Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9DB41716390111EF936E9D97762E951A.roa
File: 9DB41716390111EF936E9D97762E951A.roa (raw, json)
Hash identifier: FxhebZb116ZFvTKUUyPtjGJc3hV2DR63f/ZWTqHuA0o=
Subject key identifier: 0D:A5:85:8B:D6:48:5D:E9:02:F7:00:39:DE:EB:6B:C9:80:AA:22:AC
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1137
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9DB41716390111EF936E9D97762E951A.roa
Signing time: Wed 03 Jul 2024 06:00:58 +0000
ROA not before: Wed 03 Jul 2024 06:00:54 +0000
ROA not after: Fri 03 Jul 2026 06:00:54 +0000
asID: 834
IP address blocks: 102.129.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jul 2024 10:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4407 (0x1137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 3 06:00:54 2024 GMT
Not After : Jul 3 06:00:54 2026 GMT
Subject: CN=6684e919-74b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:41:dd:3d:81:58:af:57:e9:2e:98:1e:64:b6:
c0:e8:f1:43:e7:47:f9:08:1b:c2:fe:24:81:d0:8f:
9d:fd:f1:34:ed:8b:48:40:01:86:84:e1:49:26:71:
cb:96:e4:2b:07:29:45:8c:a3:7e:ea:a1:c9:5a:76:
87:85:c2:bc:62:67:b0:46:28:ff:d2:ee:4e:ce:8e:
15:0a:21:e7:58:a6:41:6c:0b:7a:54:6b:dc:58:e5:
4d:71:55:16:f0:9f:93:c4:37:43:e5:46:c2:28:85:
45:48:74:6f:8c:bd:66:e4:84:a4:67:bf:a0:02:59:
ca:42:e1:d7:17:45:95:a8:a7:dc:7f:76:7e:b6:2d:
ac:9e:e5:e7:c8:fa:20:8e:7c:c4:a0:14:b9:aa:d4:
76:ec:24:94:15:a6:18:79:ba:b0:13:b4:7b:85:6c:
6a:0f:f8:51:58:c9:c6:4b:f4:09:b5:b5:50:d8:c0:
ab:2a:b8:67:4e:fb:ee:8f:17:1e:3a:08:c0:17:e7:
d5:87:9a:76:83:a0:a0:6f:4f:70:a0:70:c4:09:90:
28:0f:24:8c:38:ef:f0:58:b3:88:41:6f:38:a2:c4:
ab:56:2f:8d:1f:62:ac:0f:4b:0d:d2:1e:fa:3a:c7:
8f:72:e2:15:0b:60:64:70:fa:aa:4c:bd:70:31:ae:
21:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A5:85:8B:D6:48:5D:E9:02:F7:00:39:DE:EB:6B:C9:80:AA:22:AC
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9DB41716390111EF936E9D97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.240.0/24
Signature Algorithm: sha256WithRSAEncryption
13:63:88:7f:d5:28:6c:f0:c2:13:b8:14:6e:80:29:f7:c4:25:
01:d7:d1:c7:02:de:2e:15:d3:b0:bd:de:4b:8a:4d:6d:b2:22:
2f:1e:b2:92:8f:c2:e3:10:78:32:f8:08:5f:c7:b6:71:91:c7:
6e:6a:04:75:4b:20:7d:ea:8b:07:fe:b0:bc:dd:b8:78:92:59:
c4:6f:05:ac:fa:d3:71:51:80:dc:ce:75:6b:6e:6e:83:82:7e:
82:27:ff:1d:2c:df:0e:ac:7f:f4:36:27:94:64:2a:e2:41:ef:
8b:c4:b9:07:f3:6e:ef:e0:db:3d:73:fe:54:c0:7b:7a:8f:a7:
a7:77:be:b7:42:a4:e5:bc:92:0e:53:d7:d1:dc:67:d7:18:a4:
7d:0d:3b:df:0e:2c:78:e0:ff:0f:ae:b7:3b:fb:c3:98:21:b0:
df:39:87:8b:c2:77:55:8b:24:0e:ae:5e:f0:46:58:ad:d1:a4:
47:e8:52:29:36:d1:61:52:5d:46:7f:f6:c7:8a:c6:45:a0:60:
db:49:eb:79:8b:ff:6b:3a:75:8e:c9:bd:b5:00:9a:b5:2b:f4:
9f:81:45:4f:d1:b5:ed:eb:84:eb:70:2c:b5:8f:28:49:4f:dd:
55:e0:a9:0b:3a:74:3c:f9:e4:50:bf:5c:dc:f0:96:03:cb:64:
e1:74:7f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 12:56:43 2024 by rpki-client on console-ams.rpki-client.org