Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A65A341ADC4D11EE81E2ECB1775412E6.roa
File: A65A341ADC4D11EE81E2ECB1775412E6.roa (raw, json)
Hash identifier: F2Be/7sf1jC5V5Wmf3XwgAPExT5O5rlkECE98Zv5AjI=
Subject key identifier: 82:7F:32:52:57:EF:B1:9D:B2:07:7C:C6:CC:ED:24:33:20:5E:A1:C2
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0FAD
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A65A341ADC4D11EE81E2ECB1775412E6.roa
Signing time: Thu 07 Mar 2024 06:40:56 +0000
ROA not before: Thu 07 Mar 2024 06:40:52 +0000
ROA not after: Sat 07 Mar 2026 06:40:52 +0000
asID: 215453
IP address blocks: 102.129.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Mar 2024 18:10:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4013 (0xfad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 7 06:40:52 2024 GMT
Not After : Mar 7 06:40:52 2026 GMT
Subject: CN=65e96178-973e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:db:6d:b2:1e:d0:cf:38:88:77:84:68:6b:f4:
6a:9f:ad:15:4d:fb:d5:65:62:dc:2d:9f:0e:80:75:
bb:bc:a9:cf:32:14:f3:7c:92:96:c0:97:c1:09:64:
1f:4f:8a:e7:08:f3:fd:11:54:07:cb:93:1a:2e:96:
08:df:12:d2:84:b0:0e:b3:33:84:3d:ed:57:85:01:
50:06:20:55:88:34:b9:ee:7b:05:61:18:ad:72:f0:
70:36:17:cf:22:2d:3f:13:10:62:0f:21:d7:58:64:
2e:3a:93:d5:ee:b7:e5:0c:19:42:08:87:41:54:f8:
24:6e:25:a7:e4:75:40:3c:66:d7:2a:bd:6d:70:ae:
76:6c:68:4a:7c:9e:fb:f6:3f:1b:ca:54:4f:6a:ea:
f9:ac:08:1d:d2:86:e7:53:93:7c:64:68:eb:51:e4:
e8:05:02:84:ee:b1:52:8c:96:6a:fa:f3:84:23:91:
bb:c8:56:8e:1c:43:dc:6e:2e:a0:c3:9f:a7:e4:0d:
b0:77:ef:12:4e:6c:7d:20:bc:d2:50:43:1d:36:41:
d2:ce:8e:6f:fa:1d:ac:5c:1d:64:4a:02:87:54:5d:
ad:e1:28:e4:2d:e9:16:bd:d1:14:1e:c9:47:3b:c6:
9c:61:98:1d:cf:ba:80:be:c8:5c:81:ca:4a:0c:72:
b8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7F:32:52:57:EF:B1:9D:B2:07:7C:C6:CC:ED:24:33:20:5E:A1:C2
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A65A341ADC4D11EE81E2ECB1775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.213.0/24
Signature Algorithm: sha256WithRSAEncryption
22:86:3c:d3:b4:81:04:6c:7d:1a:06:3b:7a:43:41:0a:7b:a3:
1f:26:f3:99:1c:4f:01:8b:e0:b5:89:ff:96:cf:11:f3:fb:d6:
af:23:41:60:44:29:f6:14:7f:fe:0f:d7:63:69:3e:4f:6f:5f:
a8:95:ca:ca:31:95:3a:77:ee:45:aa:31:33:b2:c4:91:e9:22:
dc:18:f2:10:82:0b:d8:8e:4a:d7:3a:55:87:8d:91:bb:18:da:
f3:f7:66:62:64:87:55:a9:be:f2:a2:d8:0f:81:9c:6d:a3:8b:
ac:35:8f:0a:3f:a8:ff:d7:12:11:8f:20:46:a4:f1:42:86:89:
d2:d6:af:41:63:7f:e1:d3:e5:3c:69:0a:49:4b:09:c7:f7:68:
ac:26:c1:f9:46:8a:fb:83:0c:53:6f:4c:66:c1:ff:0f:ea:aa:
64:e0:45:62:81:7c:a9:b7:36:99:9d:86:2a:2c:df:27:44:a0:
8f:a8:a1:60:95:92:be:c5:22:a3:ed:3f:fe:c4:32:aa:c0:e6:
29:b1:75:e8:54:3e:01:bb:b5:ef:68:21:4a:89:9a:38:8b:ee:
a4:50:42:75:e4:da:cd:49:48:c2:24:cf:7d:09:b3:5a:5f:da:
1b:3b:48:6c:6e:ae:64:27:a6:73:e4:0d:ce:7a:f1:c9:c6:74:
53:16:cb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 7 22:37:29 2024 by rpki-client on console-ams.rpki-client.org