Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B0EF77ECE59511ECB629ECB5F1222468.roa
File: B0EF77ECE59511ECB629ECB5F1222468.roa (raw, json)
Hash identifier: DQRjY4qEWu/2hWuZrbV6VSqsFw2kKeuWEkcz4I6WHos=
Subject key identifier: 24:17:B3:F6:0F:FC:A5:54:03:6D:E0:86:4D:F1:45:4E:50:5B:54:B0
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0681
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B0EF77ECE59511ECB629ECB5F1222468.roa
Signing time: Mon 06 Jun 2022 12:39:22 +0000
ROA not before: Mon 06 Jun 2022 12:39:17 +0000
ROA not after: Thu 06 Jun 2024 12:39:17 +0000
asID: 40676
IP address blocks: 102.129.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Dec 2022 12:15:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1665 (0x681)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 6 12:39:17 2022 GMT
Not After : Jun 6 12:39:17 2024 GMT
Subject: CN=629df57a-446d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:27:52:2d:28:ad:fb:6a:47:89:36:43:3d:5e:
92:79:19:5d:8f:fe:a4:8a:80:82:c2:db:ed:2b:69:
09:d0:33:31:22:b4:8a:8c:ad:71:7b:7b:2d:a6:1d:
02:d3:dc:2a:8c:5e:4c:c0:a3:86:a6:ba:2e:21:a8:
a0:01:a1:96:00:03:49:a8:70:dc:fc:85:a1:a4:68:
ec:9c:4b:c2:12:8d:ed:2b:fe:d9:14:2a:f1:df:c4:
a7:59:57:e7:74:f9:bd:bf:a3:ad:f7:74:4a:7a:65:
b7:30:2d:17:c6:38:bd:8b:1a:a0:8e:76:18:75:ac:
60:c7:4f:78:a2:de:93:68:32:00:81:a6:cc:0d:9a:
d5:9c:b6:dd:a8:f2:35:d6:6d:80:f6:b0:27:7a:31:
5a:65:29:4b:26:ac:6c:9d:75:f6:41:6f:d7:4d:df:
9d:45:b3:2a:71:5e:60:b7:58:a8:a5:e3:4f:d8:08:
ed:8f:7d:7a:35:bb:32:de:b7:e0:bc:84:93:7d:f0:
b4:8f:75:7c:83:d4:21:16:c9:94:9e:8f:8c:1a:ec:
3c:43:c9:54:4b:59:7d:fd:d8:7e:0a:58:8a:19:a7:
70:16:82:e9:e3:ce:b9:93:7c:98:ab:36:1a:90:5d:
d7:8d:0d:f8:20:ce:10:a6:21:84:81:93:9e:6a:ca:
1a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:17:B3:F6:0F:FC:A5:54:03:6D:E0:86:4D:F1:45:4E:50:5B:54:B0
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B0EF77ECE59511ECB629ECB5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.133.0/24
Signature Algorithm: sha256WithRSAEncryption
31:64:48:bc:e3:9b:f9:7d:9c:61:ff:50:de:cf:8b:eb:6d:cd:
e1:3a:e8:4b:b0:ba:0c:09:96:e3:b0:67:e3:e3:09:47:91:0c:
32:e5:3c:70:33:60:ba:79:5c:6b:26:cc:26:ba:f9:39:ef:a8:
bf:fd:27:35:29:06:99:cc:a5:1c:ba:fd:7d:2b:fa:ad:cf:70:
4a:75:84:bf:03:2f:81:3f:ec:68:fb:92:49:a7:fa:55:ff:d6:
ca:93:19:59:75:b8:f2:79:be:07:9e:23:9d:ff:01:27:e1:f7:
a0:db:29:c4:65:74:ea:e9:a2:8f:f3:02:2a:3f:cc:c2:c9:e8:
6a:8a:c5:2d:0d:1b:ea:48:81:86:64:06:e3:d8:8b:22:dd:82:
25:3b:47:22:de:ae:71:4b:c9:69:f0:73:db:95:ea:a8:e4:37:
de:c8:b1:ef:db:fb:8d:62:f3:cd:4b:d2:65:a6:1e:ea:d5:cb:
8a:dc:a0:fd:11:49:5e:05:0e:30:d5:4e:8e:7a:10:b9:7d:ca:
7d:66:44:76:3d:72:0d:c9:25:c8:4f:a8:7f:fb:f0:ed:9e:cc:
6f:eb:84:fe:4d:db:60:da:64:07:28:df:cb:6d:9b:95:54:f4:
79:bf:e7:b9:1b:02:04:24:9e:8d:e8:43:59:41:3f:03:53:c9:
c3:03:91:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:40 2024 by rpki-client on console-ams.rpki-client.org