Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C1AD6B80B42E11EDB14C397FF1222468.roa
File: C1AD6B80B42E11EDB14C397FF1222468.roa (raw, json)
Hash identifier: KOEvEEgsDjcmp1elsvQfEz+62otPLIS4cMQb1Emc4gg=
Subject key identifier: 16:91:93:4D:F8:30:B0:90:36:ED:83:0E:02:0C:F2:BD:B1:7D:C9:77
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A82
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C1AD6B80B42E11EDB14C397FF1222468.roa
Signing time: Fri 24 Feb 2023 10:34:03 +0000
ROA not before: Fri 24 Feb 2023 10:33:59 +0000
ROA not after: Sat 22 Feb 2025 10:33:59 +0000
asID: 61317
IP address blocks: 102.129.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Apr 2024 18:09:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2690 (0xa82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 24 10:33:59 2023 GMT
Not After : Feb 22 10:33:59 2025 GMT
Subject: CN=63f8929b-b1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:56:0b:52:f8:84:b7:f2:95:b3:28:ff:d4:55:
0e:eb:01:23:7c:1d:97:d5:89:ee:30:dd:13:28:5f:
6c:ee:2e:99:44:6e:23:63:ed:68:65:42:7f:14:40:
74:c8:24:39:01:ac:e2:c9:b6:b9:e3:86:1a:f3:ac:
35:65:da:c2:30:08:bf:e3:da:d2:bd:13:f8:db:8e:
a2:75:6a:eb:5f:5d:4f:cc:33:fa:94:8d:72:2c:8f:
6e:37:b7:eb:87:4c:c7:cf:a6:61:4b:9c:3d:22:5c:
e4:15:42:e5:92:84:a5:fd:23:41:3c:b1:e8:c0:ad:
a6:c5:22:e3:2d:3b:43:7f:07:97:15:c3:12:6d:1a:
bf:e8:2f:32:ad:a7:0a:93:7a:b3:c8:be:2b:1a:da:
74:84:7d:45:d8:8a:5c:76:28:70:a9:a7:ac:95:91:
fd:d6:36:9b:78:dc:a5:59:04:46:f8:b8:3b:14:da:
91:fc:02:42:28:ff:b9:66:c1:c6:26:e5:8d:8b:cc:
4e:cb:5b:0a:41:2e:d6:c2:8a:60:d2:ec:a5:8c:12:
ff:0b:1f:1f:53:ff:91:ef:33:f9:ee:e2:76:85:2e:
ec:41:f8:3b:ad:79:6e:fd:5a:23:18:52:24:1f:24:
28:a1:0f:58:d8:24:84:52:f1:ce:54:52:52:2f:e0:
39:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:91:93:4D:F8:30:B0:90:36:ED:83:0E:02:0C:F2:BD:B1:7D:C9:77
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C1AD6B80B42E11EDB14C397FF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.211.0/24
Signature Algorithm: sha256WithRSAEncryption
60:b6:cc:d6:88:4f:06:98:41:a3:30:fd:a0:1b:33:65:a9:e1:
bc:92:2b:ff:33:e3:08:56:6d:43:40:82:a9:6f:d4:98:70:8c:
0b:cf:db:68:dc:76:26:cd:6c:6b:26:26:f7:66:c6:62:b3:ef:
d3:56:a4:11:6d:c9:8d:8d:8c:bb:92:8f:64:87:15:a0:0f:63:
4f:d9:84:77:9d:dc:f1:7a:b2:d8:d6:55:d3:56:8e:8a:83:81:
d2:4e:e1:40:6d:88:82:12:ac:02:45:66:ed:da:34:cf:ff:5e:
15:a1:78:80:2b:19:3d:e7:d0:8e:e6:18:15:7d:0b:7b:ad:e6:
2a:74:2c:8c:c5:65:9e:b1:93:fd:4d:d7:a4:e1:b7:4f:79:bd:
ab:38:52:6b:b3:d2:d3:9c:d0:80:7a:eb:32:a1:20:d3:f0:4c:
fc:98:41:46:15:be:32:df:4b:dd:0c:3d:47:9b:80:ff:91:70:
87:bb:44:99:09:d8:19:6c:a5:79:3a:c3:8a:ac:be:a8:3b:94:
c1:d1:f6:36:c3:f8:99:4e:72:3d:f3:a3:f6:e0:9d:e1:5a:46:
2f:e9:10:d7:28:60:4b:ed:aa:c2:f6:67:1d:59:14:39:e7:4e:
0b:66:f7:84:69:34:3a:3c:ac:f0:c5:97:d0:ae:17:9d:68:3c:
42:50:62:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 21:32:34 2024 by rpki-client on console-ams.rpki-client.org