Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6EFD18F890E911EDAC657EEFF1222468.roa
File: 6EFD18F890E911EDAC657EEFF1222468.roa (raw, json)
Hash identifier: 0ps/27XAQTVrSWMAQzM6v8+X8PQgBNhHdQkYtFyHYT0=
Subject key identifier: C9:94:25:6D:70:60:B3:74:A0:85:FC:56:40:FB:65:57:25:57:5C:53
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 09CA
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6EFD18F890E911EDAC657EEFF1222468.roa
Signing time: Tue 10 Jan 2023 13:19:38 +0000
ROA not before: Tue 10 Jan 2023 13:19:34 +0000
ROA not after: Fri 10 Jan 2025 13:19:34 +0000
asID: 212219
IP address blocks: 102.129.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Feb 2023 12:26:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2506 (0x9ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 10 13:19:34 2023 GMT
Not After : Jan 10 13:19:34 2025 GMT
Subject: CN=63bd65ea-61c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bd:82:7b:ae:6e:6b:79:eb:5b:36:e2:dc:d3:
b8:f4:80:6e:5c:e7:a0:4c:5d:f1:dd:43:3c:9e:43:
2a:11:36:ea:fa:9e:90:7c:f1:d2:9a:4a:79:05:e0:
f2:d9:09:46:51:92:24:b9:03:ba:7c:17:e4:a8:fb:
d8:5f:40:75:0a:6d:54:e1:1f:d0:b6:b0:66:4f:6a:
38:3f:4a:c5:b2:7e:1d:a0:f4:8f:56:97:a2:74:33:
3b:6e:1b:47:95:1c:a8:aa:43:6a:56:50:c3:f0:fa:
be:cb:47:84:76:1c:f4:01:33:87:74:69:55:ea:64:
33:85:fe:d6:12:67:56:84:b0:2e:54:15:8d:b5:9d:
26:e1:f4:a6:bc:49:a1:03:84:e3:7a:cb:42:31:e5:
64:d0:a8:22:4c:3e:29:c5:e9:24:fb:b7:74:13:08:
24:bb:86:50:14:7e:bf:7b:b1:a0:73:18:ed:d0:15:
38:c6:fd:2f:8f:25:14:b8:99:40:45:45:e4:01:8c:
70:f7:e5:13:a3:73:b0:5d:ef:f6:34:77:ef:4f:70:
37:0f:0f:76:a0:56:28:ea:fd:48:a0:03:35:2d:28:
c5:bd:48:4e:4b:c3:5f:76:5a:1f:f3:d8:7a:51:79:
62:bd:ff:6f:17:d0:98:1e:5f:43:98:c4:4e:82:ae:
3b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:94:25:6D:70:60:B3:74:A0:85:FC:56:40:FB:65:57:25:57:5C:53
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6EFD18F890E911EDAC657EEFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.186.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:31:f9:09:e3:ce:4e:b4:61:d0:0a:14:89:17:89:93:b4:82:
b6:ea:a8:52:09:88:b8:1c:19:a7:2c:93:c8:64:57:b2:d0:66:
e2:6c:75:ed:a6:59:7e:41:b0:60:1c:8b:2f:ab:c7:d8:19:3e:
6d:9e:06:2d:bf:6c:37:17:98:75:11:04:bf:b4:2f:83:ed:2e:
00:c8:bd:23:0b:54:c5:f3:da:52:c8:e3:e0:49:40:51:a1:e9:
e1:1d:23:97:7f:88:0e:26:24:d7:f2:a1:8b:41:20:00:79:a8:
a7:98:f0:63:91:29:85:8f:17:8d:67:5f:65:81:f6:25:5e:59:
9a:a1:d7:e0:c9:e5:3c:72:53:15:4a:22:50:1d:bb:2b:f7:8b:
74:cf:76:ea:8e:07:4f:29:ef:70:b5:42:5e:a3:f6:1c:22:cb:
59:d3:de:17:c5:9b:e7:77:b7:c7:d9:eb:5a:7f:56:fc:16:92:
b3:4d:34:23:52:44:b5:39:88:43:b1:62:4e:2e:0e:6a:82:f2:
e3:1e:f1:3b:81:4a:87:75:67:5a:71:73:33:6a:bd:47:36:64:
33:ea:1d:06:08:4b:f7:4b:17:34:1a:3f:5c:6e:ef:e9:56:12:
08:20:2b:56:4b:d9:ba:5e:72:96:36:2c:3e:d7:b4:b9:a6:db:
f0:e9:ad:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org