Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9FB8DF4AABCD11EEBB279C69775412E6.roa
File: 9FB8DF4AABCD11EEBB279C69775412E6.roa (raw, json)
Hash identifier: 66c03uoBtVWfT+tn8M09Mwv+b0M/p1BZyq6uCAmz1l8=
Subject key identifier: 2B:4C:2A:E8:FE:C1:D5:C1:C1:05:D5:28:A0:AB:3C:EA:46:3A:D1:01
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0EC7
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9FB8DF4AABCD11EEBB279C69775412E6.roa
Signing time: Fri 05 Jan 2024 13:23:33 +0000
ROA not before: Fri 05 Jan 2024 13:23:30 +0000
ROA not after: Mon 05 Jan 2026 13:23:30 +0000
asID: 834
IP address blocks: 102.129.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 07:44:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3783 (0xec7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 5 13:23:30 2024 GMT
Not After : Jan 5 13:23:30 2026 GMT
Subject: CN=659802d5-60d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2e:a4:d0:81:72:5c:d9:94:24:93:6c:c6:86:
1a:c0:65:3f:8c:23:45:c7:24:2e:dc:bc:0a:f5:ba:
67:ab:6a:72:de:1f:d7:45:e0:63:1c:e7:c6:34:6a:
2c:39:b2:ec:60:0a:03:e2:5a:d0:31:6c:4e:cb:27:
b1:4d:7a:21:a4:e7:f1:11:c3:d5:9c:74:08:bb:dc:
53:59:79:3a:cd:bd:8a:71:18:b2:9c:98:f1:aa:2d:
3e:a8:b0:6e:93:a0:3f:6e:59:7e:f7:31:42:61:2b:
03:f4:14:75:e9:75:36:5c:25:36:91:44:1d:59:dc:
8b:06:17:b0:66:87:f3:6f:2f:c6:99:5d:2c:60:74:
88:21:0d:5c:12:f5:72:48:9b:4c:8e:e4:8a:83:24:
ac:3c:e1:64:8b:55:7b:57:5c:02:48:83:cf:b4:f7:
9e:6a:8b:3a:a9:d4:7f:60:3b:18:82:e2:03:f0:ed:
58:ce:90:44:d9:86:b8:b2:76:c7:44:60:25:51:95:
e1:e5:84:c5:07:6f:c3:1e:09:2a:53:b2:73:28:ce:
bb:3a:b3:82:ff:2b:20:22:47:2e:99:28:01:74:bb:
b2:88:52:2d:56:b8:7e:bc:44:dd:6f:2e:39:54:32:
a5:ed:89:33:3b:a6:b1:f4:e5:82:88:f5:37:b4:39:
f8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4C:2A:E8:FE:C1:D5:C1:C1:05:D5:28:A0:AB:3C:EA:46:3A:D1:01
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9FB8DF4AABCD11EEBB279C69775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.168.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:d1:25:03:31:f7:e1:8a:32:c5:1f:98:aa:79:db:f1:d0:85:
97:7a:5e:60:f3:42:0d:7d:07:46:f9:3e:c1:5d:cc:e8:e7:e6:
e7:f3:76:f9:d2:e8:2e:82:96:d3:de:00:c8:eb:90:fc:b6:2b:
df:a3:24:2b:52:01:05:52:e5:31:12:b5:b7:fc:49:cc:60:b0:
0a:cb:fd:23:55:ae:89:80:22:24:8c:14:64:1f:74:36:a8:a8:
a9:33:7a:6b:3a:9b:73:d4:7d:71:92:9b:66:d0:a8:6f:92:1a:
b2:b3:f1:53:52:9e:9f:e4:68:9f:84:d4:56:5a:10:7b:a6:37:
cb:60:4f:89:ca:67:86:ca:b4:c2:c6:1a:81:8d:ab:cb:25:d2:
77:60:ad:6c:7d:db:3c:d6:2e:27:31:7b:3c:e6:1c:35:98:16:
4d:27:ac:2a:82:94:7f:fa:4b:69:e1:7b:2c:b5:42:56:0a:c1:
e0:df:5c:ec:34:0d:ef:a0:fa:f6:ca:a0:1b:bb:1f:51:8c:3f:
ff:e9:60:8c:71:b2:cd:0e:7b:8c:36:4d:1b:dd:00:c1:e7:26:
70:9c:dd:86:6a:91:ed:d6:a2:97:67:13:12:9a:0a:7e:54:fb:
e5:64:80:3a:7b:af:81:04:28:8b:9f:8e:72:03:30:ec:c5:cc:
e6:05:5d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 8 12:45:25 2024 by rpki-client on console-fra.rpki-client.org