Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/69F7167AD05D11EDA63B67EEF1222468.roa
File: 69F7167AD05D11EDA63B67EEF1222468.roa (raw, json)
Hash identifier: G5aeELVmH29rVf/DQlab8A9k9uvVaid4rBuLlTo2FL4=
Subject key identifier: 23:35:B4:48:7D:6F:39:E5:DD:FE:2C:02:90:56:D8:C5:ED:3C:4C:16
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0AEB
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/69F7167AD05D11EDA63B67EEF1222468.roa
Signing time: Sat 01 Apr 2023 07:18:35 +0000
ROA not before: Sat 01 Apr 2023 07:18:29 +0000
ROA not after: Sat 05 Apr 2025 07:18:29 +0000
asID: 834
IP address blocks: 102.129.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Jun 2023 11:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2795 (0xaeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 1 07:18:29 2023 GMT
Not After : Apr 5 07:18:29 2025 GMT
Subject: CN=6427dacb-66dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0b:51:d2:62:ce:12:7a:a3:ad:ff:55:a9:1e:
fb:47:16:4d:f5:ea:f1:44:47:29:13:25:d0:ec:da:
89:77:18:c9:99:aa:92:11:63:a6:09:23:4f:0d:0c:
f7:1f:5c:5e:0c:aa:17:56:86:8a:23:66:02:62:a1:
a0:b5:b5:fe:4c:01:42:3f:cf:d3:23:19:16:cb:f1:
4a:62:00:d2:05:7d:01:69:5e:d3:d4:fd:c1:b3:f4:
2b:55:ee:a1:fb:b6:ce:36:c8:ae:a2:02:8d:a0:78:
89:20:1d:25:65:73:db:0c:61:89:d3:1a:15:69:5d:
c6:9b:84:a8:2f:13:fc:67:56:8b:af:fc:1f:29:60:
0f:6f:1c:f1:17:a9:4e:43:19:1d:89:ef:0c:54:b3:
64:89:82:ba:af:1a:ba:d0:e5:7d:49:1b:65:92:a0:
54:aa:75:e8:b4:0b:4c:d9:53:2e:72:ec:17:ca:a6:
70:dc:24:51:3c:ec:be:7d:d9:2c:c0:dc:20:c7:c8:
01:6e:b8:f9:79:ea:b9:34:51:89:3c:7c:06:06:19:
63:56:1d:e1:dc:ed:50:6b:ad:4f:64:61:d3:41:37:
d5:6a:e4:07:84:3e:41:37:60:72:2a:4f:d6:74:e8:
f3:a2:96:81:96:78:9c:39:03:19:70:7b:be:58:2a:
ca:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:35:B4:48:7D:6F:39:E5:DD:FE:2C:02:90:56:D8:C5:ED:3C:4C:16
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/69F7167AD05D11EDA63B67EEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.203.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:bf:94:e3:3d:20:fe:e2:9d:f4:4b:5a:76:28:79:cd:92:24:
e5:be:a6:96:93:0b:67:02:97:fc:db:1b:90:21:df:0a:59:9d:
32:a4:a6:ae:c5:30:7e:ce:bc:18:e7:2b:48:71:17:49:fc:5a:
8c:e6:2c:e4:de:5b:b3:3d:34:4c:7c:1b:04:b5:52:41:65:72:
05:5d:3d:c9:a6:0a:8f:28:1b:3b:64:bf:c0:ec:66:c1:dd:b1:
c2:93:57:c1:64:17:5c:61:76:aa:0e:17:52:a3:3d:4d:ca:fc:
30:d1:32:a2:a2:2a:88:1a:8d:97:f9:04:a6:29:72:55:b8:b3:
3d:6a:85:fb:97:6f:a4:b1:2d:0f:21:15:08:d5:a4:ce:15:80:
0d:85:89:18:32:88:25:a3:04:0f:93:1b:83:9b:7a:83:94:6c:
76:13:a3:2c:d3:8d:96:3a:7d:a9:24:ef:e3:00:45:99:91:57:
5a:c2:24:5f:9b:e2:73:d8:b2:73:5e:04:34:5b:38:17:95:86:
8e:2e:8e:43:52:7b:69:12:39:28:a9:28:a1:2b:e9:a3:15:4d:
3b:8d:6d:d0:12:b2:9e:af:58:cb:74:dd:27:9b:e4:39:45:3b:
2d:53:5d:35:cb:12:0a:26:bc:2e:08:12:6d:f4:56:4c:29:b2:
b6:54:97:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-ams.rpki-client.org