Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6962E244403B11EF9094FA64762E951A.roa
File: 6962E244403B11EF9094FA64762E951A.roa (raw, json)
Hash identifier: OafchjZeRJsJIEdcs43EudIbKVGvmT4JIH9p/us+i1Y=
Subject key identifier: C6:E1:41:FD:E7:56:6F:53:E8:0E:F2:F7:49:67:37:1B:15:04:4A:F3
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1158
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6962E244403B11EF9094FA64762E951A.roa
Signing time: Fri 12 Jul 2024 10:42:19 +0000
ROA not before: Fri 12 Jul 2024 10:42:15 +0000
ROA not after: Sat 11 Jul 2026 10:42:15 +0000
asID: 27176
IP address blocks: 102.129.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jul 2024 08:26:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4440 (0x1158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 12 10:42:15 2024 GMT
Not After : Jul 11 10:42:15 2026 GMT
Subject: CN=6691088b-38c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0d:a6:c9:ef:d1:48:60:57:f6:7c:09:20:e2:
b5:48:26:4a:22:70:77:42:d8:fb:ba:73:7b:75:95:
2f:e3:cc:51:d3:f3:58:72:fe:6d:ed:a8:17:29:6f:
fb:67:6e:cb:ce:dd:c6:0a:94:0a:bc:ef:b7:8b:ab:
59:6f:a1:3e:c1:50:af:71:0f:7f:66:d6:31:a1:be:
95:af:e4:a3:97:96:7a:a1:86:e4:d3:7e:41:39:7e:
dd:12:29:06:72:6d:f9:35:8b:cf:72:ae:e6:dc:e5:
56:91:c3:0c:41:b7:27:33:c7:e7:9e:fa:39:f9:d7:
e9:a2:ed:30:ab:3c:03:b5:d8:3d:f8:fb:bc:77:e0:
82:b6:b7:52:d4:1b:35:db:c4:a6:e6:2e:a9:ec:35:
38:5a:0f:ca:b7:08:14:86:67:38:0e:41:6f:ab:ff:
40:c4:f4:a6:d9:20:15:57:8d:aa:b5:47:a7:f2:3d:
04:7e:28:7f:1f:b9:e2:c6:2e:c1:75:0c:b7:a5:35:
51:a4:db:36:95:15:e5:03:5e:60:9e:cd:b1:6c:e2:
89:51:e4:ec:da:29:84:dc:53:f8:5c:13:93:30:86:
e3:a4:4e:5f:51:fc:ec:10:f4:44:1c:e6:fd:2a:8d:
6f:ca:3f:c4:d0:49:6b:61:61:6f:a7:33:d8:9b:e5:
97:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E1:41:FD:E7:56:6F:53:E8:0E:F2:F7:49:67:37:1B:15:04:4A:F3
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6962E244403B11EF9094FA64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.240.0/24
Signature Algorithm: sha256WithRSAEncryption
37:e3:06:b3:26:17:6b:27:f6:c7:31:eb:00:eb:d2:fa:d3:af:
8f:ec:99:d6:ee:b3:7f:1f:22:e1:cc:9d:e8:e1:49:e0:35:2e:
d8:03:b3:c3:bc:75:a2:30:f5:ed:cc:da:53:b9:11:c3:e4:9a:
5e:3e:ef:d1:3d:29:19:86:17:cf:45:3c:68:d4:69:0b:f9:38:
13:fb:4a:6e:fc:16:78:a5:67:3b:37:37:83:cb:78:6c:d4:6d:
6d:7c:37:79:82:f3:9e:db:90:84:0c:81:93:dc:0c:83:3e:5c:
e0:8e:bb:81:18:97:6b:54:27:76:0a:f4:b2:c4:03:2d:95:63:
73:8a:37:0d:7a:e4:16:4d:c9:42:7d:34:b3:4c:64:5d:00:6c:
fc:fe:6f:3b:ca:18:59:9d:64:f7:f1:22:89:a8:f1:f3:b3:e4:
20:c3:af:37:8f:4c:71:12:93:c4:63:44:38:c6:0c:2f:95:f0:
7e:f2:21:19:06:e9:1f:ad:54:16:e6:25:5f:c9:b6:08:62:7f:
06:3f:39:22:e4:ae:fd:d9:69:ab:28:5d:84:87:af:00:58:e6:
e1:97:5c:05:bc:81:b4:6a:2f:84:95:f3:01:d3:b6:19:51:84:
21:4d:90:7d:40:a5:2a:b2:b6:93:4d:9d:15:5a:f4:1b:a9:f3:
8c:67:05:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 12:25:25 2024 by rpki-client on console-ams.rpki-client.org