Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/962EA3B67D5F11EEB7FDF9864AD9E6FC.roa
File: 962EA3B67D5F11EEB7FDF9864AD9E6FC.roa (raw, json)
Hash identifier: geCTO4s7qBG2diBSNWq8KLawsu70XOoQkg04Op3Opbs=
Subject key identifier: 65:77:C7:77:0C:A3:F6:AC:6C:93:81:C4:5A:35:D5:75:16:E3:06:72
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0E2C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/962EA3B67D5F11EEB7FDF9864AD9E6FC.roa
Signing time: Tue 07 Nov 2023 11:19:59 +0000
ROA not before: Tue 07 Nov 2023 11:19:56 +0000
ROA not after: Sat 30 Nov 2024 11:19:56 +0000
asID: 61317
IP address blocks: 102.129.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Apr 2024 12:06:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3628 (0xe2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 7 11:19:56 2023 GMT
Not After : Nov 30 11:19:56 2024 GMT
Subject: CN=654a1d5f-93e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fc:67:03:58:ee:7c:ed:b7:36:cd:d5:15:6a:
45:5d:a0:52:43:62:1c:e4:31:ad:61:4c:72:75:76:
73:26:d6:f0:51:53:4c:3a:fe:4c:51:b5:d5:a8:68:
9d:5b:11:9a:9b:54:74:e2:25:9f:ff:1a:88:06:d9:
c7:98:09:68:95:33:e6:d3:29:fc:0b:fe:b6:08:f6:
5c:74:31:ee:09:06:c9:17:a4:d7:6f:0d:72:74:c7:
e9:19:a5:6a:8e:5a:d4:f1:68:28:43:af:cb:37:e6:
f0:96:61:3e:e1:1d:99:4b:fe:0e:05:13:a3:40:83:
02:e4:e2:a2:b7:b9:c0:25:26:b0:a5:92:db:7e:c6:
2d:f3:3b:1d:ef:2a:78:2f:b7:63:34:c1:a9:b8:b1:
e5:42:3e:bd:2a:f6:34:08:df:71:1f:66:c4:ca:65:
4d:51:3e:e1:13:7e:02:8c:74:96:95:15:d3:a7:3a:
86:7b:61:72:3c:24:df:38:0e:a6:97:b5:58:d1:21:
e7:67:7b:f5:96:41:5d:a6:fb:7d:14:e7:49:32:b9:
c1:6d:92:41:a9:10:ab:88:28:f0:5f:b9:17:3f:87:
a9:58:f4:27:86:0d:24:0b:8e:9c:ec:7c:de:12:79:
e6:67:9b:24:44:d0:58:e3:e5:5c:89:f2:bc:96:fc:
01:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:77:C7:77:0C:A3:F6:AC:6C:93:81:C4:5A:35:D5:75:16:E3:06:72
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/962EA3B67D5F11EEB7FDF9864AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.225.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:20:8f:d8:54:d2:2e:de:58:0b:87:3e:ba:cb:7f:19:59:1f:
3f:42:55:79:53:fa:d0:29:02:b1:29:5b:d2:1c:4d:4f:be:36:
2f:82:2d:a5:7e:c6:00:19:21:5b:20:da:5a:8e:38:ab:73:d0:
a2:51:d6:c6:dd:a1:66:9a:ac:c1:a2:3b:71:25:71:15:48:3b:
c2:29:05:21:5d:d0:2a:65:5e:00:c6:6b:93:bf:06:8a:3b:d9:
f4:ee:9a:0d:04:8e:bc:1b:6f:bf:6e:e7:5e:68:0a:9d:96:51:
b3:39:54:32:dc:0c:77:2e:b5:97:fc:1d:52:02:43:63:97:e6:
13:98:79:53:99:12:4f:8e:08:3f:fe:bb:47:b5:f8:84:62:86:
c2:bf:b3:7f:f7:c6:4d:7a:c9:bb:97:c2:9f:d5:cb:86:78:b8:
76:e2:62:d9:73:f7:46:a4:c5:d6:4b:1e:19:54:6a:5e:b2:de:
55:27:fd:82:29:63:9c:8d:1b:38:27:5f:84:9d:73:fd:62:0f:
8a:d6:7a:de:c1:ac:21:5e:d0:c9:4a:9f:1f:61:e2:7a:10:c1:
13:a5:f1:9b:85:21:19:85:76:94:7b:d2:bd:05:01:1c:3b:29:
b6:fa:2f:45:fb:9d:c0:5e:67:67:7c:2a:86:5b:21:80:b0:81:
8a:8b:1a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 8 17:17:57 2024 by rpki-client on console-fra.rpki-client.org