Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/81698CE46BED11EE98EB8D504AD9E6FC.roa
File: 81698CE46BED11EE98EB8D504AD9E6FC.roa (raw, json)
Hash identifier: jca0a5UrqSfVSNYp60LCe6vmRmcxUDVBETAIpSs5/y4=
Subject key identifier: 38:13:73:75:6F:01:B5:0E:D1:87:FB:46:DE:A2:0D:EA:31:E5:49:42
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0DDC
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/81698CE46BED11EE98EB8D504AD9E6FC.roa
Signing time: Mon 16 Oct 2023 06:30:32 +0000
ROA not before: Mon 16 Oct 2023 06:30:29 +0000
ROA not after: Wed 16 Oct 2024 06:30:29 +0000
asID: 26042
IP address blocks: 102.129.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 11:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3548 (0xddc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 16 06:30:29 2023 GMT
Not After : Oct 16 06:30:29 2024 GMT
Subject: CN=652cd888-fd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cf:28:04:db:f5:69:86:99:a3:38:e9:00:e6:
81:86:79:a9:f1:8c:c2:ab:39:69:55:ad:e5:01:70:
45:64:00:c1:fb:4a:ca:b1:00:0b:b6:52:a3:af:a4:
79:7c:37:0b:47:65:c1:b9:8d:de:6e:f5:0f:b9:dc:
a0:a2:1f:63:37:0b:39:de:48:ea:21:94:f0:14:90:
e7:c5:a3:a1:5d:e4:d8:0b:39:71:df:52:e2:98:f7:
bc:7e:00:9b:93:69:57:71:99:48:8c:61:ef:ce:a4:
a6:bc:9d:68:99:9b:4d:b9:63:1e:e8:1c:2b:fd:c8:
b2:bc:03:5c:7b:8c:59:3b:b3:39:6c:9b:05:db:2e:
3f:91:25:7e:ac:8d:31:ba:84:97:61:57:16:62:b1:
fc:d6:81:ed:c1:b0:ff:a9:52:c7:4e:2a:e2:0f:59:
23:fc:4f:4c:d2:18:14:c9:ed:6b:28:ef:9e:16:f5:
9e:33:95:38:59:fc:fd:55:b1:f2:0f:20:69:98:a1:
5a:89:89:87:20:02:80:d6:6d:3d:f9:68:bd:0c:48:
b2:bd:25:dd:ff:99:1a:a1:80:a1:39:43:6f:64:72:
4f:7c:6a:3a:3c:2f:3d:e0:a5:e9:17:07:ed:df:64:
ff:1e:56:a2:34:d5:6e:e3:31:33:25:0b:2f:3f:c0:
cd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:13:73:75:6F:01:B5:0E:D1:87:FB:46:DE:A2:0D:EA:31:E5:49:42
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/81698CE46BED11EE98EB8D504AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.215.0/24
Signature Algorithm: sha256WithRSAEncryption
60:c3:56:e5:a1:d2:a5:e8:b0:79:6f:e4:f4:f4:bb:ac:13:0a:
12:15:38:59:11:53:7c:05:b5:52:0e:fd:95:75:cb:2f:1b:4f:
81:4e:a4:75:c3:e8:36:4a:71:16:49:d2:53:f8:aa:30:83:90:
09:bb:aa:16:e9:64:c8:6d:24:66:f8:d2:55:79:5e:f2:e6:fb:
b1:db:d5:ca:45:c8:3e:27:18:65:0b:42:32:7f:3b:72:b1:25:
a0:6a:48:c9:db:3d:4f:99:71:51:ef:53:27:6e:4b:0d:dd:62:
f0:e9:f1:a1:ca:5c:e3:ca:03:e8:a8:79:e7:30:ea:ac:b0:79:
54:a2:a6:12:b3:24:d8:86:b9:b4:69:27:ba:f6:8a:a7:02:da:
37:e5:b6:9f:78:36:35:8e:d9:66:b6:2a:97:26:cb:6d:6b:6c:
0d:fb:ad:6e:39:fd:1c:9b:24:2f:e3:48:4c:ee:d1:ff:13:fe:
93:c0:4f:fa:30:47:fc:f7:1a:d4:c6:a5:7e:18:4c:ab:0d:cc:
4b:d6:61:57:67:2f:25:ba:be:a6:12:21:88:49:9d:9d:be:a7:
67:3f:9a:89:29:89:a0:d3:39:b0:22:10:35:d6:f7:0d:e8:e7:
d7:ab:84:0b:d0:1b:e1:2f:9c:90:da:7f:ce:c8:b2:b0:d2:c5:
50:9a:aa:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 17:14:54 2024 by rpki-client on console-fra.rpki-client.org