Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AE3A75140C1F11EDB7D732AEF1222468.roa
File: AE3A75140C1F11EDB7D732AEF1222468.roa (raw, json)
Hash identifier: BR9j9kJftYh8wozU6NHGKmXobV+cclSitwFXafdqGv8=
Subject key identifier: 43:78:06:9E:A4:80:ED:CC:72:C7:AE:7D:90:6B:73:27:9E:A2:4E:CC
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0741
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AE3A75140C1F11EDB7D732AEF1222468.roa
Signing time: Mon 25 Jul 2022 13:42:52 +0000
ROA not before: Mon 25 Jul 2022 13:42:48 +0000
ROA not after: Thu 25 Jul 2024 13:42:48 +0000
asID: 134512
IP address blocks: 102.129.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jan 2023 04:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1857 (0x741)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 25 13:42:48 2022 GMT
Not After : Jul 25 13:42:48 2024 GMT
Subject: CN=62de9ddc-8610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:89:6a:0c:93:dd:c5:f1:ea:4b:62:39:95:ee:
11:30:6b:be:b8:78:4e:69:f0:e4:6e:f9:21:ec:5e:
b6:18:d6:78:10:9b:43:c2:64:f8:70:68:92:62:59:
a4:e5:01:3d:3a:99:03:25:31:9f:d2:59:4c:09:a2:
e2:54:ab:94:55:fb:a5:a5:b3:a8:50:53:51:5a:a9:
40:05:42:64:2c:91:20:40:cf:37:3d:62:f1:45:27:
cd:ee:3c:39:5f:56:67:c7:5a:83:de:4a:12:27:f4:
b6:5d:8c:82:1f:80:13:2d:24:7c:8a:c5:78:11:9a:
dd:10:39:97:f0:91:ec:ed:1a:f8:2e:df:63:5c:53:
fa:9d:ec:03:c1:ec:32:3b:22:75:1b:6c:0f:d3:ac:
d0:b0:bb:54:64:7b:a9:58:35:12:ff:33:41:7a:a5:
64:1e:e1:1f:e9:f5:fc:99:e9:ad:5e:6f:fb:44:5d:
95:cc:6e:ea:bf:79:5e:f2:3a:7a:6a:42:6e:c7:d5:
d2:3c:85:65:81:3e:27:50:e3:50:f2:30:74:1e:93:
b6:b3:04:3d:a9:2e:14:b7:26:00:f0:e0:c9:21:73:
f7:b7:26:d2:0c:aa:32:c8:4f:02:48:be:80:ab:7e:
50:34:b5:0d:2d:7e:c2:bf:73:5e:0f:34:95:bd:26:
23:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:78:06:9E:A4:80:ED:CC:72:C7:AE:7D:90:6B:73:27:9E:A2:4E:CC
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AE3A75140C1F11EDB7D732AEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.203.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:40:8b:c4:8c:c0:af:3a:6c:f1:f1:87:52:ce:81:c4:81:7c:
72:e3:99:6e:89:6d:42:1e:5a:5f:00:73:c4:35:7f:67:ae:7e:
b3:0c:0e:4e:75:64:77:57:e7:a7:6d:85:6b:88:25:6e:22:80:
ce:42:bf:33:20:ff:51:20:cd:54:c8:1f:c0:40:81:cb:e2:0b:
a8:70:47:8c:a1:c1:f1:5f:f6:cd:e8:92:40:11:58:a1:9f:67:
2b:fb:a6:82:43:57:a2:56:e4:5f:dd:3d:a2:be:42:ba:c0:60:
bd:d4:d0:60:92:43:36:d7:1a:14:ec:e5:9a:2d:ea:73:50:4a:
f2:aa:42:63:c3:91:06:8d:7e:5a:f7:37:c7:99:30:9c:43:e7:
85:d1:5f:57:ff:7b:68:d3:02:2a:f1:b6:2b:52:64:b9:b2:b2:
37:60:d9:4f:1f:e7:a0:6f:cf:33:3d:74:02:41:5a:60:22:c0:
47:8d:38:d9:9d:f5:83:ae:a9:1b:a1:05:88:a6:d7:4e:a7:39:
bf:d2:63:ee:fd:65:d4:e6:aa:5f:a8:82:1c:05:d9:d2:18:48:
95:02:99:ac:c1:6d:d4:52:8a:be:3e:a2:e8:e8:4d:56:70:8f:
87:ef:0f:af:cd:c8:ff:f7:59:e6:22:bc:8e:ac:a3:59:9e:90:
42:0c:79:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org