Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6BFE388ACEF511EE95451CA7775412E6.roa
File: 6BFE388ACEF511EE95451CA7775412E6.roa (raw, json)
Hash identifier: netWVl8Hk6HJ7AvG2xjFnCczFfHFFd3lcncltPUh9xE=
Subject key identifier: F4:61:8A:BF:3E:20:48:DC:21:66:85:75:E3:47:2F:41:93:95:B5:75
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0F57
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6BFE388ACEF511EE95451CA7775412E6.roa
Signing time: Mon 19 Feb 2024 07:06:37 +0000
ROA not before: Mon 19 Feb 2024 07:06:34 +0000
ROA not after: Thu 19 Feb 2026 07:06:34 +0000
asID: 139989
IP address blocks: 102.129.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Mar 2024 11:07:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3927 (0xf57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 19 07:06:34 2024 GMT
Not After : Feb 19 07:06:34 2026 GMT
Subject: CN=65d2fdfd-76f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:d9:68:90:ae:bd:73:07:8b:73:0b:d5:e7:
57:7e:cd:66:74:e1:16:2a:c7:72:59:2d:00:23:7f:
14:ba:0d:42:2f:7d:67:82:20:65:e1:33:f2:25:f7:
7c:8c:99:db:b0:39:ea:ba:cd:8c:79:bc:01:86:ac:
34:8b:b5:7d:62:8b:60:38:55:80:84:04:7c:3a:51:
9e:c3:30:9a:8c:23:30:a6:f2:84:aa:e9:0a:b4:0a:
fa:b3:bb:3e:ad:ec:e5:ef:59:76:e5:c9:04:67:7d:
11:d1:e3:22:4f:00:79:76:7d:0f:29:8b:bc:7c:5c:
03:fe:21:40:5a:5e:34:1a:9f:4a:e4:c3:89:c2:17:
22:a0:ec:c3:06:ed:3f:41:64:27:22:f2:1e:72:dc:
98:af:bd:cd:3f:87:38:d9:d1:e0:2e:cd:dc:fe:d8:
e6:5d:1f:c7:1a:34:ad:ba:9e:7b:a9:7b:a7:ac:8c:
d9:22:36:b8:8a:fd:1b:b9:44:98:6c:42:3b:65:e4:
ce:4a:60:5c:6f:07:8a:f3:77:36:e9:b0:2f:35:ff:
09:3a:2f:4c:b0:6e:3b:7b:43:e7:6c:ca:0d:25:03:
c8:8b:20:26:76:87:9a:dd:5a:81:29:5f:8e:64:b9:
c0:50:f2:1a:ac:04:99:8d:d0:84:e4:99:21:a1:5d:
60:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:61:8A:BF:3E:20:48:DC:21:66:85:75:E3:47:2F:41:93:95:B5:75
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6BFE388ACEF511EE95451CA7775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.168.0/24
Signature Algorithm: sha256WithRSAEncryption
91:a0:ac:91:88:0b:a4:c6:bd:c0:6c:a7:88:86:7e:4d:fc:32:
a6:76:e7:31:63:9f:f5:cd:29:93:07:b0:4c:e0:5c:e9:99:dd:
2b:eb:f7:ff:92:c7:9d:fd:70:94:7f:f8:81:7e:70:c5:fe:f5:
d8:bb:6a:1e:45:6e:6a:6d:48:7e:40:79:ac:9a:79:16:4f:16:
68:b0:29:dd:06:cf:a2:63:a7:39:50:f1:dd:24:71:cf:ee:77:
a3:3d:e0:68:df:1e:38:5b:88:4b:6b:45:07:70:ed:99:fb:41:
c6:87:6a:e4:c6:70:5b:db:c5:2a:55:b7:69:1d:fb:2a:d3:81:
1f:76:5a:5f:70:50:5e:65:69:7c:74:36:64:ea:e4:df:0a:9d:
2e:37:75:d0:40:15:20:3f:10:b5:e0:a9:d9:44:fe:53:d7:e8:
8f:89:5b:0f:ba:b9:8a:d4:48:6f:c2:36:3c:2e:b6:a2:b2:0e:
f9:6b:83:ff:ff:30:d6:18:c3:9c:5f:0d:ca:92:32:7c:75:a3:
4a:40:42:32:f0:a4:c6:79:a7:fb:69:bb:87:9b:aa:12:1f:95:
59:d2:90:5a:b8:99:64:b8:82:2d:bb:ba:e1:f4:e1:bd:ea:7e:
d8:56:5f:0a:f8:02:f7:f6:74:82:f5:8e:ba:c0:16:1b:92:34:
fe:12:5b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-ams.rpki-client.org