Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/86D7A9D048B311ED858899ACF1222468.roa
File: 86D7A9D048B311ED858899ACF1222468.roa (raw, json)
Hash identifier: 0CQyzvHPAKNBlRqqPiqf+vGkA7QMq6HzSu4rU/Jwi2c=
Subject key identifier: 59:95:DA:AE:96:A5:04:24:85:8A:EF:F1:19:66:C7:04:BB:F0:87:74
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0841
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/86D7A9D048B311ED858899ACF1222468.roa
Signing time: Mon 10 Oct 2022 15:52:22 +0000
ROA not before: Mon 10 Oct 2022 15:52:14 +0000
ROA not after: Fri 11 Oct 2024 15:52:14 +0000
asID: 205431
IP address blocks: 102.129.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Dec 2022 09:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2113 (0x841)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 10 15:52:14 2022 GMT
Not After : Oct 11 15:52:14 2024 GMT
Subject: CN=63443fb6-33ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b2:6b:4e:1b:5c:ab:0d:2c:a9:e3:26:e2:9b:
ca:43:f8:a1:ea:ea:c5:e9:37:64:68:9c:fe:c5:5c:
8d:ad:c1:25:e2:fa:50:b0:0d:c9:d8:30:c1:1f:73:
e8:66:bb:55:ee:a2:6f:f5:c4:fe:52:d4:d3:98:04:
37:a9:ef:89:cf:61:98:1c:0d:84:62:7b:69:97:df:
a9:23:44:75:72:0a:b3:8b:db:01:94:12:c2:f6:4b:
78:57:b8:83:80:b5:bc:05:8f:4c:9c:1d:b9:fc:20:
a6:25:ff:ee:ce:66:ec:7e:8b:ff:ca:fb:46:9a:01:
c9:a9:4f:c7:6e:dd:1a:f2:6b:8d:ca:b1:45:9c:44:
6a:5e:44:cf:ab:54:7b:3a:55:ce:94:23:91:00:cf:
67:d9:89:61:2e:d1:9f:14:25:d6:e2:53:5b:39:9b:
69:4c:35:49:21:c6:50:11:80:e0:6d:ee:29:65:72:
41:0d:87:e3:9c:72:97:ac:82:24:7c:73:a8:14:36:
b1:22:57:cd:04:23:dd:88:25:08:cd:e1:66:10:b7:
54:8e:4f:01:d2:2d:24:07:86:c9:7b:cd:eb:dd:3d:
b5:86:95:46:67:9b:12:4d:0c:c0:d1:7b:40:6a:64:
b3:c2:d0:0d:ac:bb:66:d8:61:ab:7e:5d:0c:a4:16:
30:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:95:DA:AE:96:A5:04:24:85:8A:EF:F1:19:66:C7:04:BB:F0:87:74
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/86D7A9D048B311ED858899ACF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.244.0/24
Signature Algorithm: sha256WithRSAEncryption
68:d9:85:67:3f:ff:50:aa:47:1b:8a:9b:65:7d:66:ed:b7:1b:
18:b6:16:38:22:9a:6f:a9:99:f9:b6:60:dd:35:88:3f:81:82:
dc:90:59:d8:99:59:4e:f3:90:d3:d9:80:02:ea:f5:1a:cc:e7:
df:5a:54:7b:3c:e2:24:eb:fb:44:db:02:ef:21:bf:11:66:36:
93:3c:71:91:d6:be:3c:73:13:0d:2e:a1:84:f9:24:62:38:c5:
f6:30:9c:78:dc:6a:3c:62:16:fe:53:a1:b9:82:75:59:99:5e:
0a:f3:55:94:70:45:a5:4d:e8:c4:e4:d2:3d:f8:74:55:c2:31:
84:b7:2e:fe:53:d4:aa:c8:2a:d3:ed:4b:5e:1d:d1:2d:a0:55:
be:3d:d4:fa:cb:8a:05:60:c7:8b:6f:d1:46:ea:7f:59:a9:71:
9d:ce:3b:e3:b8:53:06:e7:42:ce:44:89:49:86:e7:84:28:9a:
85:b7:d3:8a:56:44:33:f3:9b:29:c8:28:45:33:f2:5e:06:44:
2d:f5:4b:87:b4:2a:9d:c1:c6:d8:69:6e:bd:fc:83:88:8a:b2:
b6:a3:5a:c5:c9:a7:ac:2c:92:26:b1:6c:4a:1b:0d:9c:32:b5:
70:32:5a:7c:63:63:01:ff:c0:a3:58:54:19:b8:83:11:14:74:
26:07:07:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-ams.rpki-client.org