Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/85BF545CB20811EE977144B3775412E6.roa
File: 85BF545CB20811EE977144B3775412E6.roa (raw, json)
Hash identifier: O+M74b5Mlh7I5fe87dVCMNAaimhzbUSqEvslMNIDXiA=
Subject key identifier: 71:32:4D:5D:71:ED:6D:93:A8:EA:63:19:66:1D:DA:73:E4:D9:C5:4F
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0ED9
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/85BF545CB20811EE977144B3775412E6.roa
Signing time: Sat 13 Jan 2024 11:40:17 +0000
ROA not before: Sat 13 Jan 2024 11:40:13 +0000
ROA not after: Tue 13 Jan 2026 11:40:13 +0000
asID: 834
IP address blocks: 102.129.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Jan 2024 12:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3801 (0xed9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 13 11:40:13 2024 GMT
Not After : Jan 13 11:40:13 2026 GMT
Subject: CN=65a276a1-621e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e9:a9:5a:89:f2:ee:6c:cd:ba:4a:6f:cb:17:
1a:2d:d4:47:eb:95:20:35:99:0f:f3:be:75:64:dd:
e2:e5:b5:a7:94:59:e3:38:c8:16:ad:5f:a0:8d:36:
fb:35:cd:63:d3:95:f3:cf:44:cb:14:53:fd:0d:9d:
3e:c2:68:b7:54:ad:6f:1d:34:84:34:13:b0:bd:3d:
c6:8b:1d:be:ba:70:90:bc:44:4e:7a:25:ca:5e:69:
cd:a2:89:52:32:64:cb:e9:03:b3:af:a9:9c:a3:70:
85:07:81:f3:f7:cf:78:a0:16:d2:cd:db:e5:70:5d:
da:df:b9:4b:b8:9d:df:1b:e9:de:c2:80:08:e6:f9:
71:af:67:3e:7f:7d:6f:c0:45:07:06:41:e3:46:c4:
4e:c3:57:1a:4c:70:5e:28:53:2a:2f:1c:d8:4a:9b:
5b:15:d9:5a:89:84:34:b9:82:10:97:d1:88:c2:2e:
3c:d3:58:59:10:28:59:37:28:31:66:39:8b:a5:84:
bc:76:8d:a7:50:e6:58:4b:72:3a:fd:1f:81:af:54:
e5:bf:23:70:14:de:b4:bb:52:3a:98:91:5e:2d:11:
95:18:df:47:a1:06:d2:07:e3:97:8c:91:65:8c:db:
2d:fc:ca:2d:72:94:1c:58:2b:4c:48:ea:2d:7f:16:
0c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:32:4D:5D:71:ED:6D:93:A8:EA:63:19:66:1D:DA:73:E4:D9:C5:4F
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/85BF545CB20811EE977144B3775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.226.0/24
Signature Algorithm: sha256WithRSAEncryption
31:e7:f7:ef:6d:d6:85:19:11:da:df:37:c8:0a:b5:2b:f9:e1:
fe:c0:8b:76:31:6a:85:7c:da:46:39:00:34:1c:18:40:7e:2e:
a8:11:f0:aa:60:ee:76:4f:73:40:54:89:54:de:9a:32:74:bd:
b4:2b:d5:a3:6a:1e:87:db:27:aa:86:e4:3c:6e:88:a6:09:27:
fc:5a:42:c8:1d:d6:aa:07:b7:03:eb:91:2d:77:88:2e:cb:71:
e7:7b:18:10:8d:df:61:9a:cc:9f:1a:5a:6a:cb:fd:5d:7f:7e:
7e:79:d0:c6:7e:d6:8b:bc:c6:74:91:6e:79:6a:4e:29:a3:0d:
55:aa:af:d5:6e:d0:d9:d2:01:fa:f5:90:3c:d5:5d:c1:97:dd:
19:00:cd:4b:eb:ac:38:77:27:bd:df:ed:26:19:df:b5:f5:b9:
89:61:de:b6:03:cf:8f:7e:c1:fb:a9:28:17:00:41:c1:72:a6:
63:66:30:ad:d8:a2:5c:31:9c:e7:95:68:fb:98:c6:d6:f1:79:
07:3c:0b:34:d3:fd:9c:08:e2:31:9b:13:2c:10:d8:92:6c:62:
2c:dc:a9:d6:15:a5:42:ef:f7:8c:31:b5:ee:fb:6e:5d:da:ed:
34:5d:29:42:57:c3:7d:08:d2:d7:80:d1:75:78:35:53:68:ff:
4e:27:c8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 14 15:21:44 2024 by rpki-client on console-ams.rpki-client.org