Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6C9B6E8847EB11EF9BA5FA5D762E951A.roa
File: 6C9B6E8847EB11EF9BA5FA5D762E951A.roa (raw, json)
Hash identifier: vMu1GuhTB6HFXliyNSGE/cJh0qzfqpy5WJZWaxHEkrY=
Subject key identifier: 12:4A:84:0F:B4:EC:26:29:DB:97:C5:B3:4D:44:1A:5E:4D:5E:F2:85
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1178
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6C9B6E8847EB11EF9BA5FA5D762E951A.roa
Signing time: Mon 22 Jul 2024 05:29:54 +0000
ROA not before: Mon 22 Jul 2024 05:29:50 +0000
ROA not after: Sat 25 Jul 2026 05:29:50 +0000
asID: 834
IP address blocks: 102.129.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jul 2024 12:08:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4472 (0x1178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 22 05:29:50 2024 GMT
Not After : Jul 25 05:29:50 2026 GMT
Subject: CN=669dee52-e8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:df:5f:f1:a7:0f:73:5b:d7:99:f8:16:76:0d:
36:58:79:d6:d6:b0:32:b6:53:22:fc:7e:8d:a0:0f:
7c:3f:af:ef:69:f9:d5:cd:9d:d5:04:4d:4a:74:4d:
ef:71:1f:00:7c:52:27:7e:a6:bd:65:d4:e3:a7:16:
5e:93:09:5d:b1:9d:7b:b8:6f:51:7d:54:ac:3a:08:
76:cf:a4:69:0e:c5:b2:d2:2a:56:9b:93:b6:26:ae:
9c:c2:a9:de:b3:68:43:2c:2e:8a:9e:96:e1:2b:e6:
44:18:3e:b1:9c:d6:69:cc:7d:c0:2b:84:59:16:6e:
b2:d5:d8:f1:a3:04:8b:f3:7f:55:f8:fb:14:1b:f3:
77:ed:ec:e8:64:3e:81:8d:01:ef:b3:5e:5b:52:a9:
03:6c:d8:54:b0:45:e5:3e:41:7d:53:a0:dd:87:40:
17:60:c8:3a:03:6a:2e:35:fb:d4:dd:2c:a9:10:fe:
26:fd:9c:95:d5:41:fa:1c:05:7c:28:87:72:33:5c:
f5:e0:e6:bb:af:a0:73:4b:75:62:b3:bb:6c:4e:50:
a1:ad:7c:5e:94:18:dc:5e:82:47:ec:33:8f:e5:ab:
34:ef:34:22:76:1c:cf:eb:0b:69:93:49:df:f5:f7:
14:4e:80:62:98:60:54:d7:61:aa:f3:18:8e:a6:4a:
a1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4A:84:0F:B4:EC:26:29:DB:97:C5:B3:4D:44:1A:5E:4D:5E:F2:85
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6C9B6E8847EB11EF9BA5FA5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.251.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:33:da:d5:1e:42:b0:a6:e4:bb:8f:96:ef:d8:4f:ff:f8:d4:
19:43:bf:d0:67:ac:6a:4a:25:a3:cb:60:8d:34:eb:9e:6b:09:
f7:cf:31:2f:c3:3e:3e:5e:71:27:86:9c:63:95:1a:99:b6:a8:
2b:3b:ff:2e:ba:5b:9a:ab:e8:11:4f:94:44:14:67:94:42:7c:
57:ab:fd:bd:85:da:14:e6:92:e4:63:36:e5:30:0d:2e:a2:fe:
8b:6c:66:6e:4f:7c:4a:66:2a:bf:db:2e:dd:00:c4:03:43:2e:
b3:4f:48:f9:11:bb:2f:e2:d1:bf:5b:8a:4f:c0:45:fb:a8:41:
cf:2b:16:f8:22:bd:e9:bf:8b:08:b9:94:95:ab:53:3e:35:86:
04:22:38:85:af:b2:2a:02:2d:fd:13:ab:0e:08:2b:96:db:94:
2a:db:10:dc:5f:c5:4f:7b:fd:37:c7:ce:8c:66:e9:e9:5c:4c:
d8:88:db:b9:fc:85:7f:20:d6:cb:5c:be:b3:f6:88:57:5e:43:
b2:a7:63:f0:b9:0f:80:d9:d6:7f:31:ed:69:31:e5:b3:fb:f9:
a4:30:1a:77:74:de:ab:04:3c:2e:8f:e7:97:de:75:c0:2a:cb:
17:fe:01:1e:0b:19:64:5f:53:42:2a:d2:17:a2:d9:54:c3:28:
42:fc:07:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 17:32:36 2024 by rpki-client on console-ams.rpki-client.org