Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9DC4B060AB8711EEB695F96D775412E6.roa
File: 9DC4B060AB8711EEB695F96D775412E6.roa (raw, json)
Hash identifier: UfuagQpaZlsq2eW7dkexzp96Bqet5Qg4OiJ/5tWGnQY=
Subject key identifier: 38:5A:C6:DA:29:52:4E:03:12:CE:3E:63:E0:02:8F:91:E6:96:07:72
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0EC4
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9DC4B060AB8711EEB695F96D775412E6.roa
Signing time: Fri 05 Jan 2024 05:02:25 +0000
ROA not before: Fri 05 Jan 2024 05:02:22 +0000
ROA not after: Tue 06 Jan 2026 05:02:22 +0000
asID: 23470
IP address blocks: 102.129.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Feb 2024 13:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3780 (0xec4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 5 05:02:22 2024 GMT
Not After : Jan 6 05:02:22 2026 GMT
Subject: CN=65978d61-2344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:c2:a7:09:dc:4c:78:74:c9:6f:95:23:17:
69:9b:d2:78:34:e0:24:2b:3d:50:a9:b9:bd:a3:c8:
8a:9f:eb:13:73:47:a1:7f:dc:66:be:32:80:47:f6:
2e:85:34:1d:4f:a2:39:ae:b2:7c:49:28:c5:3a:cb:
ce:a1:4d:b4:71:a3:d1:21:83:5b:00:d1:25:d1:f9:
24:f0:d5:bd:04:6e:9d:6e:06:4e:e4:99:e3:37:51:
23:58:38:b1:e8:5b:8d:45:96:fb:c4:cf:89:2c:c5:
ec:20:34:dd:13:d3:69:cb:c4:b9:68:a2:dd:8c:77:
63:6b:43:cd:be:94:7a:35:f7:cf:df:b1:60:eb:2c:
03:d7:89:bf:6d:b0:25:85:cf:84:7a:8e:89:d7:be:
98:cb:b2:d6:e3:c6:04:29:ba:4d:cc:8e:27:3f:45:
99:54:1c:3e:3d:ec:56:10:6b:10:e6:7f:c1:71:46:
d7:85:87:42:53:d7:04:7c:c3:61:07:be:e0:a7:94:
1d:41:59:db:20:d7:b1:49:8c:b2:69:cb:63:e9:15:
00:c8:53:0b:b7:cd:44:71:a2:ab:8d:8b:b6:5f:92:
f6:a2:44:b6:24:4e:b6:19:6b:88:40:d9:07:ce:d1:
82:14:d6:80:c7:56:28:6e:62:f0:be:51:4c:a1:af:
52:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5A:C6:DA:29:52:4E:03:12:CE:3E:63:E0:02:8F:91:E6:96:07:72
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9DC4B060AB8711EEB695F96D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.167.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:f5:cb:94:bd:af:fb:29:61:5a:52:52:eb:3d:63:63:34:d9:
d4:c4:a4:50:ac:ab:b8:41:e4:c1:64:3d:8a:28:94:2a:75:0a:
be:ca:02:65:5f:74:e6:9f:7f:d0:b3:f2:c8:6b:a8:d7:48:ca:
13:2a:df:63:65:72:b3:a5:45:25:4e:d7:68:76:1f:5f:70:0b:
09:24:b1:5f:41:68:cb:44:2f:6b:cb:22:48:10:d8:a1:6e:8c:
dd:de:36:0d:90:3d:68:21:8d:c3:2b:ed:23:b7:57:9b:e6:ba:
34:f3:73:a8:17:fa:90:de:e3:82:14:4b:3a:7f:18:32:90:b0:
de:8e:a3:9d:61:41:a1:7c:84:e8:63:77:25:d1:d4:69:1c:03:
33:f7:c2:aa:3d:90:12:5b:6b:3c:21:b7:3c:47:29:ee:aa:84:
28:a1:61:26:cc:20:c3:fc:23:29:23:a2:28:78:c3:de:c5:e4:
bf:d8:7d:e0:90:29:69:cb:6c:bc:0b:d4:29:f0:8d:f2:a0:29:
1c:3f:7a:75:69:03:2b:5d:43:57:f4:20:a1:1d:0b:ae:2c:2d:
a0:99:6a:b2:16:e3:74:2c:fc:83:64:f9:ac:02:67:2f:c2:ff:
f4:36:af:07:db:04:96:7a:66:16:31:28:23:88:f9:6f:c1:76:
9f:e3:38:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-ams.rpki-client.org