Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8B5B41B81C9011EE9BF328294AD9E6FC.roa
File: 8B5B41B81C9011EE9BF328294AD9E6FC.roa (raw, json)
Hash identifier: OKwG7mFAeyql2WmC+9glukblZiqCMvFIMKyVxkTBMSU=
Subject key identifier: A0:6D:7A:35:46:9A:E9:43:FF:DE:A0:8E:4B:25:55:38:B0:02:42:8A
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0C5B
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8B5B41B81C9011EE9BF328294AD9E6FC.roa
Signing time: Fri 07 Jul 2023 06:36:03 +0000
ROA not before: Fri 07 Jul 2023 06:35:58 +0000
ROA not after: Mon 07 Jul 2025 06:35:58 +0000
asID: 29802
IP address blocks: 102.129.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Mar 2024 18:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3163 (0xc5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 7 06:35:58 2023 GMT
Not After : Jul 7 06:35:58 2025 GMT
Subject: CN=64a7b253-87a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9a:70:3a:76:01:f1:51:89:dd:46:61:24:64:
9e:ae:65:ba:f9:5b:c8:06:95:f3:29:9e:59:2a:3e:
b1:47:55:13:6c:84:9e:1f:5a:40:ee:1d:74:d6:ff:
81:35:c4:f0:7f:f4:2d:26:94:6a:73:36:68:d3:56:
8b:b3:1e:32:27:fc:46:ec:2f:5d:e9:85:69:a9:07:
1a:77:5f:2c:8c:72:74:ee:27:ac:c7:65:ab:0d:f3:
72:30:10:96:10:79:b6:03:14:8f:62:c2:a3:4d:d4:
fe:74:76:d4:f7:c9:05:cf:ab:bc:4d:3b:7d:1c:39:
4d:a5:4c:67:05:6e:5c:28:55:e4:26:7f:cf:19:5b:
6e:e8:6a:d5:78:13:e7:36:8a:ec:24:16:58:c9:c0:
af:06:88:44:30:3b:ad:8a:fd:ca:56:71:f3:07:34:
52:d4:71:8d:0e:38:c5:b7:16:27:18:b9:31:f2:f4:
73:13:1f:61:05:52:4a:74:d7:f6:ee:26:cd:c0:aa:
ba:db:39:57:f1:61:27:be:ff:c1:1d:2b:9e:e8:62:
79:e9:35:af:6d:37:33:5f:8c:27:19:5b:5d:79:5d:
b2:f9:ba:da:91:ec:44:26:b7:80:86:9e:2e:59:80:
2e:c2:42:4a:e0:35:e8:c0:7c:21:67:91:95:09:40:
d2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6D:7A:35:46:9A:E9:43:FF:DE:A0:8E:4B:25:55:38:B0:02:42:8A
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8B5B41B81C9011EE9BF328294AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.183.0/24
Signature Algorithm: sha256WithRSAEncryption
56:d9:c7:2f:41:13:50:86:1f:49:b1:e4:25:9d:7f:f6:da:d3:
40:61:c2:fa:19:4b:ff:68:2b:98:a0:f1:f3:54:f1:f8:2f:c4:
4d:39:c3:cf:a0:f9:9a:1e:aa:b4:34:dc:d4:03:a3:1f:9d:e1:
7e:ba:29:ae:11:f8:27:59:41:32:4a:bf:55:9c:8e:7e:8a:40:
5a:9e:99:0e:21:02:a8:18:e6:1f:35:7d:6e:cd:c1:eb:ac:02:
23:82:2a:92:6b:a3:32:93:63:8b:f0:e0:44:55:b3:89:7c:87:
2c:37:24:3b:94:9f:c4:a1:f8:87:e6:b3:2b:d8:ea:64:18:2f:
b1:54:e5:e2:e2:7f:b0:55:f4:e3:14:2f:ac:73:44:3e:a7:7c:
ea:a2:1a:71:bf:18:83:ec:72:5f:81:2a:f6:e9:f5:29:35:ac:
0c:8f:9f:5c:18:e0:06:ac:2c:08:f9:6f:aa:46:67:40:50:6d:
70:2c:77:08:f1:ad:89:20:91:e0:35:9f:40:83:48:20:e5:4b:
7d:a9:1f:27:2a:90:ae:c2:24:07:3a:83:e5:13:dc:73:25:c8:
a7:ea:c3:34:d5:8d:22:0d:86:5e:7e:83:93:45:48:11:82:56:
9b:ad:38:74:5d:89:c7:f7:c3:d6:53:81:8b:45:21:d7:7b:0d:
d4:c5:fa:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 7 22:37:29 2024 by rpki-client on console-ams.rpki-client.org