Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7F375F22B42E11ED8D984A7EF1222468.roa
File: 7F375F22B42E11ED8D984A7EF1222468.roa (raw, json)
Hash identifier: ZmUBP6C2s8WSRKD6VKKu7gYS4pRJ24Bu6MHKapWqrmA=
Subject key identifier: 67:59:3F:4E:CF:00:96:98:78:AE:3D:C3:3E:98:72:03:0A:0B:08:25
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A7C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7F375F22B42E11ED8D984A7EF1222468.roa
Signing time: Fri 24 Feb 2023 10:32:11 +0000
ROA not before: Fri 24 Feb 2023 10:32:08 +0000
ROA not after: Sat 22 Feb 2025 10:32:08 +0000
asID: 61317
IP address blocks: 102.129.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Apr 2023 14:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2684 (0xa7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 24 10:32:08 2023 GMT
Not After : Feb 22 10:32:08 2025 GMT
Subject: CN=63f8922b-4c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:b7:38:68:0d:2a:b7:cf:b1:64:2d:1f:09:
16:87:5a:1f:0d:b9:de:82:bf:a5:73:66:9c:f5:4a:
77:7c:89:9c:73:10:5a:32:7f:eb:81:0f:77:e2:45:
f2:7e:7f:91:69:d6:42:64:d0:3d:1b:82:3e:94:35:
c1:74:28:67:68:67:ca:46:1b:ac:f8:a9:40:20:0a:
29:c3:eb:18:26:fb:7f:b7:52:5c:2d:b6:69:14:9a:
db:d5:9e:1a:22:ea:10:f1:33:ec:64:d2:f7:3b:da:
90:9a:1e:8d:0e:f3:89:97:fc:73:00:10:bb:34:89:
5d:d0:b1:75:02:bd:09:89:32:d5:52:66:60:b1:72:
ad:3b:10:29:e4:19:bb:7c:96:dd:84:ea:b3:91:38:
c1:d7:d8:ae:9a:cd:77:16:9b:77:c3:5d:e6:d3:75:
4b:c9:05:4a:e7:88:fa:bc:21:f0:ba:5d:eb:cb:cc:
c1:fa:d6:2f:9e:13:03:5b:32:5b:f3:31:14:5f:29:
f1:20:65:40:e6:37:d8:51:ef:72:3e:5e:02:15:77:
24:53:50:36:03:ff:ab:a8:60:5d:a5:cc:b7:17:1b:
ee:b2:1d:80:c3:c6:3d:30:dd:cb:21:f1:e9:3f:6d:
d0:9f:c1:8b:6f:40:f8:8a:6c:a5:8e:97:c5:a0:82:
12:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:59:3F:4E:CF:00:96:98:78:AE:3D:C3:3E:98:72:03:0A:0B:08:25
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7F375F22B42E11ED8D984A7EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.205.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c4:3e:72:66:70:4d:40:90:4c:d9:ac:8c:24:ee:27:02:9f:
e5:bb:04:46:73:59:ae:cc:3d:7a:ab:9b:6a:78:36:7e:7b:16:
83:d1:15:a6:38:a6:cb:76:9a:3d:ff:d1:af:2e:bc:a8:36:ab:
62:1e:94:04:87:9f:a8:23:f2:d0:e1:90:6d:56:e2:8c:b3:39:
f3:b2:20:16:06:51:c0:af:af:7f:00:2e:b6:df:0c:cf:70:f8:
a8:ec:76:c9:3e:5f:54:49:af:04:be:ac:fe:df:90:a6:c6:3c:
b2:7f:81:aa:53:0b:2d:62:01:c5:05:a9:f6:b7:68:e2:47:df:
60:ac:2f:51:8e:59:d2:f7:a6:d9:74:99:61:0a:95:a7:82:14:
ac:b3:80:ec:2d:80:1e:76:51:c4:c8:3b:fa:6e:44:bd:47:1e:
33:26:ec:be:47:1e:56:de:3a:54:d6:82:ae:8b:b5:96:d5:2c:
31:4f:4a:06:96:f7:93:43:c1:25:ff:22:ad:b3:e7:99:fa:9b:
0a:f6:cf:05:c3:cb:09:24:50:1b:03:4c:77:b5:14:aa:f9:2f:
93:64:cd:0e:d8:31:2f:09:7a:62:48:78:aa:f2:a2:20:39:cd:
69:cc:a5:d3:4a:49:2e:3f:5f:0c:e9:88:58:ea:bd:aa:8d:7e:
75:3d:3e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-ams.rpki-client.org