Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A28E544424C611EF88ADC4ED7CDC24C2.roa
File: A28E544424C611EF88ADC4ED7CDC24C2.roa (raw, json)
Hash identifier: swgQ9Bt07dhv9ltemsDwsP3FJZ1CYdxDrI3XfC83/A8=
Subject key identifier: 68:98:88:6B:95:ED:27:BB:14:00:81:EE:A0:F1:8F:10:4C:EE:51:16
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 10B8
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A28E544424C611EF88ADC4ED7CDC24C2.roa
Signing time: Fri 07 Jun 2024 12:08:22 +0000
ROA not before: Fri 07 Jun 2024 12:08:19 +0000
ROA not after: Sun 07 Jun 2026 12:08:19 +0000
asID: 834
IP address blocks: 102.129.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jul 2024 10:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4280 (0x10b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 7 12:08:19 2024 GMT
Not After : Jun 7 12:08:19 2026 GMT
Subject: CN=6662f836-81b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:7c:87:f8:cd:2d:1b:90:f7:09:b8:1b:5c:15:
e8:7b:1e:d4:71:7b:d3:92:56:a0:37:3f:65:b5:08:
32:c4:c9:1e:13:b0:dd:28:e1:d4:70:4f:66:46:03:
62:da:77:55:80:7f:78:bb:ad:a5:3f:1b:da:d6:ff:
62:cd:61:7f:cd:46:6c:21:91:0d:f3:30:a3:41:1a:
5e:35:22:6d:03:82:a5:aa:35:71:46:d9:ac:bc:ec:
d2:f8:b5:10:f0:fb:b8:36:f8:a1:dd:c2:ad:99:95:
75:6b:07:89:2e:d0:15:be:d1:a9:33:09:41:07:b9:
4b:c0:bd:1b:04:9f:fe:28:06:7c:43:27:a2:e5:f7:
65:52:ea:db:c1:be:a9:0f:66:9d:59:4e:40:cb:8b:
f4:07:c3:33:c2:06:4f:fe:21:38:72:35:1f:cf:26:
21:c8:90:be:c9:07:2a:aa:50:47:79:a8:1e:3d:da:
2a:25:85:15:23:5f:82:5e:3e:fc:3c:dd:95:6a:97:
0d:ba:16:44:3b:2b:9d:fa:36:6c:67:a3:29:f5:18:
e4:d1:a7:45:fc:d1:bc:d0:cd:c8:37:1c:c0:06:75:
45:5c:f5:8d:5c:75:8a:0b:9b:cc:1a:2d:fc:e3:22:
c4:5d:a1:b8:95:d3:85:f4:d5:cd:39:2d:6a:53:86:
de:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:98:88:6B:95:ED:27:BB:14:00:81:EE:A0:F1:8F:10:4C:EE:51:16
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A28E544424C611EF88ADC4ED7CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.210.0/24
Signature Algorithm: sha256WithRSAEncryption
76:aa:33:71:46:0b:bd:9b:40:3d:45:dc:24:11:cb:e0:84:4c:
17:9e:1d:64:08:30:ca:95:f9:14:68:98:ce:ce:1b:5e:2f:78:
0d:63:a3:88:01:86:13:7a:f5:be:36:8d:a0:73:cd:40:5a:cf:
33:c8:d7:d9:9a:ab:4f:70:3c:bd:e9:50:c5:7f:8a:b6:0b:95:
eb:d2:0c:6d:c9:2e:d7:72:ba:19:f8:1e:08:6d:8a:d6:fe:50:
b3:ca:4f:20:91:4e:43:2a:48:0b:43:b0:24:06:3e:42:c3:b5:
ca:f4:3b:c5:fc:3f:34:3d:7f:a0:5b:8f:59:12:3a:1b:27:87:
21:8e:30:4a:5d:22:e1:97:b3:14:a8:b9:24:f5:49:89:3c:a1:
c5:44:a4:35:a5:43:23:5a:84:cc:c5:3a:89:e6:0c:bc:96:e9:
4a:10:e2:87:93:fa:4d:05:bb:10:fe:72:64:33:a0:2b:46:d6:
e9:51:23:57:08:87:66:04:51:ca:65:28:28:04:e7:e5:98:b9:
50:2b:ec:80:d7:09:ed:33:ec:f6:f9:0d:d0:e4:c2:55:e5:84:
97:26:13:05:cd:e0:23:2b:6d:99:dc:dd:62:9c:34:e3:02:ae:
cb:48:1e:32:30:87:9a:a3:45:8f:a8:dc:f8:d9:e1:fa:8b:7c:
b8:f8:d9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 12:56:00 2024 by rpki-client on console-ams.rpki-client.org