Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5328725A8C1911ED88130BB2F1222468.roa
File: 5328725A8C1911ED88130BB2F1222468.roa (raw, json)
Hash identifier: ZG0R9FRGAS3fPhMJRTAT/UCcUixWxfAOTvzzZwDLnTI=
Subject key identifier: F7:64:87:3B:2A:30:FD:D6:05:A1:77:7E:46:7B:AA:86:CF:7C:23:CB
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 09A7
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5328725A8C1911ED88130BB2F1222468.roa
Signing time: Wed 04 Jan 2023 10:19:51 +0000
ROA not before: Wed 04 Jan 2023 10:19:47 +0000
ROA not after: Sat 04 Jan 2025 10:19:47 +0000
asID: 10753
IP address blocks: 102.129.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jan 2023 20:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2471 (0x9a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 4 10:19:47 2023 GMT
Not After : Jan 4 10:19:47 2025 GMT
Subject: CN=63b552c7-1dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d5:3a:df:2c:88:29:ec:6b:78:98:0f:72:2a:
d5:89:90:c1:b4:48:44:cd:5b:9f:e7:7e:ca:f3:31:
f0:a6:13:db:a8:2c:ac:b8:7b:62:a5:fb:1b:fc:33:
86:2b:51:15:e9:6a:b2:a2:f3:b5:91:2c:51:bd:f2:
47:82:29:7a:bf:9a:92:62:2d:7e:5b:9a:3c:c6:b0:
c8:ff:f5:17:0f:18:db:88:33:73:91:36:c7:05:57:
fb:2e:a0:de:a3:08:55:07:d9:d8:27:b2:5c:fc:5a:
6a:cd:d4:5c:a5:55:5b:e3:9b:14:13:94:f0:c3:52:
8b:0f:53:39:a8:b0:40:e7:61:1f:52:48:1d:f7:08:
c1:18:14:13:c2:3c:e7:38:08:3f:95:ef:60:ed:8a:
48:cd:bb:ce:a4:eb:59:10:1d:d4:5b:c7:75:fb:9e:
5c:09:40:ba:4f:70:1e:e4:ca:fa:7d:cc:17:e6:96:
57:18:fa:f6:a5:95:5a:c3:f8:12:07:67:60:4b:d1:
08:bc:cf:6e:74:cd:70:ca:18:ad:00:d0:27:24:17:
48:f9:cb:47:db:ea:46:55:1e:ad:48:0b:f6:29:d3:
ad:8d:dd:bd:ef:6b:9a:68:a5:ba:24:93:60:2a:33:
18:a2:cd:df:43:8b:60:a9:b3:12:ab:fb:b9:8c:bc:
2a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:64:87:3B:2A:30:FD:D6:05:A1:77:7E:46:7B:AA:86:CF:7C:23:CB
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5328725A8C1911ED88130BB2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.176.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:d0:c4:47:86:33:60:62:70:69:dd:a3:3e:57:82:66:14:57:
79:58:45:62:9c:ab:82:77:4b:64:26:f3:04:62:87:27:ab:31:
c7:e3:72:88:7f:2a:9a:1f:b6:ac:6f:de:b8:3d:dd:4f:11:eb:
a0:b8:57:99:47:15:32:cf:08:5d:f9:da:3c:89:56:2d:44:78:
7f:e0:dc:bd:cd:a0:68:e3:ac:07:9c:23:cd:a4:bc:30:e7:c5:
6f:c4:d7:4e:61:6c:9e:5a:23:ae:32:ad:e3:bb:5d:70:c8:4b:
6c:59:58:f9:80:a6:78:77:70:b5:bc:6a:79:19:3b:55:ef:ac:
83:5e:89:37:97:31:61:c3:b1:28:b1:5d:30:cf:59:1e:01:3d:
cd:d2:48:e2:d7:b6:16:01:94:bb:4c:a5:75:db:e1:17:34:91:
17:b7:e1:17:a7:fb:81:b5:ee:8f:de:32:79:20:ab:3c:ea:94:
65:10:b1:59:fa:36:be:32:4d:26:ff:cd:fc:6e:02:76:13:20:
ea:1f:9a:b2:1b:d1:1b:e4:89:07:80:68:ad:d3:8a:2a:bc:7a:
03:7d:3b:bb:22:f0:e7:5c:7a:81:3d:55:f7:1b:c4:4d:06:1d:
44:63:2d:df:c9:fe:34:a4:b5:31:24:ee:c7:53:16:37:29:6c:
5e:96:88:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-ams.rpki-client.org