Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/97A2B784CF6411EFBDE2C36E762E951A.roa
File: 97A2B784CF6411EFBDE2C36E762E951A.roa (raw, json)
Hash identifier: OJwFMqxiW9ZrYtodGuzbLUsJj+ZatVtaRc9yRigwI+A=
Subject key identifier: 8E:E8:3D:A1:BE:7B:6A:C0:DA:40:C8:D8:07:01:2E:57:A7:9E:E1:58
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 135C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/97A2B784CF6411EFBDE2C36E762E951A.roa
Signing time: Fri 10 Jan 2025 15:07:22 +0000
ROA not before: Fri 10 Jan 2025 15:07:18 +0000
ROA not after: Sat 09 Jan 2027 15:07:18 +0000
asID: 834
IP address blocks: 102.129.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Feb 2025 11:24:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4956 (0x135c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Jan 10 15:07:18 2025 GMT
Not After : Jan 9 15:07:18 2027 GMT
Subject: CN=678137aa-f2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c7:05:a3:e5:a8:f8:e8:e1:5e:3e:4b:38:d1:
9e:93:ee:4c:55:12:15:01:a3:a7:a7:43:0c:c6:61:
9c:de:95:9c:3c:21:a6:6b:d0:7a:e8:e2:92:68:7a:
78:6f:59:02:31:e7:d7:41:56:37:79:28:af:8c:87:
97:aa:68:24:4b:65:0f:65:6e:87:3b:2b:39:07:32:
93:b1:ae:09:2d:67:56:08:94:3f:3a:9f:e1:a5:f7:
50:71:47:d9:2e:23:b4:b9:47:37:bf:6d:a9:43:49:
b0:21:cc:95:ef:98:5a:f5:46:49:1e:e8:8d:9b:2c:
ec:7a:b1:7f:d9:29:fb:17:e9:f0:03:4e:5a:f9:90:
0d:b1:78:46:bd:44:f3:d0:83:d5:c2:34:51:f5:a4:
b5:27:29:d1:7b:47:ed:95:cc:7f:a9:16:af:0a:ad:
6f:11:40:1b:1b:db:27:1b:cd:d7:76:96:93:9a:2a:
c1:98:03:4a:4a:05:72:14:e7:25:27:15:29:f7:79:
8b:f5:8b:ab:6e:ed:9c:d2:75:5d:2d:8d:5c:c7:3d:
d8:30:2d:0c:aa:f5:d4:50:8b:0d:ad:a4:4c:2b:03:
67:5a:8d:18:ca:4b:2d:d6:81:28:57:97:12:24:27:
d9:6b:17:17:a9:56:90:48:8a:27:80:3b:a6:c9:b1:
02:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E8:3D:A1:BE:7B:6A:C0:DA:40:C8:D8:07:01:2E:57:A7:9E:E1:58
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/97A2B784CF6411EFBDE2C36E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.130.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:18:57:d7:1b:d6:e0:04:6f:3e:29:cc:f0:ec:75:db:13:d0:
4e:e9:37:48:33:59:da:9c:7d:61:52:17:0c:77:b4:61:15:be:
da:d8:c6:2c:d7:02:ab:5d:47:bc:55:aa:9c:4e:42:f3:16:c8:
cd:6b:f8:89:5d:4d:3b:56:23:ef:a4:9b:3f:df:44:38:73:20:
27:2f:ab:d6:d1:a9:9e:93:a6:3e:5c:ad:34:7f:b3:fb:01:c3:
19:a8:dc:e2:01:9d:ad:7d:56:da:c7:17:86:85:90:2f:26:2b:
3c:7f:3c:3f:38:12:e8:d9:78:34:f1:b6:78:4d:b1:f2:54:6d:
50:8a:50:4f:16:ff:00:72:9c:8a:e3:aa:79:90:49:16:c6:53:
58:33:04:65:ba:63:f0:d8:db:f0:87:9a:91:91:4b:59:fe:ff:
58:94:16:28:f4:a4:9a:11:a7:86:73:e4:c9:0e:85:b7:2c:63:
8a:69:f4:02:b9:b1:41:fd:59:78:5d:8a:76:93:9d:f7:5f:92:
06:40:82:33:50:84:94:9f:fb:ba:e5:9b:a3:5c:23:8a:ff:ca:
75:11:8a:18:94:1b:cd:c7:07:a5:45:9c:12:cf:4a:73:b5:2d:
05:57:dd:71:14:dd:89:8f:fa:bd:93:48:07:24:cf:88:81:f5:
5e:3f:29:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:34:42 2025 by rpki-client