Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BEFB4DFA2A5F11EFBD5181ED7CDC24C2.roa
File: BEFB4DFA2A5F11EFBD5181ED7CDC24C2.roa (raw, json)
Hash identifier: sDIl3BBEnAx/2HKHIde+AgwsN/3jlpraIOa6g3u2rxo=
Subject key identifier: C5:A8:88:FA:13:7A:1C:80:22:A1:86:65:A1:28:D4:7B:A4:0D:25:F0
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 10ED
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BEFB4DFA2A5F11EFBD5181ED7CDC24C2.roa
Signing time: Fri 14 Jun 2024 15:06:59 +0000
ROA not before: Fri 14 Jun 2024 15:06:55 +0000
ROA not after: Sat 13 Jun 2026 15:06:55 +0000
asID: 209181
IP address blocks: 102.129.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Aug 2024 17:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4333 (0x10ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 14 15:06:55 2024 GMT
Not After : Jun 13 15:06:55 2026 GMT
Subject: CN=666c5c93-0f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:67:cc:60:b9:99:f2:c6:12:68:df:7c:89:ee:
52:f1:e8:00:50:4d:ec:e6:ba:e2:ef:e9:41:45:84:
db:c0:a0:05:7e:61:22:cb:46:59:b5:09:5b:18:57:
df:d8:4d:10:77:fe:0d:c9:ba:74:a7:00:8d:fb:5a:
64:99:99:91:00:ee:e3:f4:e6:48:d8:7b:59:62:93:
a1:29:4b:6b:db:53:58:e1:20:0a:e7:ad:1e:7e:ff:
92:e7:cf:1e:5a:5a:2f:fe:da:ca:62:0f:2b:82:20:
19:6b:b1:26:29:fe:04:76:a6:5e:b2:58:c0:f6:cc:
01:08:14:9b:07:1e:61:28:d1:09:58:20:76:cd:0c:
8a:97:4a:d2:d0:55:3d:bc:e1:48:4e:fd:d8:a8:80:
b2:a6:c0:c1:16:86:0d:b1:75:fe:f4:c7:c2:03:2f:
f8:07:b9:8e:91:fa:9d:25:a0:eb:e8:35:f8:f0:bb:
49:81:7b:4d:75:52:7f:cc:12:8f:b9:98:f6:07:15:
88:e8:ea:98:90:33:74:62:df:bf:6a:88:c0:b6:70:
41:42:ca:b1:c8:1e:05:f3:b9:04:97:d0:07:72:73:
ba:c6:a0:7e:f1:eb:94:42:0d:ec:ae:da:82:95:5b:
da:18:f7:f8:91:c4:48:a5:fa:ef:2f:ce:b6:c4:2e:
08:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A8:88:FA:13:7A:1C:80:22:A1:86:65:A1:28:D4:7B:A4:0D:25:F0
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BEFB4DFA2A5F11EFBD5181ED7CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.245.0/24
Signature Algorithm: sha256WithRSAEncryption
27:1d:4a:17:45:3c:77:9f:5c:f2:f3:70:3b:29:d6:8b:d2:15:
c8:5e:5e:00:f8:65:a4:2a:ca:9c:56:44:0c:1a:71:53:fa:14:
84:12:a5:8f:65:c2:3d:14:7e:d8:36:02:0a:24:29:d6:91:b7:
74:41:ba:2f:28:ef:19:c9:4c:8c:a3:a7:a3:ec:8e:27:4e:8e:
1e:23:2f:5b:a9:43:91:a3:df:fa:91:cf:f3:7a:5b:97:ef:2e:
3c:1f:7c:02:b1:17:13:74:d5:a1:d2:82:c7:b8:a6:d3:2d:e1:
a6:c2:7c:a3:88:2e:d6:36:88:0f:9b:e0:94:21:ab:94:3c:9d:
cd:6c:af:dd:f0:27:8f:46:ed:5c:17:3a:70:3c:6e:36:c7:61:
ec:69:9a:3b:60:b5:a3:65:21:0c:37:59:5d:ad:9b:0d:2e:dd:
63:1f:77:7d:7e:a1:77:5f:26:50:94:bc:f3:8d:ce:4e:6e:ce:
30:de:9f:ba:e4:9a:ca:54:aa:4c:53:40:fe:34:53:a5:f9:5f:
4d:08:78:83:b9:5e:38:e2:9c:4b:3c:cf:08:52:58:79:4b:0e:
c0:5d:1e:76:7e:e6:d6:5c:49:54:75:59:e2:72:49:f3:a6:a7:
96:71:2a:a2:49:90:c7:3e:f0:49:9b:8b:f2:47:97:22:bf:2b:
e9:ac:94:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 22:47:11 2024 by rpki-client on console-ams.rpki-client.org