Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AC5B6D22B42E11EDAAF9E67EF1222468.roa
File: AC5B6D22B42E11EDAAF9E67EF1222468.roa (raw, json)
Hash identifier: Q7kqAwX7HdkrsiS5jqHMVBTex+QO/gaaV1T23RHK0gA=
Subject key identifier: 6F:3B:C4:6C:CF:A5:95:AA:92:6B:2A:C9:F1:1E:BD:47:70:82:80:21
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A80
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AC5B6D22B42E11EDAAF9E67EF1222468.roa
Signing time: Fri 24 Feb 2023 10:33:27 +0000
ROA not before: Fri 24 Feb 2023 10:33:24 +0000
ROA not after: Sat 22 Feb 2025 10:33:24 +0000
asID: 61317
IP address blocks: 102.129.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 14:21:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2688 (0xa80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 24 10:33:24 2023 GMT
Not After : Feb 22 10:33:24 2025 GMT
Subject: CN=63f89277-f997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:ca:fa:42:f5:54:70:2c:b5:dc:c6:54:d5:
65:79:96:04:f3:92:e3:96:38:c5:5e:8e:51:c6:c2:
ad:7e:3e:0c:c0:a5:1e:0d:b2:0f:eb:5f:79:8c:a8:
8e:b4:f9:ba:d6:35:2a:cb:57:1c:ed:a0:68:44:02:
6a:d0:bc:50:f4:16:21:b1:da:ac:55:3d:35:36:7c:
7a:99:3c:b7:77:e9:ce:87:db:cb:fa:22:16:f5:88:
b8:d3:f3:72:d6:e3:0a:64:d3:26:f6:1c:f2:99:28:
ac:6a:f2:1b:f2:f1:97:97:5f:ee:b5:34:87:ab:87:
84:99:3e:b3:0e:8e:bf:34:f0:68:7b:96:75:97:6e:
32:56:d9:89:e2:f2:03:e7:35:77:b7:b0:ff:17:97:
1a:da:98:ee:92:b1:ee:40:d0:e3:3d:4a:bb:a2:63:
97:ed:fe:85:e5:68:e3:a0:a8:4e:8c:ed:a7:82:3c:
d2:82:f4:64:67:6a:2d:d0:47:8e:13:5c:ed:ff:99:
66:04:43:27:3a:0c:7d:92:8d:72:a0:cd:d2:5f:9f:
45:30:f9:97:0f:1e:cf:59:3e:4d:78:18:ae:8a:e1:
a5:7d:f9:8a:0b:ac:c0:03:21:a4:7b:66:18:fa:01:
68:a5:49:e0:73:f0:4a:20:c7:28:3c:e0:1d:a5:c2:
97:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3B:C4:6C:CF:A5:95:AA:92:6B:2A:C9:F1:1E:BD:47:70:82:80:21
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AC5B6D22B42E11EDAAF9E67EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.210.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:1a:67:c9:14:c8:ba:e0:f3:5b:49:9e:63:0d:c4:d9:e8:2c:
df:e4:ad:2f:cb:1b:b3:8d:ce:28:70:74:c3:90:8c:d9:fa:88:
ac:2b:eb:6c:87:2d:a9:91:3c:e9:56:6a:2d:61:d9:c8:1e:0c:
57:9e:d7:b2:05:7f:84:1b:cd:09:f9:62:b1:50:c5:2a:0c:06:
71:53:55:b0:58:8b:03:fb:bd:23:06:4f:f8:de:ab:c7:d0:81:
d4:43:2d:77:34:e4:95:df:7a:7e:87:02:a3:4e:e2:99:5d:30:
5f:b6:72:2f:71:8a:da:98:cb:e8:c7:45:09:da:aa:44:25:bc:
16:82:db:25:04:e8:9e:72:68:a4:c8:b0:64:86:99:3a:b3:a8:
07:c7:a4:11:49:dd:0d:32:ba:01:92:bd:49:6c:f7:b2:77:52:
eb:b8:f8:29:51:44:5f:be:db:dd:0d:61:6a:30:39:3e:61:2f:
21:99:62:85:d3:2b:e8:f5:65:41:0a:31:5e:42:a1:75:2e:aa:
2f:f1:5d:3c:3a:63:02:cd:70:fe:e1:c6:76:33:94:ff:38:d0:
cc:a3:b7:b4:0a:41:2b:15:25:54:21:b0:87:29:1b:83:a7:58:
d1:27:69:03:09:7b:7c:d7:fc:21:a7:bc:0b:28:ba:4d:19:3f:
57:0a:f7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 18:42:05 2024 by rpki-client on console-fra.rpki-client.org