Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6C0D69C8143211EEA53F57404AD9E6FC.roa
File: 6C0D69C8143211EEA53F57404AD9E6FC.roa (raw, json)
Hash identifier: qKHUtSg/u+R0de3pfhiCUGd1sKT5c65NcPvRuJwQMoA=
Subject key identifier: 1F:2E:E3:81:8F:15:35:2E:92:7D:50:FA:30:03:C4:63:F3:3A:CF:8A
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0C2A
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6C0D69C8143211EEA53F57404AD9E6FC.roa
Signing time: Mon 26 Jun 2023 15:02:09 +0000
ROA not before: Mon 26 Jun 2023 15:02:05 +0000
ROA not after: Wed 18 Jun 2025 15:02:05 +0000
asID: 201670
IP address blocks: 102.129.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jul 2023 14:39:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3114 (0xc2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 26 15:02:05 2023 GMT
Not After : Jun 18 15:02:05 2025 GMT
Subject: CN=6499a871-26e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:b7:8f:9b:2c:8b:d3:5d:97:08:cf:d3:fc:
59:a0:ba:fb:b4:f3:ff:2f:9f:4e:8f:59:8c:bb:f5:
19:65:d2:99:a1:15:82:05:73:cc:0b:fe:26:83:40:
d3:98:3b:6c:9f:aa:7b:a7:10:12:2d:bf:56:51:99:
a4:0b:a6:0f:4c:99:9e:8c:e0:a2:a7:38:8a:78:e6:
85:63:14:17:33:af:85:c2:31:79:74:d4:8e:32:87:
a6:d0:dd:d7:26:ed:30:18:53:dc:40:80:95:b9:96:
fa:d7:60:9b:09:9f:ab:95:a9:86:cf:24:d4:a8:ba:
bc:4a:38:d4:a7:73:aa:66:5e:eb:1f:4e:3e:cd:0d:
ea:52:10:4e:ec:5a:74:99:53:03:78:f4:6a:73:71:
67:1a:eb:fa:e8:fc:81:c9:2e:36:43:39:36:60:69:
f2:8c:0b:b0:63:f6:c1:75:e9:d6:1c:1e:cf:2a:53:
d6:18:b5:ff:9b:ed:22:b2:f3:40:75:a1:8b:4e:1c:
2e:f3:17:d4:b3:46:5a:19:4c:1a:ba:d3:23:0d:bf:
1e:b7:54:80:9c:95:f7:bc:29:bb:d2:ad:ad:af:fa:
07:02:3e:be:63:19:41:88:97:fd:20:76:56:03:4d:
70:2f:2d:d1:74:e3:d5:d3:f6:ec:77:c1:34:0a:75:
46:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2E:E3:81:8F:15:35:2E:92:7D:50:FA:30:03:C4:63:F3:3A:CF:8A
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6C0D69C8143211EEA53F57404AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.203.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:f6:25:ba:fd:a7:54:14:aa:7a:ce:9d:27:c9:6e:57:1a:99:
d4:6a:fa:6e:87:42:24:45:dc:3f:75:fc:35:f8:71:91:ec:86:
0c:61:c7:49:04:a6:45:b5:e7:1c:30:e2:05:13:38:ed:88:5a:
e6:7d:8b:0b:4a:b8:b7:cd:b6:6d:f6:50:ab:7d:56:43:16:f2:
c3:0f:74:60:16:77:ec:39:05:61:4d:15:c4:10:64:fd:6c:0b:
41:8d:51:4d:9c:78:4f:2e:ab:ca:50:41:92:c0:05:5d:08:94:
c8:2c:1b:cb:70:2e:8a:cc:79:c0:ab:fd:b9:c6:ca:43:d9:aa:
1d:f8:ff:7a:d0:d8:7c:58:99:27:93:a4:31:83:8d:cb:56:a2:
60:f0:89:5e:15:06:f6:29:3e:2c:37:46:9b:f1:92:56:72:bf:
b8:3a:e6:37:f9:47:0c:fb:d5:e4:fb:51:fb:72:62:d1:24:d6:
e4:a5:fe:15:c1:54:7d:31:3d:65:32:2a:01:3d:d2:fc:20:65:
5a:3c:47:1b:71:38:87:a0:19:ac:c4:7e:d5:1d:93:2f:54:c6:
7b:81:81:45:1c:16:db:4d:d5:9c:e6:00:c8:3e:72:ef:d9:80:
4c:24:c0:30:61:f3:ef:67:63:6b:69:bb:45:a1:04:47:43:95:
bd:23:40:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-ams.rpki-client.org