Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/89ED3C7C2A5F11EFB6A348ED7CDC24C2.roa
File: 89ED3C7C2A5F11EFB6A348ED7CDC24C2.roa (raw, json)
Hash identifier: XPrqTJ/a7aQgAIGEJTvvNtQuZuPXlpBgXreDrIEbqsA=
Subject key identifier: 39:CE:C7:02:54:FA:A4:F9:FC:CC:7E:0B:36:5D:C7:98:C6:2B:EC:95
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 10EA
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/89ED3C7C2A5F11EFB6A348ED7CDC24C2.roa
Signing time: Fri 14 Jun 2024 15:05:30 +0000
ROA not before: Fri 14 Jun 2024 15:05:26 +0000
ROA not after: Sat 13 Jun 2026 15:05:26 +0000
asID: 834
IP address blocks: 102.129.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Jun 2024 09:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4330 (0x10ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 14 15:05:26 2024 GMT
Not After : Jun 13 15:05:26 2026 GMT
Subject: CN=666c5c39-7a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:47:62:28:7f:6c:ec:8b:86:00:db:33:89:d0:
0a:b0:89:eb:06:a0:19:7b:22:83:93:85:a6:a4:d4:
e8:b4:36:03:9c:ae:fb:a8:8d:f3:4c:b8:52:69:4f:
bd:84:7b:83:03:8d:70:86:06:8b:86:ad:f8:87:af:
d1:b8:e4:08:97:8c:b8:4a:01:53:ba:8b:a8:8c:fe:
e7:8f:cc:c9:27:90:bc:cf:96:28:a5:e7:0a:b0:b9:
f8:11:16:23:e3:c5:93:b0:79:17:84:51:a6:72:3c:
9d:7e:09:31:da:88:e0:40:69:cb:e3:84:a6:e0:60:
28:68:44:62:cf:2e:d0:72:df:a7:91:8c:f1:22:1d:
62:74:36:32:a6:9b:44:83:ef:b6:d8:ad:0b:27:0d:
72:23:0b:09:a0:f6:52:69:a7:a6:3c:f7:d2:c3:f4:
ea:91:a7:1b:e8:ee:9e:44:7f:48:6d:91:51:fb:ef:
2b:06:15:ae:6c:05:ce:59:14:30:58:0f:42:15:50:
74:2d:d8:95:d3:e3:b4:63:03:72:41:3c:1e:5e:42:
06:35:09:2c:c2:b6:55:98:2f:d3:52:8e:a3:bb:77:
a0:bd:a7:75:ef:b5:a2:aa:8f:34:ce:bc:bb:f8:ed:
93:25:34:75:05:55:6f:93:40:39:34:d3:d9:6e:33:
f2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CE:C7:02:54:FA:A4:F9:FC:CC:7E:0B:36:5D:C7:98:C6:2B:EC:95
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/89ED3C7C2A5F11EFB6A348ED7CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.226.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:21:0a:1b:88:2c:48:4e:a6:4a:74:a1:a1:f9:2a:26:a4:3d:
60:3c:64:66:41:31:1e:e6:e7:18:2f:42:7b:f6:b0:ee:af:51:
85:56:b9:5f:0d:c7:69:b2:d2:4a:56:97:77:01:80:84:ff:6a:
79:bd:19:bd:75:5b:28:4f:c2:47:3b:be:9c:e4:00:fe:ba:a9:
04:a4:40:b5:28:87:30:7d:d1:fd:b4:44:55:f8:53:f9:9a:28:
89:c6:fe:2d:dc:d2:22:22:3e:68:21:b2:42:de:a1:50:b8:82:
f2:80:36:49:41:8d:42:7f:65:db:e5:a5:be:1b:c6:70:e0:6a:
5d:a8:07:57:42:60:7a:3e:22:a0:b6:eb:15:51:4f:76:a8:0e:
56:83:77:7e:52:58:7d:66:f5:8f:47:c8:5d:f4:0c:a8:de:06:
ac:41:d0:c1:43:2a:32:b5:99:e9:59:b6:b9:ad:8a:1f:b2:ca:
be:f7:89:2d:87:0c:33:23:47:53:d2:f8:c9:18:dc:81:4c:57:
e4:54:fd:f6:0d:36:b1:32:a0:5b:18:ab:5f:64:a2:7a:9e:3e:
21:3a:7b:d4:fe:09:51:a3:08:61:9c:b0:de:55:a2:3c:de:8e:
f9:64:f8:22:e6:64:b9:72:ef:0c:e4:b1:a4:0a:71:6d:2e:54:
65:f3:a8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 13:17:25 2024 by rpki-client on console-fra.rpki-client.org