Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5B41CB943B8B11EF81AF6BB1762E951A.roa
File: 5B41CB943B8B11EF81AF6BB1762E951A.roa (raw, json)
Hash identifier: WW8GhFS2ELsx2PRLid+6dCrPY9uFuokJVVkI9CO7w/0=
Subject key identifier: 4E:31:66:44:43:57:D8:5C:BA:AF:F6:7B:7F:17:1D:BB:08:5F:D4:C4
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 114A
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5B41CB943B8B11EF81AF6BB1762E951A.roa
Signing time: Sat 06 Jul 2024 11:31:59 +0000
ROA not before: Sat 06 Jul 2024 11:31:55 +0000
ROA not after: Mon 06 Jul 2026 11:31:55 +0000
asID: 834
IP address blocks: 102.129.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Aug 2024 10:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4426 (0x114a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 6 11:31:55 2024 GMT
Not After : Jul 6 11:31:55 2026 GMT
Subject: CN=66892b2f-aa70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bf:05:af:cb:83:c4:25:7d:97:31:71:7f:72:
6b:56:18:9f:df:83:32:12:2e:bc:93:d7:b8:68:2e:
a3:4b:71:18:1b:42:d2:77:2f:d5:52:5f:c1:5f:a3:
b3:10:80:3d:79:87:13:d1:58:f9:16:b2:73:5c:40:
e2:d8:e0:08:1d:81:11:da:77:1b:4f:44:51:d1:d8:
a1:cc:38:52:7b:56:09:b0:ba:46:83:a3:6e:a7:13:
1b:27:6c:d7:43:de:a7:e4:33:10:1e:70:ed:ec:6e:
a9:33:84:7e:b5:da:3c:7f:6e:f8:4e:7f:89:b1:98:
f2:51:44:ad:17:5d:43:86:85:6c:7e:54:3e:5f:fd:
76:3d:89:be:31:6a:13:d6:44:01:45:95:f1:4f:bb:
ec:45:7b:71:f7:e3:60:d4:ff:67:8b:7f:17:0c:b4:
c1:e0:bc:85:99:1f:ed:9c:26:93:39:ba:90:0a:e7:
e5:58:57:0c:ae:dd:04:16:16:86:96:c6:78:33:ae:
4a:61:63:7d:53:15:68:a3:27:08:2d:da:15:07:e2:
14:1e:e4:fd:2c:72:5d:71:a3:2d:6d:ae:80:b1:7a:
c9:7d:65:f3:06:8d:1b:f3:c5:68:cf:45:f0:50:44:
91:eb:b2:ff:43:2a:34:d0:eb:e5:90:20:0e:d0:62:
ff:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:31:66:44:43:57:D8:5C:BA:AF:F6:7B:7F:17:1D:BB:08:5F:D4:C4
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5B41CB943B8B11EF81AF6BB1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.184.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:7e:bd:12:6d:81:c8:26:e4:60:74:a2:dc:e6:83:58:9c:8c:
a5:9a:ba:67:17:e5:98:7b:2e:31:21:84:0e:e6:02:b0:8c:c6:
13:7d:d1:63:a9:b6:18:6a:cb:77:66:6a:de:49:bd:37:f1:b2:
ba:f5:c1:3f:3d:fa:69:bb:02:7b:f9:b2:0a:4c:c8:02:ff:76:
78:09:c8:63:96:d4:40:fc:86:50:0f:3a:29:f3:03:88:9c:de:
ad:2f:e3:16:97:f1:12:d7:44:21:85:6a:a3:88:c3:ef:1d:4b:
48:87:23:39:95:5f:00:67:0e:0a:7a:d8:fb:ba:e3:aa:bd:53:
fa:7b:64:c7:46:97:8f:bf:0d:b5:1a:77:0c:2f:a6:04:b3:4b:
54:04:f0:20:8b:e2:43:f5:ed:b8:25:41:a0:42:fd:18:a2:9d:
fc:7e:ca:77:51:3b:cd:05:ab:e8:9b:7d:3a:63:99:da:a6:df:
ce:11:9d:58:09:4f:4c:9b:7d:58:78:98:27:88:17:ba:0f:fd:
a4:e2:46:d6:cd:99:e9:7a:23:b0:85:b1:83:69:d5:50:e7:38:
fe:d5:b7:32:30:a4:d6:0f:83:e0:3e:e3:89:16:68:de:fe:12:
0a:dd:cf:f7:e6:ea:14:f0:75:60:81:10:00:09:28:64:7b:19:
72:3a:d9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 13:20:17 2024 by rpki-client on console-ams.rpki-client.org