Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BBB4DF38308811EF99A0D640762E951A.roa
File: BBB4DF38308811EF99A0D640762E951A.roa (raw, json)
Hash identifier: JeA3Dazll9luX6sLsrRF1GerejBJDuYqFB5GjGCD0rk=
Subject key identifier: FE:A5:BF:FF:ED:F4:E7:50:EA:94:E3:8C:F5:97:78:05:87:53:FE:77
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1114
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BBB4DF38308811EF99A0D640762E951A.roa
Signing time: Sat 22 Jun 2024 11:15:29 +0000
ROA not before: Sat 22 Jun 2024 11:15:25 +0000
ROA not after: Mon 22 Jun 2026 11:15:25 +0000
asID: 61317
IP address blocks: 102.129.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jul 2024 12:41:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4372 (0x1114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 22 11:15:25 2024 GMT
Not After : Jun 22 11:15:25 2026 GMT
Subject: CN=6676b251-c5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:68:5f:25:b9:31:ab:6d:79:d1:8b:5e:36:f8:
98:60:cf:aa:04:d4:29:aa:5f:9e:27:9d:fe:9a:29:
ec:55:5a:36:52:b4:7f:a8:dd:5e:66:72:63:21:89:
c2:b3:23:28:ff:cc:1b:16:2a:92:56:80:d7:f4:5a:
d5:5a:db:c2:1e:e3:62:27:26:1d:90:07:98:6d:57:
8e:72:cd:ba:45:53:38:cc:f2:ef:6e:c5:0f:4f:ca:
49:9a:a0:97:07:4f:fe:26:8b:99:40:1f:fc:c5:d3:
cb:4c:44:93:87:0f:90:24:f2:bc:18:df:52:fa:65:
d5:85:1f:5e:67:5f:86:98:3a:c2:35:0d:29:7a:8b:
2d:4c:14:86:98:3d:7c:5c:8d:08:92:6f:df:e5:8a:
63:37:0b:6b:de:29:8b:57:b4:33:18:e6:57:7d:60:
c7:5c:3b:2e:d3:de:c2:3e:d9:a6:7b:e2:a9:0f:e3:
60:3f:37:61:70:7d:24:f7:d8:9f:47:f9:da:00:7c:
40:ab:21:01:8f:83:59:ca:de:e3:2d:b2:ca:6c:5c:
15:6f:a4:c5:a9:e1:4e:09:76:27:c2:d6:ee:0d:5e:
70:e5:69:72:42:68:3c:46:72:de:d8:7f:9c:ea:5f:
2c:f8:dc:e5:73:e0:2a:6b:b7:15:78:9e:64:65:07:
37:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A5:BF:FF:ED:F4:E7:50:EA:94:E3:8C:F5:97:78:05:87:53:FE:77
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BBB4DF38308811EF99A0D640762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.134.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:ed:e8:38:fb:32:8f:59:68:e6:2f:ca:4f:e5:dd:d9:92:10:
d5:93:e0:a3:33:98:ae:50:1d:cd:62:07:6b:f1:22:ab:76:70:
f8:aa:25:e6:2e:d0:2d:4d:cd:cd:03:ab:6e:89:a4:ae:99:f7:
4d:d1:4b:63:a5:07:34:b3:33:fd:80:91:c1:e8:42:3a:07:33:
43:b1:d5:c3:fb:d7:f9:78:46:62:10:31:31:2d:4a:5e:4b:62:
82:59:d5:09:45:aa:35:96:b7:c4:20:8f:cc:41:99:cb:f4:34:
30:86:58:fb:f3:ab:6d:a5:34:2e:68:0d:bc:40:4b:48:77:49:
48:56:98:3c:95:8e:9b:31:a9:72:a8:8e:e0:f3:51:2a:3e:e0:
ef:dd:8f:7b:c7:27:01:20:6c:56:0e:84:bc:39:aa:61:9a:d7:
5f:f7:f4:f6:90:56:d6:f3:05:e6:7c:11:1b:98:bf:81:60:58:
f8:0f:96:51:f7:c0:25:1c:8e:66:45:d3:f0:6f:b7:59:c8:c3:
c1:e0:a2:b5:e5:85:dc:ce:35:c0:68:d7:f6:c1:07:98:fb:9c:
e7:c0:04:7c:10:77:45:81:98:01:45:05:cd:59:c6:e1:96:dc:
de:c6:91:8a:f0:93:50:ea:b0:aa:a4:31:a2:50:a7:e3:c5:e8:
8a:bc:2b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 15:56:52 2024 by rpki-client on console-ams.rpki-client.org