Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/684CC3E8058B11EE8C3AFE674AD9E6FC.roa
File: 684CC3E8058B11EE8C3AFE674AD9E6FC.roa (raw, json)
Hash identifier: NDN6TE7np7x/Md6yCzahdmKTcxId4wl5uYQwsTaPYqg=
Subject key identifier: 15:19:D4:4E:4C:08:1E:A7:49:DE:78:52:45:D1:F1:6A:C1:68:4D:73
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0BDD
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/684CC3E8058B11EE8C3AFE674AD9E6FC.roa
Signing time: Wed 07 Jun 2023 23:31:20 +0000
ROA not before: Thu 08 Jun 2023 23:31:16 +0000
ROA not after: Sat 07 Jun 2025 23:31:16 +0000
asID: 834
IP address blocks: 102.129.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Jun 2023 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3037 (0xbdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 8 23:31:16 2023 GMT
Not After : Jun 7 23:31:16 2025 GMT
Subject: CN=64811348-622b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3f:98:71:a0:58:b3:f1:b8:b6:b1:1d:8f:06:
96:ec:ef:e4:1d:74:e5:0d:1f:60:d4:a8:11:49:9a:
c1:13:e7:2f:d8:d1:9c:9d:da:f6:b8:18:ae:e3:5a:
c9:b0:0b:e4:cc:c1:12:6d:9c:a1:f0:78:47:f8:5a:
91:a5:0c:44:4b:d6:8c:f7:f5:62:94:c9:a1:43:05:
94:55:ff:4c:64:ce:46:65:30:6a:d4:7f:40:5e:ad:
e3:3b:01:f5:56:34:61:38:36:c3:61:89:ee:1d:af:
0e:4d:6e:b6:8c:d3:f0:68:09:98:c0:df:cf:9a:a7:
37:92:6e:84:84:39:d1:04:d9:8c:16:c2:d0:5e:13:
7e:b8:6d:ed:87:c9:f2:3c:72:e8:db:cd:b6:86:5d:
ba:1a:4e:cd:cd:98:27:f4:5a:8d:f7:f1:32:b6:af:
da:f3:dd:6c:31:2f:a9:ab:2c:bd:94:5f:c1:e1:a4:
df:87:fa:80:43:c1:1f:c3:27:fe:6e:a4:db:d6:20:
8d:7b:83:bb:44:8a:fb:21:f9:7e:76:b5:de:d8:35:
46:b0:0e:37:f9:30:8a:6b:31:39:81:4c:37:0b:48:
4c:c3:45:0c:c0:e7:ae:c7:28:23:73:5c:f3:e4:ee:
ce:33:60:6e:53:93:3b:b9:3e:26:01:16:a2:82:f9:
0d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:19:D4:4E:4C:08:1E:A7:49:DE:78:52:45:D1:F1:6A:C1:68:4D:73
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/684CC3E8058B11EE8C3AFE674AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.203.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:b2:3a:6f:09:38:c7:c6:5b:02:90:f2:ee:5e:20:17:6f:c2:
ee:75:6e:5a:89:69:79:15:d4:6a:c5:ef:ac:f9:89:4d:2c:fb:
df:af:02:9b:43:f2:70:13:33:97:51:90:b1:eb:09:e7:9a:e3:
62:52:51:df:58:db:12:1d:80:75:05:85:0b:a7:bc:72:bb:6c:
0a:34:9b:a9:19:36:97:6f:8a:f2:6e:8b:ad:e0:09:85:d6:0c:
82:c3:58:c3:9e:64:16:a2:ee:f2:55:22:fd:54:b8:4c:9e:3b:
c1:d7:2f:b3:07:3e:e8:f1:f1:a8:6e:74:bd:b7:80:e5:6f:b9:
31:ea:5d:b3:bc:50:22:4b:f7:50:1e:7a:16:36:b3:2f:b3:77:
e9:ca:ec:8b:2a:e8:63:fd:43:a6:90:18:3e:fc:f5:8a:e9:e2:
7f:55:ac:65:f3:0d:ca:af:29:8c:84:4c:c8:d1:f6:a8:f4:5e:
00:fa:21:e4:16:3a:0e:30:56:7f:36:8e:9e:11:51:46:24:25:
3b:f5:58:09:9a:b1:94:9f:ed:54:3d:52:d0:00:a2:09:b5:ca:
27:8a:cf:88:da:52:81:91:9e:0b:a1:38:68:14:31:95:39:8b:
b7:1a:ce:43:de:f7:69:a6:e4:32:02:da:c2:6c:b8:88:15:b9:
d7:f8:20:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-ams.rpki-client.org