Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/98219DC2674D11EE976552134AD9E6FC.roa
File: 98219DC2674D11EE976552134AD9E6FC.roa (raw, json)
Hash identifier: S7NbkAQo9MyzD3gBpTlnVnUifA5YpuVx7btajH+bRuI=
Subject key identifier: CD:5A:E7:EF:3D:36:30:BE:68:D2:7F:D6:60:30:0A:95:CA:98:BA:CF
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0DBD
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/98219DC2674D11EE976552134AD9E6FC.roa
Signing time: Tue 10 Oct 2023 09:15:46 +0000
ROA not before: Tue 10 Oct 2023 09:15:42 +0000
ROA not after: Tue 29 Oct 2024 09:15:42 +0000
asID: 208949
IP address blocks: 102.129.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jun 2024 10:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3517 (0xdbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 10 09:15:42 2023 GMT
Not After : Oct 29 09:15:42 2024 GMT
Subject: CN=65251642-6556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:32:d1:ce:98:ad:e7:b7:a2:08:9b:2a:d1:9f:
41:e6:9c:ea:d8:8c:e6:14:f3:4c:cf:b3:5c:90:67:
1e:8b:69:ae:70:a7:af:f4:e6:79:a9:4c:bd:ce:91:
99:6e:ed:90:f2:53:1b:ad:39:78:ef:54:c3:89:99:
15:2d:79:d6:fb:20:09:9b:0b:5f:ab:5e:7d:7d:44:
b5:b4:75:c7:19:d3:64:c9:85:82:ab:01:4b:9f:69:
da:d0:f1:ca:9a:01:69:4a:24:f5:f0:59:39:e4:ed:
1d:4a:a6:6e:bb:13:e7:8c:53:b3:93:41:80:dc:30:
ac:05:24:95:e5:b4:c5:f5:62:aa:78:2b:16:c0:8a:
ca:2d:84:8d:d5:c1:d8:5d:55:08:f0:b3:cd:06:8c:
91:b0:f2:d6:88:b3:2b:0b:cf:42:48:4f:fa:25:ae:
fc:ac:03:db:f7:6c:33:cb:dd:58:60:c0:af:ba:08:
d5:1f:2d:24:e9:3a:b3:54:95:f1:9f:94:7b:23:ec:
0f:d0:a9:1e:00:cb:e5:f6:f7:21:87:49:89:47:c1:
7a:3b:bb:68:12:bc:54:30:26:e6:d3:7e:9c:46:6e:
02:a8:f7:8f:84:be:8d:08:c1:ff:b3:21:be:0e:18:
1b:da:de:31:62:41:9c:f5:ee:05:22:4c:fa:39:59:
37:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5A:E7:EF:3D:36:30:BE:68:D2:7F:D6:60:30:0A:95:CA:98:BA:CF
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/98219DC2674D11EE976552134AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.140.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:e3:cc:e3:d7:72:f6:49:6d:dc:8a:64:ff:38:53:0b:ef:97:
86:ee:c2:68:27:0d:b0:02:9a:94:12:78:55:e4:8a:3a:5f:b3:
2d:5c:43:ea:0f:65:d8:34:13:8b:84:18:a8:65:1c:77:d3:f0:
31:37:82:a1:f1:53:e5:38:0b:da:de:59:69:5a:50:43:a7:9a:
ca:4c:3b:1e:88:44:d1:8c:d1:04:f1:24:bd:da:89:d6:e1:72:
0b:be:42:bd:2b:d1:98:c2:02:f6:c0:31:af:e2:97:cd:82:56:
b2:62:ec:41:5a:d2:bd:c9:4b:ec:c9:1a:b4:46:68:92:eb:00:
36:a8:19:85:e4:08:c8:9f:8e:75:cd:88:a1:7d:69:cc:ec:26:
1e:88:d8:6c:a2:27:41:7c:8e:9e:80:a4:37:60:ff:f3:62:f3:
98:8d:58:9c:61:25:f5:8d:ac:ba:99:31:b9:c9:08:c0:21:e8:
a5:94:98:a9:74:41:9e:b1:73:11:70:08:45:f2:8a:4d:5a:0c:
a9:9e:6b:34:90:bd:8a:a3:95:e5:5d:5e:40:8f:fa:38:4c:2f:
6c:31:05:e0:8a:22:88:f9:98:37:b2:2e:4e:8c:9a:9e:2e:de:
d0:47:76:3f:fd:63:51:1d:c2:ca:e9:b5:51:36:a3:6f:83:23:
45:30:0a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 15:24:31 2024 by rpki-client on console-ams.rpki-client.org