Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8D40B400F7C311ED81EE6D0F4AD9E6FC.roa
File: 8D40B400F7C311ED81EE6D0F4AD9E6FC.roa (raw, json)
Hash identifier: omko2sfeNDdrLUM0b1cNst/qW4HljGaLgZtWMjvlaaA=
Subject key identifier: 1C:3A:74:4C:A6:92:98:D8:A6:8E:6B:55:B3:52:EB:59:F9:0B:75:33
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0B92
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8D40B400F7C311ED81EE6D0F4AD9E6FC.roa
Signing time: Sun 21 May 2023 10:37:58 +0000
ROA not before: Sun 21 May 2023 10:37:52 +0000
ROA not after: Sat 24 May 2025 10:37:52 +0000
asID: 834
IP address blocks: 102.129.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Jun 2023 18:26:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2962 (0xb92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 21 10:37:52 2023 GMT
Not After : May 24 10:37:52 2025 GMT
Subject: CN=6469f486-a05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0c:32:90:14:e9:aa:b6:60:b2:02:ac:8b:45:
27:48:eb:1e:55:bf:ec:92:34:f3:1c:61:46:d3:b7:
24:27:43:76:cb:12:9b:9c:06:34:4f:58:5a:fc:3d:
6c:80:2c:00:c1:26:b2:6a:65:80:e3:a9:36:95:68:
c1:a6:e1:a6:d7:0b:73:49:e3:7c:12:b9:72:98:62:
94:ca:da:05:a2:4c:7b:9c:cb:a8:b2:02:a3:8c:93:
99:7b:eb:5d:43:8d:89:d1:74:a6:12:c6:8f:c6:8d:
ce:43:d5:1f:fe:2a:d3:27:32:2d:d1:f6:01:b8:cd:
d8:8d:25:6a:75:e1:50:a5:59:3d:e4:af:ba:d7:2f:
c3:22:ff:de:ef:40:4f:ef:5a:87:c0:25:b9:dd:a8:
46:59:f9:03:33:48:92:89:43:d9:a1:43:57:e9:16:
ee:4d:fc:ac:8d:7b:6c:ef:cd:85:36:6a:b0:89:4e:
31:7d:cb:80:bb:38:84:8a:6f:f8:99:44:7d:4e:e3:
06:19:79:dc:4f:fa:0f:6e:90:c2:91:4f:06:fc:24:
65:9d:6d:31:f7:13:33:5b:2a:08:33:89:9d:94:65:
ae:09:10:16:03:11:24:e7:47:3b:bb:52:43:16:02:
4d:e8:aa:37:b0:db:c1:22:50:1c:23:da:54:cd:20:
97:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3A:74:4C:A6:92:98:D8:A6:8E:6B:55:B3:52:EB:59:F9:0B:75:33
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8D40B400F7C311ED81EE6D0F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.226.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:8c:6b:9a:98:d2:da:35:c5:8c:c0:11:40:f2:cd:3f:c0:25:
a7:25:74:5f:c9:4e:7a:19:03:1a:50:e6:86:ce:9e:ed:cc:39:
ed:3d:9a:1d:33:2d:2b:1c:f6:5a:47:7b:f9:e3:1c:f3:33:be:
e9:67:d7:4a:5b:89:86:3d:fd:02:49:41:64:2b:80:35:f9:e3:
8b:13:d9:62:77:92:e6:1f:62:4a:81:5c:10:78:fb:8d:8b:ff:
96:4e:eb:29:a0:d8:6f:d5:45:4b:a8:74:27:c3:7c:3e:1f:98:
3c:3f:95:96:a7:f8:c4:6b:88:3a:bc:25:53:32:b0:a1:8c:c0:
bd:60:aa:60:a2:3f:ee:15:2f:dc:3e:10:88:fb:3d:10:6a:a8:
68:a2:ee:04:77:d8:ec:31:7e:82:37:e5:9a:4d:a8:64:1e:06:
2b:d7:1c:ff:b3:ca:79:23:c0:fe:05:67:f3:d5:e4:27:b1:34:
d9:09:30:2f:c9:69:00:e1:da:9e:e5:95:21:1c:fe:6f:d6:e5:
24:b5:9d:cf:7c:64:63:f3:93:41:7a:00:28:b2:75:fa:cc:cd:
d9:ee:f5:d8:9a:a1:76:ae:ac:52:61:d3:ea:b1:84:61:b4:55:
81:ec:2f:40:dd:dc:f6:6d:5d:52:06:11:14:be:5d:ce:78:23:
fd:7a:04:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-ams.rpki-client.org