Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/75B428E02C8711EFB3AACE0D7DDC24C2.roa
File: 75B428E02C8711EFB3AACE0D7DDC24C2.roa (raw, json)
Hash identifier: +qmHl8Ep3C79WT3Om6GMOaxINg45rm8tUaHP+UAaaq0=
Subject key identifier: 71:E0:D2:F5:A6:48:91:A6:FA:0F:49:AE:A4:B7:ED:38:C4:81:F2:34
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 10F3
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/75B428E02C8711EFB3AACE0D7DDC24C2.roa
Signing time: Mon 17 Jun 2024 08:56:18 +0000
ROA not before: Mon 17 Jun 2024 08:56:14 +0000
ROA not after: Sat 20 Jun 2026 08:56:14 +0000
asID: 834
IP address blocks: 102.129.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Jan 2025 11:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4339 (0x10f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Jun 17 08:56:14 2024 GMT
Not After : Jun 20 08:56:14 2026 GMT
Subject: CN=666ffa32-4893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:70:be:20:54:8d:41:0e:81:04:56:db:61:2f:
5b:ca:df:d8:ff:43:78:83:0d:19:8c:eb:71:3d:b4:
01:4d:08:d4:2d:d8:1d:4e:c6:ee:c8:36:68:e1:3c:
c8:93:31:63:1f:ff:42:2b:33:81:31:57:cb:de:12:
c0:3e:9c:66:7e:5a:c3:09:48:fd:2b:89:90:d4:54:
76:2f:f7:6f:f9:79:8d:70:04:99:b0:54:73:30:81:
ee:0c:8f:5b:fb:2d:d2:5a:aa:66:aa:9e:dc:70:83:
96:8e:ab:ba:5e:a3:d1:e9:03:18:13:df:67:a9:75:
cc:ae:ab:3d:6d:d9:13:15:25:36:c4:28:b1:1b:52:
c1:50:3d:5a:e4:7b:94:a2:16:f0:e5:c3:01:3e:9a:
38:15:cd:3e:25:34:1f:2e:c9:f6:7d:e0:07:97:7a:
d5:48:5d:ad:86:73:41:b0:05:3a:39:c2:5d:66:92:
a9:ec:8f:27:a4:a9:9f:88:26:81:b8:7a:c4:0f:e6:
3f:a5:2f:39:90:5d:f6:9c:97:a0:d9:99:7e:f6:b3:
0d:49:a1:06:ab:ad:51:d4:b9:17:0a:ac:b9:04:38:
96:44:0a:a1:79:97:18:6f:c3:4d:e7:1b:7a:47:ea:
3e:8d:74:af:af:5d:e5:3f:be:3b:39:dd:9b:9e:77:
c8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E0:D2:F5:A6:48:91:A6:FA:0F:49:AE:A4:B7:ED:38:C4:81:F2:34
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/75B428E02C8711EFB3AACE0D7DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.216.0/24
Signature Algorithm: sha256WithRSAEncryption
18:d7:59:ff:b9:83:02:23:7a:a2:53:2b:e0:9d:9c:a0:b4:c2:
74:74:8e:88:fa:bb:63:c0:64:b4:1d:a3:68:fe:27:17:45:70:
2d:b4:8d:00:c3:98:de:9b:7a:38:e4:a9:8c:e9:1d:55:98:26:
6c:d8:c2:73:59:63:c8:3e:c1:0f:15:7d:5e:f6:fd:35:d5:d0:
24:d5:a3:ee:b2:f7:2a:20:be:fc:fe:81:30:6b:53:75:14:cd:
5a:50:61:54:00:82:73:b8:c1:2e:49:9f:2b:37:cc:c7:d1:56:
6d:a9:72:65:4f:8c:83:6f:ae:58:9a:fe:94:38:0b:4b:0f:fa:
5a:54:8a:8b:0b:e4:03:1a:86:b9:c7:5f:a0:56:29:ec:89:fa:
b9:09:1b:66:31:60:fd:72:73:51:3e:ba:b1:17:15:49:41:9e:
fb:c7:87:6d:6d:b5:9f:c4:c9:3d:b0:9b:ce:2f:36:f8:a1:be:
bd:1f:b1:7a:75:0c:3b:e2:e5:68:75:74:e7:59:a0:3d:1a:69:
a7:f5:11:22:24:fd:6f:a1:3d:4f:f1:b2:14:16:fb:79:db:52:
69:6d:22:52:20:0c:44:3f:64:20:cf:f4:34:96:94:ee:b4:b3:
6d:4a:14:f7:8b:14:4d:93:31:24:b3:9c:7c:a3:3c:f9:2c:e3:
36:84:73:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:26 2025 by rpki-client