Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9344A1669CCA11EE9367474BD25BE465.roa
File: 9344A1669CCA11EE9367474BD25BE465.roa (raw, json)
Hash identifier: jLRutYPRvTXB+McefyUbaJYiEB4sdYZE8q8bwjoZM0c=
Subject key identifier: B5:AE:FA:C1:FB:30:35:30:67:A2:C4:49:A7:A1:C7:EF:7E:38:6B:6E
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0E98
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9344A1669CCA11EE9367474BD25BE465.roa
Signing time: Sun 17 Dec 2023 10:53:56 +0000
ROA not before: Sun 17 Dec 2023 10:53:53 +0000
ROA not after: Wed 17 Dec 2025 10:53:53 +0000
asID: 834
IP address blocks: 102.129.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3736 (0xe98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 17 10:53:53 2023 GMT
Not After : Dec 17 10:53:53 2025 GMT
Subject: CN=657ed344-e4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:60:c4:71:3d:18:16:96:f5:b6:d3:40:31:b2:
8c:eb:9a:92:ea:78:f4:f0:9c:0d:94:2a:a4:23:f4:
b8:de:fa:74:1f:f6:99:4b:a8:7a:80:11:06:2c:0c:
9e:e2:7e:9b:38:d6:d3:9d:5c:d5:0f:84:c7:8a:1d:
a6:36:56:ee:dc:43:06:26:04:94:70:63:3b:45:4f:
b3:65:86:9e:ef:3b:3c:47:c5:85:a9:50:1b:d7:06:
8d:52:cf:de:58:0d:d6:ee:c9:ad:0d:ff:1b:ba:8b:
74:cd:ec:01:55:d5:a2:d3:59:35:3a:0d:1c:2c:44:
9a:3a:82:02:7b:1a:d1:76:ef:9e:17:de:9f:67:ad:
bb:11:d6:1e:7c:b1:d3:41:08:3e:b2:08:56:51:a7:
55:d0:1e:87:11:46:e4:da:d3:3b:0c:67:30:71:82:
6a:68:b6:0f:aa:ab:d0:72:7d:3f:3c:7f:43:2e:1c:
3d:84:bc:1c:62:6d:88:75:ab:1e:d6:ea:bd:44:23:
65:ed:c2:d6:88:23:91:73:67:99:e0:d1:8a:55:8f:
47:fb:4e:7d:53:8a:19:33:20:b9:3e:0e:36:68:c7:
aa:b8:ef:d2:1d:08:a3:76:ad:f8:fc:40:53:67:71:
ba:94:1f:e4:20:2e:ef:20:6f:7a:34:dd:08:3d:56:
b3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AE:FA:C1:FB:30:35:30:67:A2:C4:49:A7:A1:C7:EF:7E:38:6B:6E
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9344A1669CCA11EE9367474BD25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.216.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:48:c7:d5:d1:0f:76:e2:ab:34:08:5a:25:62:7b:5b:5f:5d:
30:47:f0:0c:e2:ec:ef:d3:5f:78:93:72:f0:e8:ef:24:9b:15:
2d:fd:42:3e:95:77:37:d5:13:cf:a4:8b:2b:8e:3a:87:45:b6:
c0:26:f3:6d:2c:79:f6:69:81:97:b8:67:08:50:57:5e:e9:ec:
d9:e5:94:b1:ce:bf:bb:09:c6:8f:08:14:77:9b:df:bb:7e:e9:
27:a3:ef:57:a7:68:2b:aa:50:6e:26:ec:ea:98:55:a8:58:8b:
5a:d2:57:83:2a:ec:90:96:69:de:04:bd:cc:20:d8:dd:de:5b:
50:ff:7e:1a:a9:e9:a5:dc:87:a5:fb:64:14:70:54:f4:de:34:
f5:a3:9c:ee:4a:ee:10:b5:22:3c:a1:5b:de:34:88:38:12:92:
38:89:d8:72:c1:9c:1c:c1:03:a6:bf:60:3f:f9:58:e3:2d:a7:
81:63:dd:c8:cb:33:71:66:58:77:f0:a5:ec:e4:fb:3e:b5:59:
4f:8f:ba:26:70:7e:b5:67:87:bf:66:ea:ec:e7:db:e5:a1:7d:
47:71:85:66:df:aa:f7:79:cd:e6:36:42:6e:54:3e:e5:b0:28:
a9:5d:14:e8:c2:0c:78:02:7f:d5:97:cb:45:d0:73:02:ee:34:
e5:d2:68:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 08:30:19 2023 by rpki-client on console-fra.rpki-client.org