Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/979E9AF8CE5411EE8C52A09D775412E6.roa
File: 979E9AF8CE5411EE8C52A09D775412E6.roa (raw, json)
Hash identifier: 64MvrRXg4j/z7MLR4IXe1gC42TrznooXxsX+aGApk3E=
Subject key identifier: 9B:7A:C9:77:C6:B8:A5:76:63:59:02:EE:A2:C0:61:82:91:5D:CC:38
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0F4E
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/979E9AF8CE5411EE8C52A09D775412E6.roa
Signing time: Sun 18 Feb 2024 11:55:21 +0000
ROA not before: Sun 18 Feb 2024 11:55:16 +0000
ROA not after: Sat 21 Feb 2026 11:55:16 +0000
asID: 5065
IP address blocks: 102.129.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Mar 2024 13:25:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3918 (0xf4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 18 11:55:16 2024 GMT
Not After : Feb 21 11:55:16 2026 GMT
Subject: CN=65d1f029-1236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b6:5f:b3:af:3d:e3:29:13:9a:08:fe:f0:5b:
50:7b:17:95:9e:8e:c8:93:f0:13:0a:19:f7:50:87:
3e:bf:ce:50:3f:e8:6e:9b:54:e0:0b:14:61:db:8f:
ef:e5:a6:72:d8:2f:c6:81:d7:4e:18:c2:9c:7e:d9:
80:c9:16:80:e6:59:d3:d4:26:15:e6:87:7d:5a:02:
aa:f7:19:8b:00:de:8d:08:35:a1:25:70:a5:fe:53:
25:33:df:1b:f5:01:38:cb:f3:bd:08:d0:23:1d:9a:
63:c2:28:15:e5:42:8e:a7:34:ad:19:48:ed:ff:46:
16:9d:32:5e:e1:79:9a:19:e9:65:af:07:92:d0:ab:
d0:29:b3:a7:75:df:f7:9c:6d:a9:b6:fb:ed:a8:bc:
c8:f4:66:9e:73:47:4d:79:0b:4a:2d:5a:6d:ee:92:
a4:6c:3a:78:73:2d:bd:6c:b0:11:f3:84:aa:3f:f8:
dc:dc:00:e3:a4:e3:3f:71:8e:67:d8:c8:1e:6f:fa:
ee:c5:e0:1b:b4:41:34:f0:b7:33:4d:f9:cc:d6:33:
ec:6a:5a:f2:c3:fc:ac:32:07:9e:c5:31:c5:5d:72:
01:1c:f9:f4:a2:49:48:07:4d:6d:f0:18:d4:2e:8f:
ae:22:d7:db:40:65:fe:e5:5a:c3:b6:33:1a:06:62:
02:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7A:C9:77:C6:B8:A5:76:63:59:02:EE:A2:C0:61:82:91:5D:CC:38
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/979E9AF8CE5411EE8C52A09D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.150.0/24
Signature Algorithm: sha256WithRSAEncryption
98:24:93:ed:3f:0e:bb:41:fb:2a:ef:17:f7:2c:5a:04:26:2a:
68:00:58:e0:12:ab:d0:25:0c:01:b0:7e:0b:43:99:4d:2a:9b:
44:d7:5c:ee:4d:ba:9a:be:d0:92:42:b4:40:00:aa:e4:28:42:
07:3c:b1:63:9e:ee:ce:aa:f3:75:47:ea:90:b7:96:f7:8d:2f:
c4:9a:c6:7e:48:19:f0:b9:0d:75:02:90:33:92:7e:d6:a9:8c:
be:20:dd:c2:22:b0:45:d4:bf:2f:73:da:d1:14:ad:17:4f:2d:
1b:e9:8a:21:54:54:90:fd:11:c3:e6:bc:f1:68:43:c1:dd:96:
12:56:0e:75:4d:21:cb:47:00:7d:56:25:56:d4:e7:32:00:f4:
04:31:a7:53:d8:9a:f1:c3:b9:1c:aa:80:10:31:91:ee:4b:1c:
63:6a:f8:c0:3d:b0:c2:bc:70:48:fa:6a:72:01:68:c5:9c:61:
64:9b:4a:00:12:b2:82:cd:b1:1f:b1:34:2a:18:56:60:97:95:
6e:da:21:11:54:a4:6f:31:7a:16:27:f3:76:0c:c8:ea:77:1c:
c8:8a:25:c5:95:ea:4b:96:7a:59:08:d7:e1:e9:cb:33:49:90:
09:5b:19:ed:ca:a1:05:9b:89:6f:71:f4:ec:e7:2f:c6:f8:60:
dc:7c:8a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 18 17:05:21 2024 by rpki-client on console-fra.rpki-client.org