Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7CF0B662522D11EEA0BE13404AD9E6FC.roa
File: 7CF0B662522D11EEA0BE13404AD9E6FC.roa (raw, json)
Hash identifier: zzinyJI/SUMYwPqW2vxEFLSiKYGZSa5zSfCjnJFoMjc=
Subject key identifier: 29:23:4C:5C:53:7A:CD:78:C8:F3:E1:17:7B:BB:16:3A:73:5B:96:34
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0D43
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7CF0B662522D11EEA0BE13404AD9E6FC.roa
Signing time: Wed 13 Sep 2023 12:03:02 +0000
ROA not before: Wed 13 Sep 2023 12:02:58 +0000
ROA not after: Sun 15 Sep 2024 12:02:58 +0000
asID: 62240
IP address blocks: 102.129.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 Jan 2024 11:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3395 (0xd43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 13 12:02:58 2023 GMT
Not After : Sep 15 12:02:58 2024 GMT
Subject: CN=6501a4f6-4b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e7:87:58:e7:28:02:b9:7f:64:91:d3:73:b7:
a5:7e:fe:41:65:62:2d:06:d3:b4:df:a4:47:1e:5e:
09:95:f3:0b:1d:7b:df:ab:41:a4:61:9a:d8:77:ee:
15:70:1d:f2:b6:5d:49:cc:04:08:3e:1a:3b:c5:89:
dd:c5:0c:e8:d0:dc:8b:a3:2d:9f:6f:46:ea:a4:cf:
a8:f3:d6:83:dc:1c:ef:ac:3b:20:8b:ae:6d:6b:be:
f9:34:67:4d:a7:ba:d4:d9:b5:b3:30:4a:95:eb:62:
8f:62:71:58:73:7c:f1:b9:43:3e:30:b9:cf:46:63:
ac:42:e8:cf:19:4d:16:fe:14:70:10:3f:4b:fa:d4:
cf:82:78:da:5b:d7:57:51:9c:20:dc:81:ff:7f:c1:
1f:3e:4c:d4:50:60:cd:78:b3:43:a1:e7:ea:f7:d3:
ec:96:43:c4:8a:da:17:42:8b:25:bb:b9:a1:e4:43:
bc:43:f2:32:ab:15:59:25:06:3b:21:76:60:4c:07:
59:af:60:14:ed:50:50:20:1a:24:1c:71:8b:b6:d5:
a8:bb:56:83:24:bc:8c:2d:e3:3f:93:1c:49:9c:63:
ed:63:c9:5d:49:46:75:0e:c5:0e:cd:e0:7d:44:12:
cd:db:86:cb:ec:21:ee:bc:15:0b:1a:64:27:d2:42:
b4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:23:4C:5C:53:7A:CD:78:C8:F3:E1:17:7B:BB:16:3A:73:5B:96:34
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7CF0B662522D11EEA0BE13404AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.226.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:b4:dc:86:5a:85:0b:a4:32:5c:25:aa:73:d4:11:3f:94:c3:
13:b9:64:67:b0:0b:e5:4b:45:48:14:43:4a:a5:dd:4f:e8:a7:
46:6e:f8:ec:20:bf:2b:30:95:5a:80:63:02:e8:88:60:ce:ac:
de:8e:ce:3f:b5:30:b4:7e:a6:d4:65:0a:7d:40:9e:c9:18:14:
c6:89:b6:c9:4b:e6:4d:a0:47:f9:6d:8c:a1:a4:b8:33:b2:de:
f0:59:da:24:13:b1:38:2d:43:4d:18:67:5f:8b:67:f1:c3:2c:
a2:64:36:d4:f5:2b:db:d9:aa:88:e3:44:22:01:20:0a:20:7b:
88:13:02:76:80:59:0d:8a:1a:4a:f2:97:8d:f3:2f:38:5b:68:
9c:3a:0a:31:53:73:47:33:1d:c1:e4:65:94:71:bb:5c:96:3d:
a0:13:d3:ff:4c:db:c1:db:dc:6a:f1:9b:d4:6f:00:04:7c:85:
ce:a4:5a:bb:dd:22:e4:82:17:49:f2:90:62:9b:b1:52:0a:18:
73:f5:6e:00:e4:1b:99:cc:35:b0:82:20:43:20:77:49:cc:3b:
fa:c7:11:1a:79:4a:21:da:c7:25:2c:ea:4c:d9:d9:c6:ff:b8:
4b:84:1b:d1:5a:31:9b:11:a1:c6:cc:99:3e:d3:de:61:42:16:
e5:35:88:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 13 13:18:46 2024 by rpki-client on console-fra.rpki-client.org