Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/89749502878F11EDA1D3C4AFF1222468.roa
File: 89749502878F11EDA1D3C4AFF1222468.roa (raw, json)
Hash identifier: MxLJhALm4RBGFT1Q8HLFB82fiQOkTSMb8A3PQEWmvFQ=
Subject key identifier: 9A:33:22:9A:F7:70:0A:AE:45:E4:D7:7E:6B:6C:87:42:37:D5:6B:CF
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 098D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/89749502878F11EDA1D3C4AFF1222468.roa
Signing time: Thu 29 Dec 2022 15:43:28 +0000
ROA not before: Thu 29 Dec 2022 15:43:22 +0000
ROA not after: Mon 30 Dec 2024 15:43:22 +0000
asID: 61317
IP address blocks: 102.129.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 06:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2445 (0x98d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 29 15:43:22 2022 GMT
Not After : Dec 30 15:43:22 2024 GMT
Subject: CN=63adb59f-2d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8e:37:d5:15:d8:3f:ab:b6:08:33:d6:f4:72:
87:6b:e8:e5:5d:3c:84:b7:ee:29:78:e0:0c:e9:28:
8a:59:f9:62:be:8b:9a:a4:0e:32:1a:9a:f5:07:d4:
d0:11:b5:d0:72:02:22:41:21:61:6b:f8:f9:4d:76:
4c:25:b0:cf:d2:3d:6e:83:e0:85:81:49:89:90:22:
70:c6:cf:7d:69:4e:cc:1c:13:46:3b:4c:d9:49:a2:
af:ce:91:c1:d3:97:28:a4:79:b8:11:13:0d:6c:3d:
12:1f:36:20:b8:ed:bf:24:4f:c9:e2:b8:95:ce:af:
dc:b4:c3:ea:05:c9:e1:20:e8:2b:3e:85:a1:cb:f8:
a9:2d:50:7c:4e:8c:6e:79:21:09:43:db:0e:d8:d2:
7b:e7:e7:7d:6c:40:b0:46:68:9d:d6:df:8a:a2:30:
75:60:81:b3:cc:fa:9c:14:4a:f9:61:d6:b2:04:dd:
de:4c:76:86:b0:73:52:60:23:b5:72:aa:3d:38:80:
c4:6b:ff:83:71:98:b7:13:b3:59:8a:83:4e:48:4f:
dd:1f:d9:38:cf:d4:da:08:a7:b0:8a:ad:c6:2f:d4:
d8:74:d3:29:fc:14:59:43:be:11:c7:9c:f1:bc:85:
a2:16:8e:26:73:cb:09:0c:61:6c:c4:1d:68:68:db:
2c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:33:22:9A:F7:70:0A:AE:45:E4:D7:7E:6B:6C:87:42:37:D5:6B:CF
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/89749502878F11EDA1D3C4AFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.133.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:e6:79:c5:30:a3:54:7d:b8:97:2c:2b:4c:f8:f0:2c:55:54:
c8:8d:9b:82:e3:10:9c:d5:60:b7:f7:91:93:3a:45:84:cd:85:
29:f8:ac:6d:36:95:6d:98:e5:a1:7b:80:ce:0e:e5:05:a5:08:
92:ce:c0:72:e0:4f:83:f1:16:c0:a0:0e:e4:50:b5:31:c5:0f:
1c:8a:ae:91:11:0a:07:af:71:00:73:30:03:9f:cd:9e:80:1d:
87:c0:01:32:57:a8:0f:d8:fb:a4:0b:b1:50:01:17:63:3f:d6:
8d:0e:8e:ca:7a:ee:be:56:f7:b2:52:4b:3f:23:a3:b3:81:ae:
70:43:f0:b6:f5:a1:b2:7c:5c:c4:15:12:3d:f5:28:82:1f:3d:
2c:f6:c3:9a:ae:44:dc:84:f1:3f:86:32:11:ea:af:32:16:2a:
5e:1a:c9:b9:d8:99:b9:c8:c6:1a:f0:31:1a:1b:73:fd:a7:c3:
cc:65:e6:87:f1:2d:8f:eb:99:1c:85:61:5d:74:fa:0a:07:db:
f4:2c:da:9b:07:c4:f5:7f:de:b7:1d:59:4e:55:ac:e6:01:ef:
9c:0c:83:f2:2a:96:e6:f0:c8:79:41:4f:c3:af:16:61:c8:60:
ff:6b:8a:07:e8:5b:ed:84:36:48:34:48:fc:ab:c2:61:b3:e3:
88:31:46:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 09:04:00 2024 by rpki-client on console-fra.rpki-client.org