Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5AAADEEC16E711EEB2C032754AD9E6FC.roa
File: 5AAADEEC16E711EEB2C032754AD9E6FC.roa (raw, json)
Hash identifier: zwFXy1GB8TrbO4un/LZY1EhCSjTzu5hCvl6Cb+bR3y0=
Subject key identifier: FB:26:44:4F:2D:0A:88:6D:5C:47:01:3D:C5:80:C0:AD:AB:7A:E4:52
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0C40
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5AAADEEC16E711EEB2C032754AD9E6FC.roa
Signing time: Fri 30 Jun 2023 01:42:21 +0000
ROA not before: Fri 30 Jun 2023 01:42:18 +0000
ROA not after: Sun 30 Jun 2024 01:42:18 +0000
asID: 834
IP address blocks: 102.129.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jul 2023 10:58:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3136 (0xc40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 30 01:42:18 2023 GMT
Not After : Jun 30 01:42:18 2024 GMT
Subject: CN=649e32fd-08c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9b:1a:b3:1f:2d:a7:49:e7:b3:3d:cc:97:7b:
67:b9:24:0d:29:7b:0e:2c:a4:1a:d1:cd:75:3d:b3:
9e:ba:dc:28:62:54:e5:92:77:25:ae:0e:37:e7:14:
6c:fc:78:b6:ea:79:c7:64:1c:b0:6e:89:9e:1b:87:
b6:eb:32:b1:09:52:2d:66:20:c7:6b:b7:05:3e:5c:
60:c3:ec:f9:32:a6:85:79:c8:b8:3f:70:5b:b6:cd:
c0:f6:28:70:4c:5a:00:74:e8:4f:72:9c:99:d8:37:
a2:26:17:ce:68:a2:3d:7e:05:65:d4:83:6f:cc:22:
c4:9f:67:32:f0:36:11:69:a0:7f:16:38:53:9d:49:
e3:d2:37:cb:be:78:61:f4:0b:85:f4:b0:a9:d0:db:
0c:3f:42:03:89:27:6e:69:78:8a:e2:30:91:47:ab:
96:05:1d:62:f0:52:a8:53:bf:be:e9:5b:c5:01:73:
cf:86:1a:50:dc:1c:b8:8b:a3:49:9e:f4:5b:75:85:
f5:23:99:29:ae:30:03:17:53:87:4a:77:10:cb:0a:
30:c5:ad:a4:9d:eb:a4:98:5d:4b:a2:3e:33:99:a0:
d0:d5:27:c6:fa:29:07:93:2f:89:d5:c8:fc:27:41:
14:7b:e1:7e:ea:79:0d:18:ba:20:d2:ab:b7:2c:c2:
c5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:26:44:4F:2D:0A:88:6D:5C:47:01:3D:C5:80:C0:AD:AB:7A:E4:52
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5AAADEEC16E711EEB2C032754AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.167.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:1b:f4:a4:bf:cd:29:0c:89:17:be:be:50:62:25:58:23:ce:
89:1e:83:84:68:31:e3:66:99:27:be:5f:6b:21:25:e3:18:21:
3b:5a:bd:ec:b1:99:12:27:4e:15:e6:b1:57:d7:fa:70:b9:b7:
84:7f:6e:6b:24:ac:62:cc:80:fb:0a:72:63:17:49:f3:bc:2f:
c9:f7:c6:3f:2e:90:6c:fc:d8:32:95:ad:0c:83:9a:fc:6f:5e:
92:9b:12:78:39:69:5e:c7:80:65:b0:97:3a:5a:20:2f:03:aa:
61:af:e2:e7:a6:8c:04:dd:e9:82:75:70:ab:d1:fa:95:36:cd:
13:f5:61:89:01:40:a4:cb:b6:79:c3:1f:22:6b:54:d7:bd:79:
ea:77:10:c3:f7:14:a9:52:63:d8:f1:1e:1f:8d:26:d6:5e:e2:
2e:41:f1:a0:b1:b6:af:b0:b7:c7:8a:10:86:b7:30:5c:68:7d:
e7:a2:0c:38:72:70:a7:6e:39:2d:ae:a0:ec:a4:5c:52:16:7e:
30:6b:8a:3a:12:29:12:de:24:30:da:d1:f4:99:e6:a1:b0:8e:
ce:94:0a:39:45:1a:8d:0a:7e:9c:74:ed:34:a7:60:de:8d:4a:
41:94:b3:be:72:f5:12:fe:ae:e6:6d:93:c1:df:54:be:f6:d5:
11:95:9c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org