Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A0279DC27E4211EDA0EF5B9DF1222468.roa
File: A0279DC27E4211EDA0EF5B9DF1222468.roa (raw, json)
Hash identifier: yonTaVHKkPiEAGOD412LkCStipSKjxqWZDx6DnsKs1o=
Subject key identifier: 83:CD:04:4A:77:13:3A:2E:9A:5B:F5:F1:55:13:4D:70:45:01:4A:80
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 096C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A0279DC27E4211EDA0EF5B9DF1222468.roa
Signing time: Sat 17 Dec 2022 19:40:14 +0000
ROA not before: Sat 17 Dec 2022 19:40:09 +0000
ROA not after: Sat 21 Dec 2024 19:40:09 +0000
asID: 212166
IP address blocks: 102.129.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Jan 2023 04:11:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2412 (0x96c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 17 19:40:09 2022 GMT
Not After : Dec 21 19:40:09 2024 GMT
Subject: CN=639e1b1e-74f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c5:24:02:4a:27:3d:be:47:71:b9:c8:d5:c3:
d8:08:56:0d:89:c1:ee:eb:2a:47:d1:34:86:6c:f0:
a4:19:32:b4:e8:2d:40:4a:d0:41:d3:7b:e9:48:75:
06:cc:0b:a4:04:28:60:27:61:e9:76:91:4f:55:00:
53:93:53:7e:48:78:6f:c6:d6:b0:7c:4e:ff:63:fe:
1f:64:c9:63:00:57:0c:4c:10:99:01:35:d2:b5:b5:
db:53:c5:19:f0:d4:1b:60:e1:e8:37:be:42:4a:88:
12:4e:0b:0d:7b:78:57:72:c1:92:7d:34:c8:29:41:
82:bf:f0:5e:5a:e1:a0:60:a9:d6:4d:f7:97:f2:39:
06:d7:fd:e1:7b:d7:32:41:2f:d3:55:a6:6a:72:7a:
0c:8e:0d:a6:3e:30:cf:70:d6:19:34:f0:c5:c7:23:
d6:9d:bf:59:d0:51:46:90:be:9f:da:e4:02:fc:65:
ca:35:29:a7:0b:dc:33:68:d5:a0:fa:25:18:7a:2b:
5a:05:0f:52:cc:c6:46:1f:cd:f3:15:33:0d:ba:b1:
5f:de:6a:45:e1:fe:6e:e9:5e:b4:63:1b:15:8c:bb:
e2:83:76:dc:e3:98:53:ae:75:a0:c7:c2:fe:e3:e6:
58:53:83:6b:b5:0a:75:5c:24:33:4a:46:2c:35:38:
5d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CD:04:4A:77:13:3A:2E:9A:5B:F5:F1:55:13:4D:70:45:01:4A:80
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A0279DC27E4211EDA0EF5B9DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.216.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:a8:93:c9:e4:74:d9:5b:72:4e:b8:9a:f4:6f:24:a1:44:6b:
b2:e5:74:1a:79:cf:0d:37:9b:50:df:86:cd:b7:24:0c:fe:2f:
24:26:6f:5f:e6:46:fa:18:77:32:97:2f:99:37:a1:e4:f7:0a:
fc:6c:c5:d4:ac:11:d0:9b:56:cb:81:41:ce:45:7f:10:9b:15:
69:19:65:96:b0:6a:01:49:22:6d:69:1c:8f:d6:e9:ee:00:6d:
0e:33:7b:ff:dd:5c:52:c9:9f:6c:ea:7a:8e:31:30:72:f9:a6:
11:a3:82:49:67:c3:97:fe:df:83:50:27:fb:c1:53:ee:22:35:
dd:86:dd:2a:f3:db:4b:c6:87:fc:34:66:ac:33:c0:62:73:c2:
81:c4:b6:e2:41:b2:a6:d6:b8:5f:99:ac:72:d4:3b:57:b8:b8:
6d:8f:fa:af:ab:cb:68:8f:4f:9d:fc:1c:83:fa:32:ce:ad:81:
5b:ba:99:8f:be:b3:00:af:40:f9:ce:ec:28:8b:5a:73:c9:77:
f6:9e:06:b7:40:c1:28:50:8d:ac:75:2c:da:53:db:b0:09:35:
bb:0b:37:c7:1e:b2:66:97:36:7f:5d:bd:c0:2a:a3:b1:ed:16:
07:c5:87:36:f8:7e:d0:ec:01:59:c9:08:e1:97:2e:2c:bf:e1:
57:82:e2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org