Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BBCA4790DBD911EF9C6A3EB6762E951A.roa
File: BBCA4790DBD911EF9C6A3EB6762E951A.roa (raw, json)
Hash identifier: m7M5YdrzAvGHJ+H7G5Gf/iA9CeVIxHEolCU4ftY6SH4=
Subject key identifier: A4:55:18:C8:ED:3C:43:5C:DA:8B:05:78:2F:1A:0C:01:F6:2E:81:9E
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1391
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BBCA4790DBD911EF9C6A3EB6762E951A.roa
Signing time: Sun 26 Jan 2025 11:36:09 +0000
ROA not before: Sun 26 Jan 2025 11:35:59 +0000
ROA not after: Tue 26 Jan 2027 11:35:59 +0000
asID: 26042
IP address blocks: 102.129.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Feb 2025 06:24:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5009 (0x1391)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Jan 26 11:35:59 2025 GMT
Not After : Jan 26 11:35:59 2027 GMT
Subject: CN=67961e29-f1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a0:c1:b7:41:30:e5:64:36:a7:c4:c2:dd:6d:
af:ce:c2:1b:35:b5:91:7a:f8:54:87:b2:28:b5:b6:
e8:d2:9e:f7:20:b6:88:10:49:87:49:96:61:20:92:
91:9a:9b:e8:d6:9d:08:12:04:f8:30:10:93:be:ce:
62:dc:db:b5:57:69:d3:7d:3a:4c:db:63:e8:d1:db:
51:8a:39:12:09:63:10:91:c7:2c:c9:f6:c8:19:7c:
3a:12:db:0b:0e:f9:08:f7:b0:7b:c6:be:6e:ca:ff:
38:c2:0c:f4:f3:60:62:1e:70:e6:ee:61:51:ef:0d:
b5:4e:cd:cd:f7:be:7e:53:be:3d:24:c9:17:24:ae:
91:0d:50:42:4f:2e:dd:66:b8:a8:59:25:df:10:9a:
76:0b:80:91:5c:d8:83:4d:69:d8:d7:57:4a:1f:e4:
d3:a0:15:5d:e0:76:60:f2:b4:21:a1:8f:13:a9:dd:
3c:52:d2:31:76:b6:bb:b8:ff:1f:67:3d:d4:f0:da:
e3:33:4a:36:c1:f2:5d:be:97:bb:16:ae:12:a9:06:
d0:02:72:4e:ea:5b:6b:cf:fa:24:73:88:ff:4c:a7:
9f:c6:92:d8:e5:a6:dc:67:ce:e7:b2:d2:eb:a4:43:
4f:ea:10:09:80:75:9c:ac:ce:39:d6:68:7f:6e:cf:
d3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:55:18:C8:ED:3C:43:5C:DA:8B:05:78:2F:1A:0C:01:F6:2E:81:9E
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BBCA4790DBD911EF9C6A3EB6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.241.0/24
Signature Algorithm: sha256WithRSAEncryption
59:b7:13:17:61:0d:dd:1b:4f:d8:85:e1:9e:7f:b6:1a:00:ab:
7f:ee:eb:a6:e4:75:78:6f:87:2d:ad:ab:0d:73:af:78:25:7e:
dd:a8:66:f8:f3:73:8d:95:80:19:9b:bb:f2:18:dc:dd:a2:15:
14:d9:a8:d9:0a:13:05:52:93:5a:65:71:b6:3a:65:9c:69:70:
3a:e1:2f:3c:fe:44:6c:9d:d7:cf:ba:b2:a6:c1:76:46:8d:ce:
c9:36:eb:31:b3:fc:9b:4c:1d:64:d7:31:24:92:12:2c:ca:24:
28:89:36:ff:37:4a:b8:5c:f0:76:35:78:14:72:bf:a6:d5:bf:
1d:7b:eb:47:91:d9:7f:6a:27:88:cc:44:cf:1e:5f:3b:19:31:
e5:e6:35:3e:78:69:7a:a0:25:b0:f6:f5:18:7e:72:d8:fd:43:
a5:f9:92:cf:eb:85:6e:0e:d2:28:87:f8:84:cb:1b:a2:0d:be:
3e:7e:1f:02:37:c3:82:85:7f:f7:24:d3:42:87:ce:b4:4f:9d:
0e:46:c0:fd:2e:7d:c5:04:11:a0:9e:07:b4:f9:b3:c1:2e:78:
29:5e:a8:8c:8b:6c:db:95:36:09:3e:8c:33:3e:49:87:d5:55:
3a:3c:a9:39:06:5c:15:76:09:96:24:47:bd:7e:1e:74:46:8f:
62:d4:77:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:31:28 2025 by rpki-client