Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6978474C493411EDA2F5FB83F1222468.roa
File: 6978474C493411EDA2F5FB83F1222468.roa (raw, json)
Hash identifier: i4k6aVQPLpslng7JjXN/r8VDTlojQq8rUvLWmEmEuZc=
Subject key identifier: 4B:7F:7B:87:A5:58:53:FE:51:05:8F:9F:F3:06:50:AF:4E:32:53:92
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 084B
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6978474C493411EDA2F5FB83F1222468.roa
Signing time: Tue 11 Oct 2022 07:14:57 +0000
ROA not before: Tue 11 Oct 2022 07:14:54 +0000
ROA not after: Fri 11 Oct 2024 07:14:54 +0000
asID: 207326
IP address blocks: 102.129.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Oct 2022 12:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2123 (0x84b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 11 07:14:54 2022 GMT
Not After : Oct 11 07:14:54 2024 GMT
Subject: CN=634517f1-0d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4a:34:70:c7:2e:39:4b:f6:58:f9:81:50:6e:
e4:1d:90:4a:43:85:bb:fb:8a:73:f8:89:d5:b9:03:
14:68:38:66:c2:88:d2:10:a8:94:e2:49:47:a0:b6:
47:cf:d6:44:13:15:63:92:de:9b:b4:19:c0:e4:b7:
fd:a1:b0:81:96:f7:2f:33:30:37:85:08:19:87:39:
cd:9c:0e:ed:16:2d:d0:30:5b:db:11:47:12:a3:1d:
fd:3b:65:84:f7:c4:bd:18:c0:35:d5:4d:c7:ee:ff:
58:b7:ae:45:89:3e:3d:91:1f:6d:5c:62:d9:c1:b5:
e9:bb:52:f8:c7:dc:9d:33:a2:be:a3:98:00:f0:ed:
63:5c:98:6f:8c:07:25:74:ad:95:bf:f1:8e:08:03:
0c:7e:f6:56:04:11:ea:e5:95:72:e9:57:9c:31:ed:
c1:e2:95:0d:75:9f:af:80:ad:86:a1:f3:7a:6a:ec:
66:b2:39:13:f9:97:aa:3f:df:c5:d0:e8:99:f8:87:
bf:43:80:41:10:f7:f4:20:02:1e:cd:34:14:7f:6c:
94:8e:f0:43:3c:8f:01:c6:fa:b6:a0:36:94:ca:22:
14:f2:18:c2:4b:3e:35:89:53:0f:5a:a1:60:81:86:
52:af:f0:b2:56:f6:a8:c4:6c:30:3e:0f:17:a9:d1:
d4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7F:7B:87:A5:58:53:FE:51:05:8F:9F:F3:06:50:AF:4E:32:53:92
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6978474C493411EDA2F5FB83F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.131.0/24
Signature Algorithm: sha256WithRSAEncryption
39:d6:c7:06:6a:e3:f4:9d:b7:6c:ab:59:70:a8:bd:5c:db:69:
98:57:82:0a:09:79:16:e8:1c:30:74:f3:0d:71:2b:6d:25:72:
af:6b:08:d8:0f:af:b4:69:f6:b0:c4:cf:ac:5b:d7:6e:30:1c:
87:41:d9:bc:fd:fa:6d:3f:dc:a3:60:c2:8d:79:24:fd:d8:e7:
da:cb:1e:9e:fb:56:db:46:8b:3b:7b:55:49:fa:ed:dd:72:05:
bf:b8:51:35:41:1a:9d:df:73:a1:32:ca:14:2b:39:d1:96:58:
15:2c:61:4b:ff:4a:b6:da:81:b0:08:13:f6:8e:d4:09:c9:04:
e0:bb:5e:fb:d6:c3:95:5e:83:3b:2f:19:be:6e:77:20:4f:2e:
76:03:50:9a:10:2d:32:57:c3:4f:9b:5b:e6:78:49:9d:3d:04:
10:c6:da:29:13:e7:74:40:50:1c:3a:36:91:b4:fb:ac:40:5d:
c0:b8:29:f7:34:71:29:81:e6:ca:6a:7d:35:d3:61:99:28:c7:
a0:3e:68:5a:7d:6e:82:e3:98:83:5c:93:36:fe:c6:4d:fa:ec:
f0:f6:cb:58:71:2e:af:ad:ee:26:98:26:f1:b8:73:e6:3e:eb:
c8:54:ce:5e:f4:fc:95:c2:84:ae:79:1f:6a:20:3e:f1:af:b5:
ca:3f:44:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-ams.rpki-client.org