Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7AFBC93C241A11EEA47ED6164AD9E6FC.roa
File: 7AFBC93C241A11EEA47ED6164AD9E6FC.roa (raw, json)
Hash identifier: YLwXp0bac4md5/HoT5NDx4j+00R1k0uJUicP+LapsLg=
Subject key identifier: 9B:5C:DE:F6:B4:00:A4:25:17:06:C1:56:C4:62:44:34:4A:44:B9:8F
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0C7A
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7AFBC93C241A11EEA47ED6164AD9E6FC.roa
Signing time: Sun 16 Jul 2023 20:51:05 +0000
ROA not before: Sun 16 Jul 2023 20:51:01 +0000
ROA not after: Tue 15 Jul 2025 20:51:01 +0000
asID: 834
IP address blocks: 102.129.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Sep 2023 11:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3194 (0xc7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 16 20:51:01 2023 GMT
Not After : Jul 15 20:51:01 2025 GMT
Subject: CN=64b45839-fbbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e6:e2:c9:6f:49:56:ae:9e:25:6a:eb:ef:3c:
65:41:51:c8:04:c9:79:39:eb:8e:f3:33:9b:5b:13:
a9:0a:72:2f:e2:79:b4:d6:ce:22:f2:06:a1:ca:3d:
f6:3c:e7:a5:4f:c1:e7:54:dc:a3:aa:87:ea:8e:c1:
b4:57:d8:5d:64:19:74:3e:ba:f1:20:cb:ae:e1:2c:
cf:bf:53:5d:46:03:65:b4:90:17:be:5d:e9:ca:3c:
39:22:6b:a8:a9:e2:ba:aa:fc:cf:c9:a7:c7:d1:cb:
b4:e0:58:2f:fb:64:6f:3e:f5:71:ed:a2:5a:88:57:
9e:b9:93:c7:c4:7c:2a:1d:38:3e:9a:ed:b7:94:97:
b6:46:19:5d:63:af:0c:be:64:1b:de:23:90:b3:56:
3c:aa:54:d8:9b:11:ef:c9:74:8c:c1:38:73:55:03:
22:68:66:c8:31:d4:c1:67:bb:16:12:47:65:8a:c4:
79:c9:1d:dc:d1:7c:a7:ba:dd:ca:2f:1f:e5:0f:02:
48:e4:81:df:1b:fd:bf:be:7b:36:34:15:fe:de:2e:
1f:5c:72:61:b0:46:b0:b7:a6:82:ae:50:6c:40:7c:
89:47:41:1d:22:03:bc:06:81:75:e4:10:07:61:86:
d4:e9:75:ac:b0:f2:26:66:fc:ef:48:c6:c2:25:73:
4a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5C:DE:F6:B4:00:A4:25:17:06:C1:56:C4:62:44:34:4A:44:B9:8F
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7AFBC93C241A11EEA47ED6164AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.207.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:f6:8b:64:2d:6c:91:85:ba:39:47:db:16:cc:27:4c:2c:15:
60:3f:8d:5a:bb:e4:ad:e3:05:01:9f:37:27:ba:82:ca:9a:42:
f8:be:84:89:c3:91:ca:94:39:8c:e0:eb:ad:60:48:17:81:d4:
0a:2e:84:df:be:ff:d2:52:c7:f1:2e:2a:a4:04:98:f0:dd:8f:
d3:b5:ba:55:6a:48:d6:71:3c:f8:15:36:56:0e:a9:e4:aa:a6:
57:bc:19:23:e8:b7:e9:a2:2b:39:f1:ca:a3:85:62:4e:8d:8f:
c3:a2:fb:17:a8:a3:0a:a9:85:e2:eb:f0:3b:87:9a:81:97:9f:
82:be:99:40:7c:7b:68:7d:fe:31:d0:2b:38:52:04:90:57:14:
1d:dd:eb:e9:69:e7:32:a8:0d:63:bc:20:eb:93:7c:f2:38:e6:
dc:69:85:7e:4d:c2:8e:84:58:70:23:c0:c5:1d:c2:4d:16:89:
48:d7:51:d5:7c:3c:cf:4c:6b:ac:72:61:23:1d:14:ab:61:53:
7e:41:58:1d:e0:f7:6d:b8:01:1f:24:9b:15:3e:0f:2d:56:87:
53:37:55:73:9f:e4:41:1c:81:eb:68:15:8d:7c:49:f2:90:a1:
70:95:d0:cb:9c:ff:a3:6f:ce:d4:24:bd:5c:d4:54:d7:8c:bd:
a3:4a:f7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org