Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BF440480650811EF8FC0CC43762E951A.roa
File: BF440480650811EF8FC0CC43762E951A.roa (raw, json)
Hash identifier: eYzIZmn5MPrXWZZGOxRvFn2WW+UPsbdllE22MjCnEhU=
Subject key identifier: 23:68:F0:02:A5:35:B7:F5:B8:91:17:0A:0F:8F:87:72:CE:E0:FA:8A
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 11DB
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BF440480650811EF8FC0CC43762E951A.roa
Signing time: Wed 28 Aug 2024 06:42:52 +0000
ROA not before: Wed 28 Aug 2024 06:42:43 +0000
ROA not after: Fri 28 Aug 2026 06:42:43 +0000
asID: 834
IP address blocks: 102.129.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Nov 2024 07:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4571 (0x11db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 28 06:42:43 2024 GMT
Not After : Aug 28 06:42:43 2026 GMT
Subject: CN=66cec6ec-583b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b5:73:24:d6:be:e0:46:e4:87:12:d3:74:b1:
5b:0d:3d:e7:f2:2a:e8:40:91:84:2c:4a:c3:14:f4:
50:0b:ee:6c:8a:00:84:0b:85:42:da:20:59:7b:f5:
44:e2:7d:2f:18:6c:b2:5e:e3:40:3e:48:10:a6:a9:
35:de:a9:e0:19:c7:16:98:91:df:a1:f4:41:0e:b5:
c8:4c:35:de:78:20:f9:9f:e6:1a:24:2b:93:45:8f:
04:00:81:b6:98:9c:c2:7a:59:26:ff:0c:0b:a3:38:
ff:4c:0e:18:63:1e:81:55:ed:23:5b:da:84:27:46:
dc:fa:3e:7c:37:e9:d5:cc:80:76:f0:44:60:a1:07:
6c:0c:13:48:3f:a6:2c:ef:e2:a3:77:15:02:73:67:
a3:46:7d:68:18:8c:00:6e:56:b5:b9:5b:3f:f5:26:
ed:a4:79:d2:8f:fc:d9:71:fc:6a:a7:f9:6f:f8:86:
d9:a4:49:2d:b1:41:04:8f:b3:c4:de:5b:88:f7:96:
25:08:e3:42:b1:48:51:df:da:ff:0d:48:ea:50:88:
59:71:2c:68:a0:50:02:a7:15:48:9e:97:43:91:83:
e3:2f:a8:0d:8a:ea:fa:43:ef:bd:5c:b4:64:ce:33:
14:28:8e:80:c6:12:a7:76:0a:1a:e4:72:7e:5a:b6:
9a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:68:F0:02:A5:35:B7:F5:B8:91:17:0A:0F:8F:87:72:CE:E0:FA:8A
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BF440480650811EF8FC0CC43762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.178.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:f4:46:db:56:8b:1e:9a:64:09:dd:d0:b1:8c:b8:7a:2a:d9:
89:e2:6d:03:1f:f2:89:86:13:98:a3:9c:8a:bd:46:0e:a5:9a:
0d:53:09:6e:f4:35:a4:3a:dd:6e:62:c5:85:37:2a:10:e0:49:
57:bd:c3:27:f9:c4:92:eb:2a:97:49:da:39:41:e3:79:f3:8f:
4a:19:9f:88:20:3c:9c:b1:d4:f2:e7:41:fa:ac:f1:ad:fb:d0:
bc:ee:32:ea:48:72:7e:6b:08:5c:07:76:e0:36:31:ed:f4:32:
2d:fe:f8:d3:34:c8:1b:fa:45:b5:3a:f7:4c:fc:ef:32:16:43:
f6:82:98:b1:26:bf:2f:8a:32:04:26:ac:65:4b:25:cf:ee:d7:
64:59:09:0d:f8:77:ac:6d:07:ac:79:b8:46:56:43:ef:c2:c5:
77:06:91:b1:72:fb:ec:9e:f4:fa:32:f7:9e:41:0d:8f:7f:84:
f7:20:7c:df:fe:62:08:cb:68:3c:86:13:d1:3a:79:b7:7b:81:
18:be:39:da:7f:19:a1:24:24:c7:3c:1d:ea:fe:45:91:a4:d7:
df:34:bd:f7:4f:12:6e:6b:89:69:9e:12:1d:fe:2d:e6:2c:be:
96:ff:02:17:03:11:22:8d:9c:85:11:b6:50:76:1c:33:12:6a:
34:54:e6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:35 2024 by rpki-client on console-fra.rpki-client.org