:ae:b1:03:e4:dd:4c:f2:
e5:6d:63:d8:f4:3d:e6:ad:8e:3a:af:3d:a2:3c:a0:90:7f:54:
4c:c7:4c:b9:02:fe:82:93:16:25:e5:fc:8c:77:d2:06:a6:41:
b8:3f:72:45:35:a0:97:8b:c8:3b:79:d8:ac:58:3c:8f:f5:72:
0a:44:a6:60:00:45:0a:8c:5c:67:54:9a:64:1e:7d:75:99:c0:
79:7f:2f:af:0d:83:c5:95:92:db:a7:27:a0:ab:66:40:7b:47:
c4:df:d4:e0:b6:f9:aa:5e:f5:74:3d:c6:3b:b6:33:a4:e7:80:
9e:85:96:aa:ae:3b:16:ae:f0:62:8a:05:31:f2:da:f1:44:64:
59:e9:7a:14:75:45:3b:28:16:d7:51:87:20:82:95:20:61:d7:
e4:91:a1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org