Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5615DC72876E11EE84ECC6304AD9E6FC.roa
File: 5615DC72876E11EE84ECC6304AD9E6FC.roa (raw, json)
Hash identifier: AMwKbCJRs1DmhhRcTwS15zwcogGoqm893PMEz2lSeC0=
Subject key identifier: EE:23:3A:93:16:FA:6D:1A:00:AA:55:F9:40:B6:0B:5E:66:35:A8:DF
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0E45
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5615DC72876E11EE84ECC6304AD9E6FC.roa
Signing time: Mon 20 Nov 2023 06:30:46 +0000
ROA not before: Mon 20 Nov 2023 06:30:42 +0000
ROA not after: Tue 19 Nov 2024 06:30:42 +0000
asID: 834
IP address blocks: 102.129.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Dec 2023 19:12:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3653 (0xe45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 20 06:30:42 2023 GMT
Not After : Nov 19 06:30:42 2024 GMT
Subject: CN=655afd15-a4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1e:89:b4:ad:34:ae:ec:f2:39:12:58:b0:38:
41:b8:c1:78:e4:5d:e3:b9:22:39:36:72:6c:98:ab:
31:f5:6d:19:92:97:0a:76:c2:7b:4b:cb:b0:41:49:
8a:ee:be:f8:f3:38:b2:25:98:34:45:3c:a6:a1:ae:
d9:78:35:c0:51:93:c1:0c:91:37:88:4f:5a:8d:6e:
71:0b:98:c0:5e:ea:90:5e:a7:5c:3c:d5:44:15:8f:
c6:d7:bf:82:f7:17:b3:ac:d1:5f:2b:d5:63:8a:77:
59:cd:db:2a:92:bd:d5:d6:55:3a:55:bd:3e:8e:61:
6c:16:34:78:47:6d:fc:89:72:83:48:18:4f:c4:e9:
44:e2:97:0c:d8:2c:fe:52:c0:c2:8c:49:ef:ea:50:
3d:69:f1:ef:62:87:ff:d6:df:c5:0d:90:d9:5b:e9:
4e:75:ee:c4:b8:9c:c5:0d:48:f8:11:a9:84:a7:b1:
8a:23:1f:ed:1b:12:cf:d7:e5:31:04:be:fb:6d:1c:
65:02:21:11:80:56:df:12:9f:01:d0:de:79:2c:63:
e4:35:85:11:ad:ac:bf:e4:cc:cd:dc:02:93:fc:67:
e2:84:40:6a:67:94:71:ad:c8:53:aa:87:d7:f9:36:
80:15:f8:ed:51:67:86:c0:27:b7:c1:b3:7a:73:97:
c5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:23:3A:93:16:FA:6D:1A:00:AA:55:F9:40:B6:0B:5E:66:35:A8:DF
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5615DC72876E11EE84ECC6304AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.137.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:a1:65:6e:e3:5a:e1:4a:df:cd:8c:7c:51:33:12:66:40:91:
db:8d:69:58:e1:d7:0a:63:73:f3:10:d5:5a:f1:8c:db:23:8c:
29:b2:a9:9a:e5:09:78:0d:b9:21:a0:00:88:99:49:ca:d9:72:
fb:4f:0d:fe:cd:b4:98:79:84:9a:49:84:91:6c:9a:55:3f:bc:
38:37:6a:99:a9:ff:e1:40:ad:5b:c8:38:d2:3d:db:c2:fe:5f:
f3:a2:44:66:de:98:93:0e:6a:bb:8b:69:ff:10:63:27:ec:8a:
9c:1f:bf:8f:99:c1:14:53:08:fe:02:da:8b:94:af:5b:37:21:
49:02:aa:10:ab:03:4e:6b:0d:dd:d1:3e:cd:01:1f:39:91:1b:
c9:48:da:df:47:3b:df:82:d1:dd:f8:7c:f7:25:e3:af:22:e4:
19:a5:24:69:df:b7:41:e5:d1:e1:a4:f9:64:cf:5e:96:c5:b0:
3e:96:bf:1b:06:ad:a4:69:21:28:1f:c2:82:f4:36:76:46:64:
b9:c0:cf:48:cc:ef:0b:0d:2d:5e:a5:2a:a3:1b:f2:37:df:50:
2d:ea:b0:14:06:03:3d:96:96:fd:57:50:3e:3a:00:2f:3d:34:
fe:2d:09:49:ac:43:bf:2a:e1:57:77:c8:40:e6:9a:30:a6:b6:
32:f5:f9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-ams.rpki-client.org