Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7365B7F8396211EDA42AFAB4F1222468.roa
File: 7365B7F8396211EDA42AFAB4F1222468.roa (raw, json)
Hash identifier: VXSDS+Gr/05c0iHsvclfcoqRn+my966aeuPMWd86Q/Q=
Subject key identifier: 10:20:91:50:51:AA:F7:76:B7:61:07:A6:24:A4:84:69:19:75:B4:2D
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 07FB
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7365B7F8396211EDA42AFAB4F1222468.roa
Signing time: Wed 21 Sep 2022 04:04:12 +0000
ROA not before: Wed 21 Sep 2022 04:04:09 +0000
ROA not after: Sun 22 Sep 2024 04:04:09 +0000
asID: 207326
IP address blocks: 102.129.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Dec 2022 23:12:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2043 (0x7fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 21 04:04:09 2022 GMT
Not After : Sep 22 04:04:09 2024 GMT
Subject: CN=632a8d3c-f030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ee:91:31:8c:65:44:62:48:bf:ee:be:ee:b5:
e9:68:d9:83:5b:75:ce:ec:53:58:d5:50:14:9a:29:
f3:2f:f7:19:26:30:97:2b:18:a4:24:3c:9c:df:19:
91:bd:99:cd:59:53:f0:10:04:3f:4f:13:86:4d:85:
b0:89:ea:ba:cc:0a:b0:0c:ed:50:ae:3d:2e:c0:f0:
86:21:95:6c:ed:42:be:5e:86:af:2c:4a:f6:42:bc:
d3:8f:e1:52:26:9e:f6:42:bd:73:49:78:38:c7:f9:
f4:e2:63:7b:66:c7:0c:d8:aa:56:ec:eb:48:27:20:
c0:25:77:07:18:6d:82:c3:19:58:0b:c6:a7:9c:13:
94:28:35:f4:4e:ab:6d:6d:df:31:3b:ec:f0:e3:27:
5e:0b:ba:ae:73:87:4a:b7:16:5e:2e:01:2d:3a:a4:
3c:38:ed:45:e2:97:6a:88:af:94:77:a2:36:91:08:
05:f2:8a:77:7a:c1:65:73:b4:9d:db:ba:29:09:cf:
7b:1b:92:0c:16:a1:de:eb:6c:3d:3a:ed:a3:f8:24:
6b:68:18:b4:32:da:c2:3f:9e:aa:c3:ac:77:4e:b8:
30:e7:d0:33:8d:51:15:64:af:7f:01:6f:88:b4:d2:
f8:8d:0c:5b:b4:79:3c:a1:82:fe:43:d2:a4:17:7a:
57:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:20:91:50:51:AA:F7:76:B7:61:07:A6:24:A4:84:69:19:75:B4:2D
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7365B7F8396211EDA42AFAB4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.173.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:85:6f:ef:b1:09:21:eb:17:8d:04:58:81:56:12:22:50:8e:
64:ee:5e:85:8b:c3:9a:a0:81:89:0c:63:80:fb:e4:dc:9f:07:
1c:1f:34:d4:de:dd:98:66:a8:db:eb:2f:67:95:74:7f:9d:8a:
13:6d:9e:e1:ff:41:ff:1c:01:4b:d8:06:67:e6:28:b2:ee:d7:
b6:99:41:ce:5c:55:d6:7f:c2:52:0e:e7:52:16:07:3c:d7:3c:
4a:58:0b:ed:5e:81:4e:2b:68:09:ce:c6:12:a9:9d:41:b6:38:
a2:09:8d:ab:61:0f:c3:a7:17:0e:11:67:e4:64:e8:03:01:a3:
6b:51:eb:e5:cf:10:f1:c7:0c:58:a2:74:5c:bc:8f:64:0e:7c:
5c:15:f4:af:14:b2:0e:11:df:7a:f2:41:bc:ef:36:f3:8a:36:
24:5a:04:f9:e0:55:9a:37:72:88:c7:d9:93:e6:70:93:8d:31:
90:48:d2:7c:ed:31:e5:df:9d:67:3f:97:28:f2:75:e2:80:cb:
64:0b:6c:cd:25:31:d9:25:6b:8c:1d:bb:8e:3f:a1:76:76:0a:
0d:61:4c:64:9a:af:1d:f9:67:28:30:fb:40:12:1c:fe:6e:04:
3f:8c:31:1e:5c:ec:88:8c:85:ad:a5:83:56:9a:3b:f8:18:25:
6c:7f:e7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org