Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ABE5B5FEB37011EEBACC17C4775412E6.roa
File: ABE5B5FEB37011EEBACC17C4775412E6.roa (raw, json)
Hash identifier: rFxn4bViFyj3THtOg/WnmgQLJo9eJhrdzTjrEZfFygs=
Subject key identifier: 9D:8B:B2:5E:31:CC:50:12:6A:4B:18:BD:81:F6:E9:C4:1F:04:BF:54
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0EF2
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ABE5B5FEB37011EEBACC17C4775412E6.roa
Signing time: Mon 15 Jan 2024 06:38:20 +0000
ROA not before: Mon 15 Jan 2024 06:38:16 +0000
ROA not after: Thu 15 Jan 2026 06:38:16 +0000
asID: 834
IP address blocks: 102.129.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 09:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3826 (0xef2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 15 06:38:16 2024 GMT
Not After : Jan 15 06:38:16 2026 GMT
Subject: CN=65a4d2dc-7b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:71:3f:c8:28:cf:81:e0:af:67:98:40:26:29:
2d:17:f9:f5:81:73:99:bf:d2:38:64:4d:14:8a:36:
1c:4d:1e:bd:4e:d4:42:c7:c4:b3:b2:75:4f:6e:9f:
9b:45:ab:21:dd:9c:84:99:ef:c6:0c:77:d8:ff:2a:
ab:4e:24:0e:1d:ce:18:3b:dc:dc:cf:f5:cd:7b:e1:
2a:18:1a:9b:ad:77:7d:63:86:15:0e:e9:65:55:3a:
f9:b3:a4:fe:15:2e:cc:8e:cd:e4:e1:c2:50:93:7f:
0b:48:4d:ac:77:ba:9a:7d:71:b4:0b:e0:84:53:f4:
1e:be:68:3b:c5:9e:7c:4f:4b:e7:1b:da:71:d6:61:
12:d6:88:b4:dd:5b:37:17:ea:d0:23:2e:8d:61:d9:
0a:c4:02:4d:40:c0:42:cc:2d:1c:04:71:ce:17:7e:
65:45:3f:03:ab:00:74:ec:74:04:9e:b7:0c:50:63:
81:8e:65:fe:a8:6b:da:6c:10:7b:90:96:38:ad:14:
a2:a6:e3:3d:f9:d0:bc:d1:af:88:9d:97:33:6c:b1:
1a:dd:2a:cc:43:06:82:3d:d9:0a:a6:ad:a3:ac:84:
93:f2:16:b6:6f:9e:e3:11:e9:a0:f0:93:a0:07:2a:
d6:ba:75:a0:8a:ee:e0:80:4d:dc:52:56:38:e3:30:
b7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8B:B2:5E:31:CC:50:12:6A:4B:18:BD:81:F6:E9:C4:1F:04:BF:54
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ABE5B5FEB37011EEBACC17C4775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.195.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:32:7d:0a:ba:b0:d9:c7:61:42:d6:8b:b2:a9:76:d4:0b:eb:
87:0a:ad:29:98:0a:fe:4b:1c:cb:8d:b7:46:3e:c2:4c:5a:15:
da:32:a9:24:25:b0:09:5d:ce:16:f4:56:6f:2d:e5:3f:11:5c:
54:b6:a3:99:5a:78:91:e8:08:87:89:16:0b:2b:64:b3:23:f3:
88:6f:1b:30:b4:dd:16:55:2a:2a:17:db:54:5a:f9:91:1d:3a:
b3:2b:ae:8f:f5:02:eb:43:31:16:20:e8:47:30:71:2a:b2:40:
06:89:0f:76:cb:88:80:e7:8c:2e:8d:96:d9:c1:08:24:6f:e3:
0e:d0:71:0b:01:d4:ad:28:2b:ea:08:e7:d1:c3:42:56:23:92:
d8:19:c7:5b:2e:0c:4c:88:43:09:db:e8:b5:64:91:08:dc:a6:
65:ea:38:94:aa:92:24:42:d6:e0:7a:31:7b:5c:2d:4b:b5:82:
6d:13:96:1f:42:4d:a4:9f:90:65:6b:02:a6:bc:75:0f:90:6c:
43:22:64:69:96:8f:59:66:3f:64:6e:2f:d3:87:e8:38:60:7f:
1d:a0:c0:f9:4a:63:5b:c8:fe:27:71:f6:b9:d8:6e:38:4f:16:
54:58:d9:03:d1:52:88:ad:7c:23:50:50:b6:21:d0:d9:f6:53:
c5:af:6e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 12:45:14 2024 by rpki-client on console-ams.rpki-client.org