Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AA14B3F068EE11EEA27787414AD9E6FC.roa
File: AA14B3F068EE11EEA27787414AD9E6FC.roa (raw, json)
Hash identifier: V0tsD8wcP89jxv8iJSVcTSKpZ4sLI7k6GqxHkhTAgNQ=
Subject key identifier: 2F:A7:3A:61:C9:AD:C0:F7:FA:7A:C9:34:E7:F5:59:4F:68:B3:A9:8E
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0DCE
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AA14B3F068EE11EEA27787414AD9E6FC.roa
Signing time: Thu 12 Oct 2023 11:01:16 +0000
ROA not before: Thu 12 Oct 2023 11:01:13 +0000
ROA not after: Wed 23 Oct 2024 11:01:13 +0000
asID: 834
IP address blocks: 102.129.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Oct 2023 06:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3534 (0xdce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 12 11:01:13 2023 GMT
Not After : Oct 23 11:01:13 2024 GMT
Subject: CN=6527d1fc-c4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:18:61:46:1d:0a:ce:ca:b7:24:82:26:a1:8c:
2d:84:84:f1:c5:b8:1f:ba:18:33:55:a8:47:1b:d2:
c9:97:99:64:f4:8c:fa:98:c8:9a:11:65:93:54:02:
4e:d9:ea:1c:f9:b9:c7:f0:16:41:86:13:22:9a:dd:
2a:90:94:02:22:e2:b5:d5:1e:52:87:d9:7e:50:d3:
c0:3f:0f:14:85:69:ed:ed:b5:e9:d8:7b:ae:bf:f7:
cc:34:f2:b9:44:fe:b7:77:87:ce:de:a6:40:9c:34:
17:f4:9e:90:11:d2:4b:c9:fd:36:a0:e8:b5:4e:4b:
ac:ab:aa:3a:d5:c6:d9:a4:9b:ae:b4:1b:63:83:02:
4e:0e:32:02:18:6c:d9:54:78:2e:c5:6c:f5:44:33:
40:14:46:db:7d:7b:15:a4:ac:6a:c0:37:a8:67:85:
51:b7:9a:2f:b0:43:b5:6f:c6:f5:a3:be:a1:f8:3a:
f3:4e:ec:86:a9:7a:f2:dd:f8:ab:44:87:ad:e2:46:
7c:e6:58:0e:e1:91:be:8d:d8:e8:1f:72:5f:af:3f:
b1:2f:3c:98:5a:69:58:bb:b7:0d:50:77:b4:ac:07:
f5:e1:a1:f6:30:ca:0f:f8:8a:08:f0:34:5e:d6:6b:
4e:3d:45:ef:3a:36:e7:ab:9d:a5:bc:a9:f8:e5:c7:
8e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A7:3A:61:C9:AD:C0:F7:FA:7A:C9:34:E7:F5:59:4F:68:B3:A9:8E
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AA14B3F068EE11EEA27787414AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.195.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:09:a3:3c:a9:17:68:0a:84:9b:da:22:23:39:eb:c3:64:9b:
63:93:86:72:3c:18:fe:0f:d7:85:b5:3b:01:1f:eb:f5:eb:59:
34:db:58:3f:fb:f3:e7:2a:92:32:30:db:40:3c:40:c8:cd:ba:
c8:fc:2a:cb:b7:32:28:9e:04:66:7e:4e:f0:dc:ba:02:7d:5e:
c4:14:a0:d0:ca:0f:a6:22:8f:4e:3c:af:c9:5e:08:bf:99:1d:
b9:84:60:fb:e2:78:01:7c:d1:a7:a2:6f:22:87:75:e0:33:c8:
df:8d:9e:bf:66:b0:11:89:4c:f1:92:ef:0d:a7:ac:00:54:c6:
ae:2d:c4:d8:f4:76:ee:72:12:b9:6a:0b:cf:90:a5:c8:6c:93:
af:b9:43:95:81:a0:d1:b4:93:03:8a:29:07:2f:f6:06:7b:bb:
fd:59:72:67:59:78:be:74:eb:b1:f6:15:f0:6a:89:56:06:36:
7d:00:02:fb:27:8c:b6:8e:cf:1a:65:54:0b:64:0f:3a:95:65:
77:53:84:31:f6:04:b3:2c:0a:52:07:e2:b3:22:e4:b0:55:06:
57:63:0f:95:c2:a4:38:77:fa:e5:1b:ba:cf:3a:5c:7a:25:97:
16:a8:c5:15:c9:ca:c0:74:1c:ba:b3:f6:8d:a8:81:92:54:d4:
ae:e5:1c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org