Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6453160474F211EDB24CDB7EF1222468.roa
File: 6453160474F211EDB24CDB7EF1222468.roa (raw, json)
Hash identifier: /uoXE2PoeuDPJL9cO/GGkYd0+IMsUNoWWEbSw/o/UFE=
Subject key identifier: CC:89:BD:1E:24:41:3D:23:4A:7A:25:7A:72:06:38:60:B9:53:4C:D8
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0931
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6453160474F211EDB24CDB7EF1222468.roa
Signing time: Mon 05 Dec 2022 23:13:13 +0000
ROA not before: Tue 06 Dec 2022 23:13:10 +0000
ROA not after: Sat 07 Dec 2024 23:13:10 +0000
asID: 207279
IP address blocks: 102.129.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jan 2023 02:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2353 (0x931)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 6 23:13:10 2022 GMT
Not After : Dec 7 23:13:10 2024 GMT
Subject: CN=638e7b09-a632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e3:55:2c:d4:6a:8e:af:05:f0:b3:23:7b:2c:
75:15:1e:1b:e4:1d:55:40:60:5d:a2:3e:12:0f:2c:
30:a3:6d:71:19:5a:3b:d9:66:fa:d0:8e:27:0a:66:
59:97:58:6a:26:ae:7a:90:5f:86:7e:09:b6:e2:46:
ab:76:cc:bd:ee:99:23:c3:37:14:d5:61:9c:8f:a0:
3a:7d:a5:dd:c1:ba:10:e3:78:58:b7:a4:2b:7c:59:
db:8f:40:f7:a4:97:1c:3a:4d:b6:60:15:22:a3:41:
f1:09:a5:3b:19:df:08:5a:3a:c7:d1:46:1b:3f:c7:
14:28:cf:a0:61:b3:74:1c:92:4c:64:5b:e1:1a:03:
ef:36:4b:51:13:26:26:1e:f8:c7:b7:a3:dd:1c:3c:
4e:c8:c6:4f:04:f1:94:3d:93:93:bd:25:95:50:3d:
1c:8e:e3:19:c5:60:85:e9:78:4f:d1:c3:dd:98:b1:
eb:2d:af:0f:aa:e1:d2:f4:46:34:aa:ce:5d:8d:a9:
59:e8:96:a5:74:01:03:d8:d3:c4:83:ae:b0:c3:5d:
b3:ea:b2:3b:31:3c:d9:34:15:23:87:bb:64:1a:30:
08:07:ae:be:c5:e1:0e:d6:1b:03:e9:29:72:ab:6f:
4f:af:fa:0e:95:fa:79:d3:7e:6c:dc:1a:f5:4b:e2:
18:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:89:BD:1E:24:41:3D:23:4A:7A:25:7A:72:06:38:60:B9:53:4C:D8
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6453160474F211EDB24CDB7EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.173.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:5e:88:46:18:43:70:a4:d9:dc:8a:75:67:d2:72:dc:0b:af:
16:d7:06:3e:b1:b6:ad:14:2d:cb:e7:ec:3d:96:8f:60:42:99:
df:53:5a:4b:60:82:5d:b4:d1:99:b5:98:53:e0:b1:d0:d6:9b:
11:49:0f:82:2a:5a:f2:02:ff:66:82:31:4f:e9:40:dd:a5:b2:
38:c4:e3:bd:03:6d:ff:da:11:52:32:95:5d:25:72:01:5e:e6:
77:a2:7d:e0:d4:b2:10:62:0c:45:c2:d0:57:0d:77:0d:b1:92:
8b:3e:f8:24:b6:79:a2:30:36:5c:34:30:57:9f:a5:19:0a:c0:
3b:33:e3:be:a1:8b:50:9a:fc:b1:87:07:d9:69:16:2b:0c:d0:
46:2c:1d:73:cb:14:f6:07:1e:ab:26:75:f7:5c:68:d4:0a:ce:
94:11:72:d7:bc:9f:49:c4:30:a2:41:f7:f2:d6:0f:0b:75:eb:
55:a9:ab:43:a3:a8:d0:5a:75:04:b0:bb:59:91:80:32:ed:72:
f7:33:c5:8b:d6:14:44:94:e2:5d:30:c1:54:28:c9:f7:56:c2:
90:cf:53:20:ae:d8:4f:28:ff:63:4f:f5:6d:7d:ab:ec:1c:e3:
f0:d4:2e:71:54:fa:ab:5d:a6:47:bf:04:af:a2:ca:67:3c:79:
82:86:e3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org