Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/91E806F4E86611EE83906D8F775412E6.roa
File: 91E806F4E86611EE83906D8F775412E6.roa (raw, json)
Hash identifier: qiAdj44j1+O4lGNipDSYvuJQdLTimJBhvISCgHnBPF0=
Subject key identifier: D8:0A:89:1E:23:1E:32:13:99:1C:56:51:2D:79:23:B3:65:5B:B9:52
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 100A
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/91E806F4E86611EE83906D8F775412E6.roa
Signing time: Fri 22 Mar 2024 16:09:33 +0000
ROA not before: Fri 22 Mar 2024 16:09:29 +0000
ROA not after: Sun 22 Mar 2026 16:09:29 +0000
asID: 29802
IP address blocks: 102.129.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Oct 2024 07:41:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4106 (0x100a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 22 16:09:29 2024 GMT
Not After : Mar 22 16:09:29 2026 GMT
Subject: CN=65fdad3d-f8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:b9:cc:b0:29:5a:26:fb:3d:21:5b:a9:59:
d4:56:20:fc:de:59:f4:c3:1a:42:97:03:ec:92:47:
b8:56:e0:15:d3:1f:ec:d7:a3:af:5d:a2:d7:7b:32:
2b:19:d1:72:e7:51:a6:d0:fb:8d:f7:3b:64:68:98:
97:37:9f:45:07:4f:63:92:5d:52:35:d9:78:d1:b7:
e7:d7:56:7d:aa:9c:ac:24:41:8c:7b:9c:3b:42:98:
db:36:a0:9c:e3:c1:ae:9f:0d:31:15:13:f7:f6:d9:
65:9b:a8:b6:5e:9b:42:47:39:1e:1f:df:da:31:f5:
32:af:66:ae:0b:a8:aa:4e:16:b1:a9:2c:4f:63:04:
9d:56:be:2a:ca:14:a1:ef:1d:ff:15:66:3d:c3:3f:
a7:41:58:a2:c6:36:dd:74:c6:98:95:ff:9c:21:0c:
9a:bb:3e:c5:59:b1:a5:99:22:c0:d7:0d:b9:82:5b:
9c:3e:b3:f5:63:71:d5:e3:77:54:5d:b4:f7:15:9c:
ee:46:8e:0c:ce:90:28:79:e3:2d:d7:0c:bb:f4:d9:
e5:fb:41:b4:d6:bd:f9:2b:65:fc:7c:64:74:c7:ec:
79:f9:61:72:dd:80:aa:d0:04:82:17:72:27:70:2e:
25:0a:9b:a6:b0:1c:24:10:26:b4:65:d6:f3:17:bc:
86:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0A:89:1E:23:1E:32:13:99:1C:56:51:2D:79:23:B3:65:5B:B9:52
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/91E806F4E86611EE83906D8F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.128.0/24
Signature Algorithm: sha256WithRSAEncryption
54:c4:b9:f5:cf:5d:46:3f:e4:52:00:c2:8b:4a:ad:97:ce:3b:
b1:09:75:e1:0e:7a:cc:90:d4:57:5b:fb:87:09:de:fd:73:53:
70:84:2d:2d:84:c0:1f:9c:77:e5:b3:0b:5e:77:27:53:f6:5d:
5e:65:49:24:5f:02:e5:8e:3c:c3:d1:38:92:3d:19:ae:ed:80:
c4:39:61:ca:6a:a9:52:af:e8:ee:79:13:a0:99:97:4d:42:3f:
5e:2c:89:92:81:1f:c5:64:e0:96:b7:b5:b0:1e:fc:74:44:e3:
9f:a4:d8:d9:d6:18:ee:53:30:ff:00:fe:8b:57:ce:ed:da:9b:
d2:06:e4:af:b8:84:55:b3:b2:3b:4f:4f:e6:1a:47:4b:be:d0:
51:9b:20:d0:46:07:59:ee:23:8d:e9:b5:59:d0:8c:3f:93:7a:
02:ed:86:90:08:5e:fe:ec:18:f1:38:9e:41:75:3f:05:d4:b4:
e8:fa:99:3d:08:31:34:7a:91:20:04:c6:fe:2a:fe:4c:9b:cb:
21:fb:75:c3:ab:43:68:bf:fb:3f:d8:86:a3:43:42:96:5c:43:
e6:50:62:c4:1c:84:54:fa:09:41:1b:dd:4f:48:73:b9:97:87:
9f:e6:3f:f7:44:e8:47:30:b7:5b:f3:bd:5d:2b:10:b2:38:d8:
43:2e:72:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 09:28:06 2024 by rpki-client on console-ams.rpki-client.org