Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/56550F34308611EFB654CFAD762E951A.roa
File: 56550F34308611EFB654CFAD762E951A.roa (raw, json)
Hash identifier: 6YThGW1uyMqpnRmm5dV9yIVVtLXpVvZSMP/OtC2jBk0=
Subject key identifier: EA:EA:F2:6E:9F:02:11:FD:FC:73:9A:1E:72:08:25:6D:56:BB:F6:02
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 110E
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/56550F34308611EFB654CFAD762E951A.roa
Signing time: Sat 22 Jun 2024 10:58:20 +0000
ROA not before: Sat 22 Jun 2024 10:58:17 +0000
ROA not after: Mon 22 Jun 2026 10:58:17 +0000
asID: 11170
IP address blocks: 102.129.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jul 2024 05:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4366 (0x110e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 22 10:58:17 2024 GMT
Not After : Jun 22 10:58:17 2026 GMT
Subject: CN=6676ae4c-3df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:d4:52:05:2a:48:c4:c3:45:b6:6d:b2:85:
c2:ce:74:84:ae:76:b4:5c:81:79:94:47:83:b3:ed:
f0:13:65:2d:42:30:5e:9f:f9:ca:5f:94:40:d0:68:
5c:10:83:d8:bd:95:7e:bb:4b:62:3a:4a:91:10:4f:
5c:41:91:b0:ac:f7:19:0c:cb:54:5a:41:1a:52:3d:
fe:b9:aa:cf:69:bf:4d:49:14:00:26:5e:07:51:e5:
10:28:72:70:7a:c0:78:bb:cd:dc:4b:90:de:04:80:
39:40:79:3c:1d:dc:00:ae:c2:e4:7d:bd:a6:ef:5d:
0b:3c:74:d7:42:b9:c5:cd:99:8e:d8:b1:38:88:44:
25:93:34:c3:a7:bf:d9:c2:d9:89:fb:fe:d9:6e:01:
52:ab:4a:60:f1:8a:74:49:a9:9c:7b:3a:1b:5e:04:
5b:58:99:15:72:2b:47:e2:6e:6d:46:06:4b:53:89:
2b:e2:47:53:8e:2d:5f:0f:b6:d7:6e:2a:80:b9:22:
9d:86:2b:02:73:8b:88:2d:09:64:59:9f:83:33:f5:
f1:f7:55:86:4b:8f:a9:0c:74:17:a9:46:b3:a5:1e:
70:a1:65:db:b6:b5:39:e7:f8:bd:02:bf:7f:78:2e:
d7:f0:07:27:03:0f:49:ec:8d:ee:7a:8a:9b:68:6f:
4d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EA:F2:6E:9F:02:11:FD:FC:73:9A:1E:72:08:25:6D:56:BB:F6:02
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/56550F34308611EFB654CFAD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.251.0/24
Signature Algorithm: sha256WithRSAEncryption
69:de:eb:54:7c:d2:68:81:54:a7:b3:d5:9c:fd:a5:0d:12:cb:
6e:07:84:27:e8:b8:c6:8f:25:20:d0:f2:6e:d2:91:de:71:38:
e7:1d:7e:8e:ca:d0:e4:5a:d7:fe:38:5e:e4:d6:e4:d5:0c:7f:
1e:fb:d4:62:33:06:f0:79:d5:69:c5:da:da:5c:22:40:f4:ae:
81:de:e8:14:42:08:dc:82:a6:35:79:0f:c1:d4:a4:85:9d:d1:
22:bc:69:41:57:c5:8b:78:bf:54:e9:c9:42:1d:45:b2:d5:cd:
15:e7:36:4f:15:77:f4:d0:63:fd:ce:b8:f7:be:a3:40:e2:cc:
1f:7c:6a:7d:4e:60:0f:fd:e0:b1:e2:7f:42:2c:5d:25:3c:8c:
d5:39:59:bd:a3:a4:92:3e:ff:21:7d:7e:4d:94:6f:1c:75:2d:
f3:a6:5e:61:72:d3:b2:31:ed:f0:33:ba:e5:64:41:80:e7:69:
ec:ed:2f:d0:b2:12:ee:9f:c8:8a:92:45:b1:fd:8c:71:dc:c7:
a8:a6:20:01:9e:c2:4d:33:f6:80:3c:0c:c6:b3:a6:d3:f5:57:
db:c6:e7:b4:b3:b6:20:51:c4:3b:8a:ad:be:f6:58:d4:aa:25:
d0:48:86:57:78:d1:0f:8a:34:99:bd:17:18:8b:ee:9d:77:7c:
11:3d:be:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 06:53:55 2024 by rpki-client on console-ams.rpki-client.org