Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6216BE766AAD11ED8EAACCBEF1222468.roa
File: 6216BE766AAD11ED8EAACCBEF1222468.roa (raw, json)
Hash identifier: wCNWQX2WEvIGIE8ZluRZePe41lqklHc/+xVH8z1lS9I=
Subject key identifier: 7B:E4:18:9E:2A:AE:42:EA:06:74:3D:CD:B2:9C:22:63:4E:D5:AE:C0
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 08FF
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6216BE766AAD11ED8EAACCBEF1222468.roa
Signing time: Tue 22 Nov 2022 21:34:03 +0000
ROA not before: Tue 22 Nov 2022 21:33:58 +0000
ROA not after: Fri 22 Nov 2024 21:33:58 +0000
asID: 207459
IP address blocks: 102.129.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Apr 2023 11:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2303 (0x8ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 22 21:33:58 2022 GMT
Not After : Nov 22 21:33:58 2024 GMT
Subject: CN=637d404a-2bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:0a:ca:31:d5:34:8f:1b:85:25:a3:e5:f6:
1e:1c:19:8c:69:8b:2b:83:bc:cc:02:13:74:b8:4c:
c3:c2:ec:42:3e:65:a1:51:8f:d2:1a:da:70:98:d3:
48:1c:40:3c:8c:7a:6a:fb:de:7a:b1:53:33:fd:3e:
4d:ff:e9:ac:48:54:9a:fc:32:04:0d:9d:2d:2f:02:
44:29:a5:5f:85:e7:d7:8f:f9:ba:2a:9d:bc:40:36:
9b:6e:d1:96:e0:e3:aa:4c:b1:75:60:30:e4:83:8c:
94:15:83:b5:1f:ee:53:41:3f:2a:ae:d2:0d:c9:a6:
c7:57:91:a1:a3:51:2c:7d:56:f7:4c:5e:9a:be:91:
ec:0c:f3:55:0b:7a:1a:14:a6:82:77:5b:0e:be:f7:
8e:fb:6e:c8:d8:62:f6:08:3b:91:46:38:ff:ad:fa:
39:a0:7c:d4:d4:8c:11:4c:43:0e:47:7c:72:18:47:
d8:50:1c:93:d1:0f:ca:d5:12:46:0d:2e:7f:7d:f9:
3c:e8:c6:f3:49:69:33:59:48:3a:89:8b:a1:73:87:
b2:a3:28:00:4a:01:c9:ce:78:b7:ac:01:8f:f7:49:
8c:fa:81:8a:0c:49:71:79:40:85:a9:cf:ff:b4:cc:
4d:6b:9c:0e:b9:48:ba:be:10:8a:2d:55:8a:fa:1b:
a8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E4:18:9E:2A:AE:42:EA:06:74:3D:CD:B2:9C:22:63:4E:D5:AE:C0
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6216BE766AAD11ED8EAACCBEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.167.0/24
Signature Algorithm: sha256WithRSAEncryption
74:88:9f:6d:89:47:e6:eb:48:23:4b:10:7c:06:ba:9c:74:bd:
29:a3:57:3f:70:b8:7e:42:81:da:03:a5:4b:49:0e:bb:ca:51:
cc:d9:df:b8:ba:13:5e:97:b5:26:44:db:33:18:41:b2:b8:20:
18:98:4c:f2:29:a3:c2:72:db:61:16:3e:9d:fa:2a:ef:54:7d:
67:a4:68:7a:32:e6:ca:00:05:2a:bc:52:96:f6:00:29:ff:e5:
3f:5d:4e:1e:14:c3:ac:27:f6:3e:aa:7b:66:19:63:40:e0:c4:
45:d9:08:5d:9d:43:93:13:8c:d8:7e:25:5d:e5:56:88:89:c6:
ef:4e:02:f7:35:69:8e:58:8d:23:1a:07:64:62:8c:54:fa:da:
fb:3f:19:82:d4:5e:5d:b3:e4:9e:b0:db:ee:00:e1:75:99:98:
00:da:61:cd:f6:70:0e:64:49:1a:6b:7e:de:a3:fd:53:e9:3c:
5c:0f:c3:cc:4a:86:1a:f6:46:cd:da:4c:82:90:db:f9:a8:d1:
56:58:04:f1:c6:e9:92:dc:8c:e6:c4:3d:b1:3d:cf:52:65:04:
a8:f4:d5:1c:37:06:12:a5:67:bf:01:b2:58:b5:fd:2f:e8:93:
1a:e8:76:5f:35:f8:dc:d7:26:05:44:8c:e2:ed:2f:c5:43:81:
45:0b:c1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org