Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6D1CAF84FB9411ECAAA39C9EF1222468.roa
File: 6D1CAF84FB9411ECAAA39C9EF1222468.roa (raw, json)
Hash identifier: b8cBC3dOMnOQOhsQLiyhQO4WMWp4xy+gF49Xn8vgP2c=
Subject key identifier: 0C:9B:D1:C4:92:36:F3:59:8B:37:B3:D9:D6:09:EA:54:47:44:A6:63
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 070F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6D1CAF84FB9411ECAAA39C9EF1222468.roa
Signing time: Mon 04 Jul 2022 12:25:45 +0000
ROA not before: Mon 04 Jul 2022 12:25:41 +0000
ROA not after: Thu 04 Jul 2024 12:25:41 +0000
asID: 40676
IP address blocks: 102.129.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Oct 2023 12:25:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1807 (0x70f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 4 12:25:41 2022 GMT
Not After : Jul 4 12:25:41 2024 GMT
Subject: CN=62c2dc48-764a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:79:7f:a2:16:b6:73:ec:26:cd:db:6c:f7:04:
09:82:e9:e7:f4:be:17:e2:57:8b:1f:a8:18:74:7e:
d4:c7:81:27:b9:bb:e7:f2:d9:f2:9b:d5:ca:e7:44:
80:3d:e0:52:74:ec:25:58:ae:a7:93:67:53:4b:ea:
8b:00:0b:74:d9:e7:85:c4:17:95:ca:2b:7a:2b:30:
b2:a0:b0:e1:a3:87:2c:3c:10:e5:9f:c7:48:15:f7:
62:4d:e9:7a:4d:dd:ea:c5:88:6c:fd:3b:b3:2f:1f:
ab:68:08:3e:ad:2b:ad:06:79:e0:a9:50:e3:d3:3b:
c2:1c:64:e0:db:25:af:14:c5:ca:18:7a:54:fe:78:
77:2d:c2:27:6f:ce:09:36:be:51:c7:1c:4e:6d:61:
9e:81:9e:64:eb:37:d5:70:04:75:13:f2:ec:f7:47:
80:7b:74:76:90:fb:90:7a:e1:db:69:e5:b5:57:46:
ea:84:aa:11:6e:38:d6:66:38:b4:97:4c:c0:b9:28:
ef:4c:35:f7:02:b7:7e:e9:b1:b1:30:fe:d1:5b:32:
a0:4a:79:d0:26:bb:0e:7f:58:f2:73:c5:1f:e3:82:
e9:65:49:8d:50:3c:2a:0a:0e:b1:3e:59:f6:16:90:
6d:71:be:2a:87:d5:0c:23:6e:ed:9d:24:45:4e:9e:
46:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9B:D1:C4:92:36:F3:59:8B:37:B3:D9:D6:09:EA:54:47:44:A6:63
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6D1CAF84FB9411ECAAA39C9EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.168.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:ce:93:bf:58:98:29:bd:bd:8e:4d:d5:db:9b:4a:68:8c:ee:
8e:4a:c2:3b:5c:99:81:11:e9:3f:e2:8f:9d:84:02:40:e0:41:
76:5a:fd:1c:30:08:d8:b4:19:9c:a7:32:70:3f:c6:64:7b:97:
e7:d5:95:43:79:b1:7d:09:77:f0:90:bd:43:b8:05:27:0f:4f:
9f:f4:1b:fc:ac:55:46:30:a1:c6:32:53:33:dc:1c:09:ab:f8:
10:67:ea:23:46:2c:f3:ff:f7:9b:05:b6:2d:04:79:77:e0:b8:
a6:ed:8d:a7:0c:d2:98:2e:2b:24:b2:2e:ae:71:d7:4f:3e:51:
7f:aa:97:bb:91:d4:9a:16:b0:ac:55:81:d8:e9:e2:0e:ab:09:
27:24:ca:50:49:87:2d:2e:bd:84:cf:33:12:dd:07:47:2b:4a:
79:bc:b1:cc:d7:d1:1f:0b:26:fb:12:87:6f:bc:6d:b4:61:e1:
68:51:d5:eb:e1:48:75:a9:15:63:86:62:15:04:30:ee:b0:0b:
76:f3:58:16:7b:f3:80:07:12:c1:36:51:9b:7e:41:34:98:c8:
85:2c:39:67:fb:71:7f:a6:f9:4e:a0:a3:74:2e:18:f0:51:7a:
53:ef:ab:ac:c9:46:7f:fd:20:93:5f:f0:5c:0b:5d:08:24:7a:
e9:ed:51:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org