Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A6519D6EDBD911EF800231B6762E951A.roa
File: A6519D6EDBD911EF800231B6762E951A.roa (raw, json)
Hash identifier: a0ykzH8xVr4/5JpHuir6ASPfI5oKj1CR+4x+BMWv2hs=
Subject key identifier: 2F:80:00:4A:A7:7D:32:6B:E5:3A:78:C6:58:0D:72:7E:39:7F:9B:D3
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 138F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A6519D6EDBD911EF800231B6762E951A.roa
Signing time: Sun 26 Jan 2025 11:35:32 +0000
ROA not before: Sun 26 Jan 2025 11:35:20 +0000
ROA not after: Tue 26 Jan 2027 11:35:20 +0000
asID: 26042
IP address blocks: 102.129.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Feb 2025 06:25:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5007 (0x138f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Jan 26 11:35:20 2025 GMT
Not After : Jan 26 11:35:20 2027 GMT
Subject: CN=67961e04-02f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:43:14:7a:14:95:73:2d:81:13:25:3e:26:91:
2d:c7:83:01:80:c8:11:bf:31:c8:8f:43:59:e2:fd:
1a:4d:74:19:f4:95:00:67:1e:06:5d:a8:07:38:fd:
23:7c:22:ef:53:21:e9:c4:9d:10:39:b4:1c:d3:72:
66:33:1c:40:f9:95:82:e6:f5:8b:82:60:29:3a:c1:
ce:67:68:42:ee:f7:4c:2c:13:49:68:2d:3e:49:15:
06:fb:4f:c6:dc:0c:09:6d:2c:d1:ab:9a:09:d5:7d:
c1:4e:2c:84:5a:50:3a:99:02:9e:03:2c:02:1f:39:
e2:09:c9:8a:5e:46:e5:a5:03:52:36:0d:2d:fa:86:
56:4b:16:eb:1b:8b:78:4b:45:be:0c:12:e0:ad:4d:
a1:52:e7:83:99:18:5a:7a:a1:ce:7e:72:d3:97:d1:
94:97:d4:c1:9f:4e:df:a1:5d:f5:82:be:c1:35:08:
e6:98:23:ad:b5:6d:53:c5:d7:0a:d6:dc:a2:dc:65:
b8:8b:c0:d2:db:45:68:38:99:3c:35:10:de:01:f0:
42:fd:a5:66:53:2f:6f:b7:0f:64:8a:25:56:ae:8b:
77:af:e7:f4:96:00:8d:6b:d4:24:ca:d4:b7:c8:c1:
73:87:ae:40:71:52:e6:45:3b:59:8b:72:28:30:52:
c5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:80:00:4A:A7:7D:32:6B:E5:3A:78:C6:58:0D:72:7E:39:7F:9B:D3
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A6519D6EDBD911EF800231B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.246.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:e9:7c:a9:00:19:e1:8d:73:0a:0e:1f:37:44:52:73:fb:c5:
97:4e:31:6e:98:2b:b3:87:e7:50:b1:cf:94:70:06:78:d0:d8:
6e:75:24:57:9b:a5:94:86:57:a1:ed:7d:87:65:e4:e4:96:c8:
ad:40:8e:06:04:3f:84:92:fc:6f:7d:cd:fd:b7:4a:7f:69:22:
43:ec:61:09:ac:c4:c4:62:46:96:10:81:f8:6d:e1:b8:68:e7:
69:07:d0:d5:21:b2:82:04:25:e3:79:21:2b:aa:93:6e:e2:54:
91:0c:e8:a3:5b:9e:79:58:50:18:d5:8d:53:59:4d:a2:07:d7:
87:d4:1a:7c:4d:27:fb:a5:05:cb:7e:f3:b4:df:ea:8f:58:81:
d5:d2:db:e5:54:6f:b9:4f:c5:c5:21:c0:34:86:fc:f9:ea:8c:
7d:5f:f4:58:e4:7b:98:86:69:60:fb:49:95:6b:3c:e4:2c:56:
be:ef:b9:c5:fc:70:2d:b6:f6:bd:a8:65:08:f4:e9:33:f6:d5:
be:3d:ae:51:17:23:82:ce:5c:c9:0a:29:ad:f6:05:37:0c:a7:
62:5c:cf:08:c5:17:6f:42:3b:1b:89:3e:df:95:87:bc:a8:15:
61:ee:7c:e5:88:cb:a7:66:ee:20:d9:d8:5c:cc:7c:8a:cd:ea:
b7:5e:0e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:52 2025 by rpki-client