Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BA89867C94F711EE91456824D25BE465.roa
File: BA89867C94F711EE91456824D25BE465.roa (raw, json)
Hash identifier: 4pgyugVLDgGOX+SWr5khdmyqD6Y7WIHmLFZEcMqhpJM=
Subject key identifier: 61:2F:37:9E:64:BE:D8:A8:7F:B9:8B:BF:8C:D8:30:EB:3D:66:D8:39
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0E71
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BA89867C94F711EE91456824D25BE465.roa
Signing time: Thu 07 Dec 2023 11:57:00 +0000
ROA not before: Thu 07 Dec 2023 11:56:57 +0000
ROA not after: Sun 07 Dec 2025 11:56:57 +0000
asID: 20473
IP address blocks: 102.129.184.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3697 (0xe71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 7 11:56:57 2023 GMT
Not After : Dec 7 11:56:57 2025 GMT
Subject: CN=6571b30c-4daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:52:be:c7:3e:1a:5c:0b:23:47:28:c1:27:
a6:51:ee:7c:28:6c:85:6a:64:a7:ba:a7:76:83:95:
ed:5c:77:cf:2e:fb:21:1e:01:36:07:e0:6d:91:a9:
65:cc:fa:dd:01:b0:ef:74:c9:58:9a:8d:20:72:3d:
81:1b:b1:7f:3b:aa:0b:96:13:df:66:4a:a4:a0:b9:
2c:22:b1:05:30:29:b7:3e:49:d9:56:07:9a:3c:7c:
97:61:1f:95:b9:d5:ce:c9:ce:39:cc:73:a1:48:68:
d8:08:df:83:da:b4:7c:f3:72:74:b1:9c:56:37:c3:
8d:3e:be:19:16:a8:67:f1:a7:29:6f:83:2d:52:78:
11:00:32:5e:d5:9c:9e:c3:47:e9:d4:13:45:a1:57:
84:86:11:15:a0:d9:16:0b:ac:bc:c4:7d:0f:7b:44:
86:d3:2d:e7:c5:21:37:4e:c6:0b:80:46:87:52:3a:
8c:f2:91:95:81:23:90:64:96:56:34:c3:0a:f3:93:
ce:d1:84:d6:b9:d1:d9:3b:fd:6d:dd:e2:a8:79:22:
bb:2f:5c:5b:06:f1:e1:07:b2:58:86:06:10:3e:84:
0e:3b:c3:cd:71:c2:46:82:e8:fa:ef:e8:7a:e7:c3:
28:62:29:ef:49:5b:16:f6:4f:17:05:26:e6:88:d1:
42:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2F:37:9E:64:BE:D8:A8:7F:B9:8B:BF:8C:D8:30:EB:3D:66:D8:39
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BA89867C94F711EE91456824D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.184.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:6e:2a:7b:1b:b0:5d:70:68:3f:fb:18:72:15:20:22:78:74:
ea:a7:d8:c2:36:5d:43:22:72:f0:77:e3:59:ca:26:da:0b:14:
1e:aa:fa:5f:d1:7b:22:49:bc:d2:1f:e7:87:d1:ac:eb:50:21:
e0:bf:4a:f2:ff:cb:2e:6c:41:ee:65:7d:20:47:c8:28:0d:9b:
af:4f:52:81:88:98:60:b5:90:1b:ed:ce:a1:f2:40:e1:58:0b:
1a:57:b2:4c:a9:de:f5:e8:e9:af:b7:60:8e:8e:9b:43:be:dd:
62:14:6b:0d:3b:80:7a:6d:ce:fb:fa:6e:d5:d2:b4:3b:77:e8:
d8:44:06:90:e8:ba:f6:a9:0e:a3:ea:7f:4a:ac:02:69:38:19:
1d:df:7d:c6:ed:5a:93:2d:cb:a9:53:aa:75:9e:69:cc:9b:9a:
ce:62:89:f3:ad:fd:66:9e:6b:18:ad:4f:48:6c:4a:3b:c8:e7:
d7:99:b8:53:a2:fb:4a:ce:17:a0:fe:3a:98:71:7b:13:df:f1:
59:1f:15:74:51:76:fd:cf:15:d1:01:a2:54:37:33:08:5c:1e:
2b:47:3b:54:92:3a:48:df:43:be:c8:48:70:9e:5f:38:8b:73:
ae:c2:e8:88:37:f8:74:a8:c8:81:c9:8b:22:e0:82:cb:0a:bf:
e9:cd:40:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 4 18:54:42 2024 by rpki-client on console-ams.rpki-client.org