Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/88B6BDB4DCAE11EEB06990C8775412E6.roa
File: 88B6BDB4DCAE11EEB06990C8775412E6.roa (raw, json)
Hash identifier: cmSs4UGWirAA0qOpVl07tFCrkUvd8fkKCVO/GMy8620=
Subject key identifier: 21:E9:69:3B:EA:B5:9B:13:1B:AE:F2:29:93:4C:B9:4D:84:C9:98:D9
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0FB5
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/88B6BDB4DCAE11EEB06990C8775412E6.roa
Signing time: Thu 07 Mar 2024 18:14:27 +0000
ROA not before: Thu 07 Mar 2024 18:14:24 +0000
ROA not after: Sat 07 Mar 2026 18:14:24 +0000
asID: 834
IP address blocks: 102.129.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Mar 2024 10:10:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4021 (0xfb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 7 18:14:24 2024 GMT
Not After : Mar 7 18:14:24 2026 GMT
Subject: CN=65ea0403-3ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:78:34:2d:c0:71:99:aa:ce:82:26:98:da:9f:
6c:04:80:dd:d3:b2:cf:4b:6c:4c:69:a4:8e:98:4c:
c2:a9:73:1e:90:c5:90:02:88:9b:ac:f7:e4:d1:19:
fc:93:60:bb:8b:93:ff:ae:b7:38:a5:3d:80:20:1c:
c9:8f:d9:3a:10:3c:09:9f:d5:5a:c1:fa:6b:08:54:
ee:a5:fc:7c:02:58:83:50:62:6e:ca:e4:ea:5b:a2:
60:2a:80:27:66:4c:08:d8:fa:5b:29:cc:8a:be:ce:
d7:9a:14:4c:73:52:34:51:f5:58:dd:60:b6:92:77:
df:8c:4e:db:84:5a:de:9f:71:8c:1b:94:52:0f:30:
4f:26:fd:8e:b6:c6:f3:08:88:3d:47:1a:82:38:fd:
4a:eb:4e:68:b7:85:c1:0f:49:4f:b1:1f:2a:43:91:
8e:6b:2d:dc:18:bb:01:ea:42:95:db:03:a3:80:76:
a5:cf:dc:03:13:81:5c:8f:83:1c:fb:b9:bf:28:42:
3c:a8:79:52:9b:2d:eb:ed:6d:f3:de:92:fb:cc:83:
0e:e1:c6:67:7a:f0:71:6a:c5:08:8a:a7:ec:f1:88:
58:35:a8:a7:c7:74:03:fd:18:93:34:4c:90:b2:ec:
08:3b:ef:ce:07:0e:ea:f0:2e:5f:0d:f0:c0:f1:cf:
90:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E9:69:3B:EA:B5:9B:13:1B:AE:F2:29:93:4C:B9:4D:84:C9:98:D9
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/88B6BDB4DCAE11EEB06990C8775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.183.0/24
Signature Algorithm: sha256WithRSAEncryption
92:c4:43:24:ab:ec:2d:73:c3:47:48:ea:f5:73:43:d3:d0:71:
8f:89:fe:95:b0:a8:ae:bf:f6:3a:ab:b0:56:76:90:c0:b8:2d:
04:cb:10:e2:6f:dc:34:0e:90:5f:64:2c:e4:ad:31:6c:3d:94:
57:19:8f:ca:2e:7d:3d:ce:61:25:bf:c2:5d:c5:8c:9e:44:6a:
4f:44:17:11:19:67:88:94:b1:f0:48:57:30:dc:e2:1a:29:f2:
ed:54:37:be:79:af:47:f4:ed:fd:01:30:f6:47:74:3a:58:d9:
ea:8f:f3:d3:cc:9e:35:97:70:8e:e1:c4:59:96:06:a7:f2:5e:
dd:d8:7e:ce:4f:99:13:fa:21:26:a8:d8:d4:78:2a:83:29:f9:
ad:1c:07:1e:26:31:7c:6f:9b:b8:7a:10:17:14:cd:6b:7d:33:
0b:c3:4f:8f:32:e5:43:8a:3e:07:71:9a:9a:48:17:4d:1b:8a:
8f:9b:93:99:44:00:78:f2:02:7a:72:71:b0:07:ce:1c:38:68:
f2:25:52:b2:bc:59:fe:db:ee:ec:83:9f:91:11:e0:67:bd:e4:
c3:e3:21:a3:22:5e:09:66:94:f9:7a:e7:90:4c:d2:9a:22:c8:
5e:fa:13:bd:73:54:9b:27:53:18:0a:fc:46:04:ed:99:7e:d2:
f3:21:b1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org