Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B5044DE2B16B11EDA66C8A96F1222468.roa
File: B5044DE2B16B11EDA66C8A96F1222468.roa (raw, json)
Hash identifier: RuUq3y5RHgSLsNbnkYBAnFFWe/42MuTcAlarBL77Vvo=
Subject key identifier: 95:54:E3:EC:85:4F:80:B5:B7:43:50:87:F5:18:33:75:2F:66:B7:70
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A2C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B5044DE2B16B11EDA66C8A96F1222468.roa
Signing time: Mon 20 Feb 2023 22:12:48 +0000
ROA not before: Tue 21 Feb 2023 22:12:43 +0000
ROA not after: Fri 21 Feb 2025 22:12:43 +0000
asID: 7922
IP address blocks: 102.129.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Feb 2023 22:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2604 (0xa2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 21 22:12:43 2023 GMT
Not After : Feb 21 22:12:43 2025 GMT
Subject: CN=63f3f05f-9711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:fb:d5:55:ea:a1:80:81:7d:0d:af:4f:6d:8e:
79:76:47:34:38:e6:ce:82:64:6a:48:66:52:25:89:
66:46:1a:4f:3f:a9:52:dc:57:5b:b9:77:16:5e:1a:
1b:de:16:e6:35:4a:43:c3:51:c1:8c:cc:df:17:5c:
60:1d:25:86:e7:f8:64:17:00:5e:ac:46:7b:84:e9:
d3:5a:35:02:2d:81:c0:d3:8b:70:b4:a8:49:a0:e7:
f3:1b:1f:52:b1:ad:5b:52:65:76:39:13:14:05:68:
9b:26:39:56:42:6f:1a:cf:04:53:d9:02:39:0d:b6:
a2:b7:08:40:19:8d:c7:d0:48:e7:7f:3e:8a:05:f1:
b7:05:ea:60:42:00:e8:69:7d:69:79:ce:60:d2:c4:
5a:6c:27:45:94:c0:a9:f4:94:ee:af:1a:4b:45:24:
73:d1:86:c4:90:32:24:23:8e:ba:5d:1d:30:1b:1d:
49:85:35:fa:80:f7:f1:80:38:fd:a9:8b:94:3b:60:
72:22:a9:70:e8:4c:fd:4a:1a:97:37:3b:c1:49:6f:
80:cc:31:de:f3:6a:a1:4d:22:76:58:bd:ad:22:04:
9a:38:ee:a9:09:1f:e5:e7:8b:30:0c:b1:41:bc:2f:
fe:2c:b8:03:0c:85:e4:b8:5b:49:ae:c2:1a:2e:53:
db:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:54:E3:EC:85:4F:80:B5:B7:43:50:87:F5:18:33:75:2F:66:B7:70
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B5044DE2B16B11EDA66C8A96F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.178.0/24
Signature Algorithm: sha256WithRSAEncryption
43:fd:6c:7b:b2:ae:96:fb:7c:b3:a2:94:bf:0e:18:fc:ca:e5:
22:eb:b0:f9:4e:5b:c4:54:e9:d1:5c:a7:05:1e:d6:b2:f8:a0:
0b:f9:6d:d7:fc:36:31:8c:5f:45:0b:f6:60:96:ab:c0:b2:1f:
7c:15:ef:33:63:46:f9:27:2a:c9:6f:41:c6:8c:d1:fd:31:19:
3c:0e:04:0e:a7:1b:52:8f:ef:33:88:ee:96:4c:17:c4:79:48:
6e:75:51:45:ab:ce:19:b5:af:94:67:9b:34:83:c2:90:88:31:
de:9e:69:89:14:17:80:b9:a1:9a:f7:ce:24:f9:ff:67:0a:76:
b3:24:ef:7c:fa:c1:e3:6f:24:51:58:c4:a3:9d:bc:57:ae:da:
dc:5e:dc:8b:5e:82:07:6f:2c:e8:d8:ad:cd:2f:91:2a:cf:76:
eb:b2:d5:b9:d0:06:de:23:52:01:44:8c:b2:b1:d0:7e:83:4e:
6a:0a:3c:34:1d:4f:8d:ad:34:28:43:82:ce:c1:c0:43:2a:7c:
c5:a8:dc:20:99:fc:86:bc:48:06:27:ce:65:95:0f:91:ce:c1:
1e:81:0f:65:80:81:78:81:b3:f3:72:47:c9:f0:a9:e7:e5:90:
20:d1:3d:c9:62:7e:4a:18:9a:85:50:69:1f:1e:9d:aa:3c:99:
c4:fb:86:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:40 2024 by rpki-client on console-ams.rpki-client.org