Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9007C32CF73611EEB770FE3F017001B1.roa
File: 9007C32CF73611EEB770FE3F017001B1.roa (raw, json)
Hash identifier: nZRO/wdeRIsT22/m9Y1ldVCRUVKJrRl0fQb1GkajmnQ=
Subject key identifier: 27:CD:8C:89:83:BF:C0:34:89:C0:87:CA:86:34:F4:F7:8E:62:BD:15
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 104D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9007C32CF73611EEB770FE3F017001B1.roa
Signing time: Wed 10 Apr 2024 12:33:41 +0000
ROA not before: Wed 10 Apr 2024 12:33:38 +0000
ROA not after: Fri 10 Apr 2026 12:33:38 +0000
asID: 834
IP address blocks: 102.129.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 13:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4173 (0x104d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 10 12:33:38 2024 GMT
Not After : Apr 10 12:33:38 2026 GMT
Subject: CN=66168725-b877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:22:32:83:f8:74:c7:32:31:f1:a5:04:38:4b:
44:30:74:73:b8:95:b3:ad:fe:e3:dc:72:53:4d:84:
bf:d0:36:5b:23:5c:d0:bf:3a:47:79:24:f1:08:66:
3f:d9:dc:c7:24:f6:70:e9:ef:57:45:d5:c3:07:3b:
8b:e9:13:29:f0:76:b6:09:74:ce:ac:49:0d:c1:5f:
e7:2a:39:07:4b:51:d1:80:f5:e0:e3:f1:78:6c:dd:
f8:f5:f1:2f:6c:47:8f:51:f4:27:57:1e:22:5d:bf:
90:1e:e1:93:18:3c:fb:ee:b9:13:5b:15:48:57:aa:
b9:4f:24:4b:db:3f:b5:21:e3:8a:05:3c:33:43:ec:
d4:f7:a4:cc:a4:2a:d5:8e:a4:8e:9b:03:71:d8:91:
6b:36:46:0c:08:28:f2:1e:e6:15:c1:1f:8e:88:ab:
75:98:77:5f:18:48:65:ab:5c:9f:21:5f:63:3b:82:
0d:ae:52:32:d2:ee:cd:c3:4a:45:29:c4:3e:d6:89:
66:b5:4d:60:7f:0f:ed:c9:3a:72:13:8f:0f:12:98:
e7:f9:0d:a5:e4:94:00:12:34:13:e1:55:bc:9b:40:
04:90:2c:92:66:c7:53:f0:38:4a:3a:02:16:05:26:
c4:24:12:63:4e:28:16:1a:48:6b:45:39:cc:2a:3c:
4c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CD:8C:89:83:BF:C0:34:89:C0:87:CA:86:34:F4:F7:8E:62:BD:15
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9007C32CF73611EEB770FE3F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.199.0/24
Signature Algorithm: sha256WithRSAEncryption
25:d9:3f:27:f9:50:3c:b4:76:dd:1d:1e:51:6c:56:96:c9:73:
b5:a3:93:d1:61:82:b0:a3:21:1e:78:92:fd:6e:00:58:78:a9:
00:b3:8e:e6:7e:2d:55:b8:de:a8:bd:20:ea:15:4c:2a:74:20:
cf:4a:30:8a:5c:e2:ae:bc:cb:e8:b2:1d:10:69:85:fe:0c:ae:
6c:f4:3d:20:3d:1a:b9:40:0b:b7:f5:15:4c:fe:66:cc:35:f7:
98:3f:ef:bb:71:d9:4e:fc:eb:44:e0:0c:4c:8c:e0:a5:92:8e:
d1:81:4b:bd:01:b2:cc:7b:6a:6d:52:99:a2:54:46:17:c4:9d:
23:8f:52:db:49:a2:b6:df:57:a0:cb:39:7b:a3:37:4a:f5:5f:
3a:42:11:24:f7:23:73:3d:f7:47:e4:1a:65:b7:ed:95:d4:3f:
5b:b9:66:3f:e6:1b:ad:7b:7f:e7:04:37:2a:88:f4:22:81:b5:
92:32:2a:51:60:3b:9b:36:ed:f4:1a:4e:d7:7b:de:d3:47:03:
cb:b1:80:e1:e1:48:47:fb:6f:88:b3:cd:a0:ed:84:bc:ab:cb:
dc:ae:79:96:a8:84:13:c7:1b:6e:d9:0a:0f:75:a4:5b:c0:41:
04:d5:c3:e4:0b:42:fe:c7:c5:a4:fd:50:2d:07:0f:03:d5:9e:
07:ce:b1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 11 16:38:10 2024 by rpki-client on console-fra.rpki-client.org