Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7C8963EAFB9411ECB029E69EF1222468.roa
File: 7C8963EAFB9411ECB029E69EF1222468.roa (raw, json)
Hash identifier: Vs2jbO1s5evMISzy6BNSqwB3uMvLlVZwZ3yXedjPnII=
Subject key identifier: F1:52:F0:E2:FF:F2:3F:8D:9F:3C:E2:B6:3A:B5:EA:97:C8:0F:8B:A2
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0711
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7C8963EAFB9411ECB029E69EF1222468.roa
Signing time: Mon 04 Jul 2022 12:26:10 +0000
ROA not before: Mon 04 Jul 2022 12:26:07 +0000
ROA not after: Thu 04 Jul 2024 12:26:07 +0000
asID: 40676
IP address blocks: 102.129.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Jan 2023 12:47:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1809 (0x711)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 4 12:26:07 2022 GMT
Not After : Jul 4 12:26:07 2024 GMT
Subject: CN=62c2dc62-72e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:e3:3b:9a:61:ca:c8:6c:f6:6f:ca:27:6b:
31:a7:b1:53:47:22:26:73:f2:f3:a2:c7:03:bc:fe:
86:55:88:c2:f8:d7:31:60:fa:3c:5c:89:a7:24:33:
23:29:ac:3b:d3:bf:5b:ea:2a:e9:4c:9c:90:e5:90:
98:ad:31:18:c8:a8:e4:38:f9:f5:a6:b5:fc:4d:14:
0b:de:14:3c:a5:21:75:c7:43:f9:96:8c:e7:bf:c4:
9d:4a:cd:c8:63:1c:15:07:7d:e6:16:cd:86:da:0b:
ea:29:b9:53:1f:07:6d:08:80:c4:36:c1:40:cd:7c:
59:2a:65:4f:76:19:b9:2c:35:da:3c:67:3e:36:dd:
4e:8b:07:c0:e9:e3:db:73:9b:5a:64:cd:cf:a8:d7:
09:d6:04:8a:3d:de:a3:ca:fa:ff:84:89:e4:07:2e:
d2:36:83:22:b6:97:45:6c:d0:31:98:cd:44:1e:d4:
85:b4:3c:49:43:fb:e7:b5:b8:dd:fa:3f:10:29:0f:
cb:64:01:e6:ac:f2:9f:a6:bd:5f:3b:3b:b1:ac:f2:
8a:1e:44:89:f1:1a:23:e3:6c:6b:b7:83:87:39:96:
20:7e:69:68:3d:db:34:3a:b2:88:0b:6d:27:d0:e2:
88:96:9c:8f:42:52:60:d7:df:e7:f3:35:76:66:92:
b4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:52:F0:E2:FF:F2:3F:8D:9F:3C:E2:B6:3A:B5:EA:97:C8:0F:8B:A2
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7C8963EAFB9411ECB029E69EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.189.0/24
Signature Algorithm: sha256WithRSAEncryption
71:4b:64:f3:47:d4:c3:55:41:ba:78:57:44:f3:67:9e:95:7d:
74:9d:02:63:aa:8a:01:19:81:84:16:94:17:51:c7:f4:d7:12:
7f:eb:48:25:cf:04:9d:1f:37:e4:4c:79:38:22:46:c6:63:21:
13:55:35:e5:69:48:a9:a6:89:46:26:3a:b8:5a:22:94:40:4b:
02:fc:d1:35:ff:b5:0b:fe:1b:7f:3d:98:48:95:b9:d5:cc:34:
d4:8f:41:a0:ec:9b:7e:5d:ae:da:38:d1:a9:55:b9:6d:b6:71:
2c:e7:46:89:ff:40:f2:b0:f5:18:93:25:00:94:ac:da:ef:43:
8b:07:16:82:6c:7c:76:bc:99:d8:9f:31:2a:43:11:2c:ec:56:
5f:e2:c3:24:d4:1a:84:32:41:cb:3e:45:37:0a:0d:d5:36:d2:
35:31:a3:5f:0a:c7:58:85:2b:e8:66:1e:5f:96:b6:5e:5f:74:
d0:e7:b0:81:fc:d4:66:97:ca:a0:b4:af:e9:19:2d:f0:c5:9d:
7c:7c:a8:6c:fd:b1:e2:56:06:4b:67:ab:0f:7b:02:d3:d1:37:
21:cb:8c:9a:a0:b5:f5:68:56:ff:c2:44:1e:2c:7e:c6:68:54:
1c:8c:5c:49:ce:2d:56:4b:a9:5e:a6:c3:c2:c8:3e:41:12:37:
02:3e:2c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org