Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AF4C393A809911ED8A7FB48EF1222468.roa
File: AF4C393A809911ED8A7FB48EF1222468.roa (raw, json)
Hash identifier: tLFS16IsvjtkwrRps21cBHhHacL7q7Gb628a5ujk4d4=
Subject key identifier: 0D:07:09:38:F2:6B:AE:35:58:CA:3C:91:BD:E0:8B:E0:92:C6:D0:F5
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 097D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AF4C393A809911ED8A7FB48EF1222468.roa
Signing time: Tue 20 Dec 2022 19:08:28 +0000
ROA not before: Tue 20 Dec 2022 19:08:23 +0000
ROA not after: Sat 21 Dec 2024 19:08:23 +0000
asID: 135752
IP address blocks: 102.129.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Mar 2023 05:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2429 (0x97d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 20 19:08:23 2022 GMT
Not After : Dec 21 19:08:23 2024 GMT
Subject: CN=63a2082c-1a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3a:b4:a7:4f:57:56:bb:30:9a:58:a9:00:38:
26:77:70:3a:ca:6c:5e:d8:19:9e:0c:da:bc:10:3d:
9d:da:a0:c0:58:76:2e:44:d2:d4:c9:13:23:30:b0:
8c:7a:57:a9:90:11:83:ba:98:8f:0f:f9:cd:fd:af:
3c:d1:f5:cd:e9:91:6a:c5:9c:1f:c4:41:76:b5:96:
3a:af:b4:a8:81:78:04:74:18:21:56:f0:65:c7:0c:
98:b2:f6:f3:44:7a:0e:2c:d8:b4:b2:1d:9d:cb:22:
f2:39:3e:8e:fd:01:14:f8:e7:46:7c:86:de:86:4d:
ca:b4:4f:4b:d1:d6:29:1b:3d:c5:9f:cc:9d:ef:ab:
d0:52:c1:a9:1c:90:11:75:26:7e:ff:7f:49:9f:90:
6b:ee:16:f7:16:1a:74:10:ac:a9:6d:36:9a:32:1d:
17:1e:86:9c:be:83:9f:c3:51:e4:cb:93:f0:eb:dd:
43:76:19:b1:80:94:2e:52:e2:e5:13:3a:68:ce:65:
92:0d:d7:bf:10:28:14:5d:f1:80:ff:70:b5:56:ee:
3e:20:ed:16:9b:b1:e6:a2:b9:24:f3:3c:03:52:cf:
96:bc:fc:30:dc:5a:e4:f0:70:93:4b:d1:fb:23:e6:
16:df:d4:29:34:48:d3:26:f9:02:90:24:15:8d:b0:
05:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:07:09:38:F2:6B:AE:35:58:CA:3C:91:BD:E0:8B:E0:92:C6:D0:F5
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AF4C393A809911ED8A7FB48EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.170.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:8e:5b:28:52:c1:01:fb:8a:82:55:78:37:81:d6:cb:1d:b5:
db:30:26:3f:cd:bf:13:16:34:62:1f:8f:00:7c:5a:f2:3e:8b:
e3:90:34:1a:cb:b0:03:a7:7f:a3:63:f8:e4:6f:aa:66:7b:e6:
f6:84:27:d2:9b:7f:c0:ad:c0:56:1b:4f:e3:91:8b:b8:c0:b2:
7e:4d:92:87:ed:90:13:3f:be:bb:67:14:54:10:93:d4:ab:d6:
90:7a:00:6c:db:b7:54:47:bf:d0:c8:d6:48:7d:a0:8d:89:d2:
65:34:9e:46:a3:cc:7e:83:11:d7:0f:39:49:6c:5a:12:68:aa:
dc:31:2f:89:7e:a9:4a:ca:b1:0d:ac:c9:a3:7a:71:95:e5:cc:
95:83:e7:20:02:eb:71:6b:96:ff:04:49:44:76:52:55:29:5e:
27:07:f8:63:b8:2c:47:a6:03:d4:6b:f7:52:63:b5:d4:25:a6:
8a:2b:d7:ff:77:75:03:c2:fa:88:65:f6:da:a9:ed:e3:f5:fc:
b5:4d:ad:3f:9d:dc:53:77:1a:d5:1e:17:11:77:d9:80:c9:f0:
04:0a:a3:c4:67:3a:c3:10:76:f1:e5:16:5f:63:72:07:77:b6:
15:5f:97:6b:34:de:81:19:de:cc:0a:cf:bd:bf:24:63:f8:bd:
56:cc:f9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:40 2024 by rpki-client on console-ams.rpki-client.org