Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/980C2CB2B45111ED97A4C8E8F1222468.roa
File: 980C2CB2B45111ED97A4C8E8F1222468.roa (raw, json)
Hash identifier: LsfJqRaUVZRGfvWN5cOetCNt3/FDeTq5ejn2qtZNcCs=
Subject key identifier: 7A:25:3C:97:DF:57:65:93:1E:44:B7:48:35:6E:15:07:B4:F1:72:67
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0AA2
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/980C2CB2B45111ED97A4C8E8F1222468.roa
Signing time: Fri 24 Feb 2023 14:43:26 +0000
ROA not before: Fri 24 Feb 2023 14:43:21 +0000
ROA not after: Mon 24 Feb 2025 14:43:21 +0000
asID: 61302
IP address blocks: 102.129.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Mar 2023 16:41:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2722 (0xaa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 24 14:43:21 2023 GMT
Not After : Feb 24 14:43:21 2025 GMT
Subject: CN=63f8cd0d-6651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:dc:9d:1d:d6:f6:9a:f1:40:4b:56:55:73:1b:
2a:1a:ac:3a:5d:ae:11:fd:d1:0f:8a:00:b0:29:aa:
41:e6:f3:dd:1c:e7:22:d9:48:50:3c:c2:b0:20:fa:
ef:cd:d9:1e:b7:6a:2d:20:7b:68:c5:ef:bb:80:f4:
79:24:59:87:55:86:67:3b:33:96:89:78:bb:a8:82:
60:ed:a8:44:94:78:2a:27:da:ad:87:d5:a4:0f:e3:
ee:fa:58:a0:67:8d:a3:47:b7:66:41:71:cb:a5:ed:
85:ba:3e:01:02:d1:c4:c2:67:2d:a3:50:31:bb:f5:
91:9f:9f:92:1e:19:c5:1c:aa:a3:20:b8:48:6c:50:
70:33:63:1a:4d:14:87:66:0f:d0:b9:ce:02:45:70:
6c:a6:e1:c3:dd:b9:4d:21:22:c4:82:78:f4:17:b5:
e6:6a:d1:5b:72:92:99:e8:3f:01:c1:76:2c:f5:18:
99:62:43:85:b3:6d:41:b3:0c:0c:f3:b6:af:26:6e:
ff:11:f7:85:66:23:a4:f1:f2:e3:29:b5:11:2e:30:
ba:80:52:70:45:1e:8a:eb:9d:0a:75:a1:20:93:eb:
7c:87:13:49:71:f7:8a:f6:20:6e:14:47:39:de:be:
2a:0a:99:3f:34:22:14:ca:eb:65:e8:f0:6a:9c:34:
d0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:25:3C:97:DF:57:65:93:1E:44:B7:48:35:6E:15:07:B4:F1:72:67
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/980C2CB2B45111ED97A4C8E8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.247.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:68:4a:3b:a3:9d:6c:6a:a5:a6:a3:ac:1a:b8:7e:8c:75:7b:
cd:a0:ee:6d:1b:f8:b3:b4:e7:56:52:dc:e2:ab:35:81:1b:98:
cf:1f:a5:4c:75:86:14:5b:d9:57:f8:c9:66:0e:39:05:53:16:
0f:0b:ec:a1:48:cc:34:92:24:ea:d8:a7:c3:e2:1f:53:7c:f0:
94:84:aa:51:e0:22:eb:22:58:6f:b5:74:a7:50:82:73:19:96:
c3:13:f3:04:bb:68:a1:f8:d9:fa:0f:95:28:f6:85:90:d3:d7:
d7:58:80:a5:bb:c4:85:1d:10:29:03:be:24:0a:a1:b9:88:f5:
01:f0:15:52:f0:9e:d2:d1:a7:23:fc:a7:86:a9:51:4f:51:0e:
4e:c5:c3:4b:ad:8d:32:fc:80:be:e2:d3:28:9f:be:e6:92:84:
f4:bc:25:02:1c:67:44:8b:97:77:c2:4c:c3:30:3e:bd:12:ac:
e8:3f:80:94:03:3e:ea:46:98:79:82:74:c3:77:2b:92:a3:a9:
ac:73:de:cd:81:87:98:fb:2a:5a:07:32:c5:66:5e:47:b9:fc:
b8:61:f5:0e:6e:6f:4f:14:c3:39:16:17:f9:a4:f6:49:15:ab:
72:36:58:af:bf:a8:5f:f7:3a:a6:51:97:8d:17:9e:c5:53:71:
66:e5:4a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org