Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A3C156CADE8D11ED926BC2B02F6D8C1D.roa
File: A3C156CADE8D11ED926BC2B02F6D8C1D.roa (raw, json)
Hash identifier: C/e8S0D2CJs/xV3M+0/pPGBIQrlhvHdDUxNpSCLpec4=
Subject key identifier: 49:79:BB:A1:19:89:B1:C4:F5:5D:9D:F6:85:DF:6A:44:6E:AC:49:84
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0B1C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A3C156CADE8D11ED926BC2B02F6D8C1D.roa
Signing time: Wed 19 Apr 2023 08:39:04 +0000
ROA not before: Wed 19 Apr 2023 08:38:57 +0000
ROA not after: Fri 18 Apr 2025 08:38:57 +0000
asID: 135752
IP address blocks: 102.129.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 May 2023 07:22:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2844 (0xb1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 19 08:38:57 2023 GMT
Not After : Apr 18 08:38:57 2025 GMT
Subject: CN=643fa8a8-5289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4e:cc:3f:fc:13:68:47:f6:8d:e8:17:ca:fc:
2d:7d:de:17:f0:06:68:b0:75:03:5c:99:61:d5:4f:
4e:04:b0:8f:1e:e6:94:a9:a2:cd:ed:32:7a:81:b2:
b8:7d:10:59:2e:10:8f:7b:30:0e:16:57:07:45:b5:
1a:73:40:b0:31:3d:d0:e5:db:a9:f0:a2:9f:c5:e6:
4a:0c:da:88:c4:b1:6a:a0:4c:4a:2b:fe:28:b4:8f:
ca:17:05:29:27:a2:2e:4d:ff:6e:fa:9c:2c:58:29:
0f:8a:70:1b:cf:09:4c:4a:05:0f:20:de:03:3b:99:
dd:b9:f1:e6:37:75:18:a6:c9:a0:48:e7:62:38:6e:
85:90:52:ee:f6:93:d3:0b:ac:9d:e6:52:30:84:8c:
6e:8b:a8:fe:ae:33:45:fb:04:96:73:53:f1:5a:4b:
4c:1a:c5:0d:f0:90:c5:05:b9:f6:9a:34:11:63:7b:
a9:d5:26:e6:b9:6b:b6:13:7f:4f:ba:59:b7:e3:7a:
44:66:6b:3f:91:9b:d3:1c:dd:d1:d2:02:da:7c:fd:
72:48:05:8b:91:a4:ff:9e:1a:f8:be:82:69:ef:54:
fa:8d:6f:d8:bc:1d:dc:1c:05:dd:fa:27:49:ba:10:
2a:40:f0:ad:49:f0:66:bd:d7:e9:e7:7e:29:4b:cb:
45:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:79:BB:A1:19:89:B1:C4:F5:5D:9D:F6:85:DF:6A:44:6E:AC:49:84
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A3C156CADE8D11ED926BC2B02F6D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.255.0/24
Signature Algorithm: sha256WithRSAEncryption
66:bf:1a:7c:75:c0:61:46:e4:6c:73:31:12:17:7b:da:ab:db:
8f:20:bb:53:14:7a:10:78:68:65:93:3c:4f:2e:40:54:68:a9:
fd:cc:df:8e:3e:2d:46:34:34:4d:7a:93:1a:70:d6:39:47:1c:
d4:28:fe:7e:a9:fd:25:f8:02:c3:be:d5:44:cc:73:0a:1e:e7:
c7:36:8f:76:97:35:7a:29:c7:29:68:fd:5d:5a:7d:f6:b7:a4:
e6:93:c8:04:a1:ff:e0:ed:82:64:83:4d:88:17:e5:af:23:1f:
da:d9:8e:7c:56:5d:31:57:df:87:dd:0f:bd:60:42:91:41:85:
b5:77:91:dc:c8:ce:c8:74:0f:43:65:a4:72:e7:00:88:2f:e1:
34:f3:c8:89:7c:7e:4e:89:fb:d8:d8:ab:95:25:f3:89:6a:77:
52:ed:17:fb:ee:d5:59:5b:40:01:b7:23:3d:7f:e9:b5:1e:0e:
f3:f0:8b:51:7b:6e:5a:2a:d2:f2:b4:66:63:82:a8:97:b8:8d:
f7:50:91:45:23:c6:4e:c3:dd:2e:55:11:36:eb:61:f0:f6:58:
a4:99:92:cc:d9:4f:d6:50:dd:e6:74:d9:9a:f0:a4:c4:e0:e2:
03:ae:8a:db:82:12:49:65:89:e8:58:39:79:4a:fd:4d:42:a0:
e0:f9:9a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org