Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BB9B5A9E42FB11ED8660AB88F1222468.roa
File: BB9B5A9E42FB11ED8660AB88F1222468.roa (raw, json)
Hash identifier: rjgbeH5qvpID66Ugo0CuzB5ZMrmiSkyQV6e+saW+6dA=
Subject key identifier: 30:FA:62:7E:DD:5C:B2:20:54:89:54:5C:C4:D4:63:86:7D:2A:B6:53
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 081F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BB9B5A9E42FB11ED8660AB88F1222468.roa
Signing time: Mon 03 Oct 2022 09:14:07 +0000
ROA not before: Mon 03 Oct 2022 09:14:02 +0000
ROA not after: Sat 05 Oct 2024 09:14:02 +0000
asID: 210703
IP address blocks: 102.129.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jan 2023 15:04:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2079 (0x81f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 3 09:14:02 2022 GMT
Not After : Oct 5 09:14:02 2024 GMT
Subject: CN=633aa7df-6893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e5:67:09:b8:f9:81:9d:64:b9:33:6b:cb:0c:
05:e6:d4:76:e8:d9:4f:22:72:7e:7a:ca:e7:7d:b4:
06:c2:28:ad:1a:a5:19:b7:e4:3d:58:76:34:49:f3:
b9:a0:5d:85:af:ac:e3:7d:eb:aa:cc:d7:0f:3c:e1:
e1:c3:f9:a9:37:be:f9:3a:a1:10:9b:a2:b0:2b:02:
20:df:68:ac:b8:8e:20:06:65:b6:1c:cd:8a:05:81:
08:9c:e3:0d:71:ed:03:47:42:fd:d3:cd:7e:03:74:
4e:c3:0a:32:36:27:e2:20:85:5f:be:6f:00:1a:ab:
7f:54:bd:8b:05:5a:b0:09:e8:4e:2e:4d:86:a5:8b:
38:60:85:37:60:1d:ee:97:0d:b8:80:0a:22:96:49:
87:d0:87:60:df:95:a4:4c:da:23:db:08:55:80:1a:
4d:76:5a:45:e4:68:bf:67:59:ef:8d:50:99:82:17:
fb:31:80:bf:38:10:2d:b0:d4:bc:c4:c9:a3:78:08:
ba:eb:f4:07:22:67:06:85:d6:63:66:ed:00:3f:c1:
76:a4:37:fe:8f:cb:16:9a:6a:8c:f8:31:c3:11:94:
be:8d:fb:9b:32:bf:5a:7d:4f:b1:ee:c8:d6:3c:50:
df:22:ec:1d:d6:ba:49:3f:89:1b:31:a1:6f:c1:03:
6b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FA:62:7E:DD:5C:B2:20:54:89:54:5C:C4:D4:63:86:7D:2A:B6:53
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BB9B5A9E42FB11ED8660AB88F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.225.0/24
Signature Algorithm: sha256WithRSAEncryption
73:80:11:9b:5f:11:60:72:91:82:ac:5c:1e:4f:b1:e8:0f:c2:
cf:fd:8e:a9:c6:e5:1c:9e:62:2a:ea:66:45:1e:de:f1:d3:69:
21:78:a2:17:18:35:87:d6:ca:47:60:29:7e:4b:91:dd:d5:33:
eb:22:98:9d:e8:aa:68:78:bf:52:95:c9:2d:d4:3c:dc:15:ce:
6e:53:52:b2:60:ad:42:c0:e7:14:61:ae:a8:b2:2c:15:5c:e2:
65:56:30:8c:e6:6e:a6:17:d2:5c:32:cc:fc:ab:21:8d:fd:a9:
02:6d:c0:b5:99:4f:db:72:c6:93:d8:e5:4a:06:62:fb:ba:e7:
4f:c3:f3:7a:38:37:63:34:54:7d:39:29:8b:b5:01:ef:6f:06:
a0:40:f7:c9:af:41:db:f4:4e:15:61:30:4a:dd:bb:4a:95:97:
dd:ce:a8:c4:36:8a:b6:62:6d:d6:9b:85:51:4a:47:ba:23:d2:
4b:18:9f:2a:ba:ba:93:31:c7:77:b9:c1:6a:b3:79:0a:98:54:
3b:26:3c:e5:d6:24:97:49:b7:19:3b:8e:ff:e7:f6:dc:0e:1b:
5e:8d:9b:9f:78:59:a3:2d:2a:ff:f0:f2:4a:b0:fb:67:63:0a:
2f:fd:f5:6f:2e:20:a5:53:a4:cc:31:87:3f:99:c8:fd:10:fb:
b3:ce:21:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:40 2024 by rpki-client on console-ams.rpki-client.org