Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C2375AA2479511EE990177784AD9E6FC.roa
File: C2375AA2479511EE990177784AD9E6FC.roa (raw, json)
Hash identifier: 91h86HzadvWmkb0dLYdNjVqZnicqZhV67WIU25ef2+g=
Subject key identifier: E4:45:36:0A:2A:82:6A:18:3D:1F:23:1D:59:50:D9:C4:0A:14:A5:AF
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0CFE
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C2375AA2479511EE990177784AD9E6FC.roa
Signing time: Thu 31 Aug 2023 00:31:43 +0000
ROA not before: Thu 31 Aug 2023 00:00:39 +0000
ROA not after: Sat 31 Aug 2024 00:00:39 +0000
asID: 834
IP address blocks: 102.129.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Sep 2023 08:44:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3326 (0xcfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 31 00:00:39 2023 GMT
Not After : Aug 31 00:00:39 2024 GMT
Subject: CN=64efdf6f-0bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5e:a7:36:94:7c:b4:77:a6:a0:6c:ab:3a:35:
a8:e1:b0:00:4f:4e:e8:6c:7a:a8:6d:04:38:39:74:
aa:d2:0b:d8:20:36:a5:cb:0a:a4:06:06:d7:43:03:
00:94:a2:91:bc:c3:84:92:a0:bc:6b:df:10:b3:b8:
73:2d:aa:42:ed:b9:55:77:8e:ee:43:e3:3f:e5:36:
2a:84:01:c9:c4:1d:aa:f3:2e:d3:71:25:40:f3:6f:
62:e4:57:44:1b:9f:dc:94:60:43:be:7c:9e:6a:2d:
b5:ff:06:fb:be:8e:e9:6c:9e:e1:f4:22:a8:10:cd:
de:4d:b5:51:ad:24:23:af:60:91:bc:3c:68:67:7e:
3b:4f:be:e6:72:7a:0e:b2:a0:f4:09:e6:2c:8a:8d:
32:c1:16:f5:82:c0:fc:69:39:17:cd:f5:09:b1:52:
40:b7:a1:c7:3f:93:4d:f4:fd:3d:b6:77:71:39:a4:
37:3e:25:43:ba:05:d4:87:f2:b8:34:c2:45:a2:f8:
79:d5:28:c4:51:df:27:f4:dc:aa:14:9f:3e:2e:b7:
d9:a9:c3:c4:9f:af:a2:99:1a:24:d6:fe:32:fb:b9:
80:ff:31:6b:64:0f:db:52:d1:9c:e7:1f:57:73:cf:
4b:41:ac:13:f5:90:ae:61:fa:bb:d0:96:73:12:6a:
35:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:45:36:0A:2A:82:6A:18:3D:1F:23:1D:59:50:D9:C4:0A:14:A5:AF
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C2375AA2479511EE990177784AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.188.0/24
Signature Algorithm: sha256WithRSAEncryption
18:5a:42:9f:2c:9a:fd:73:c5:b6:1b:fc:d7:08:59:cb:a3:39:
09:a5:7d:51:b8:46:73:a5:ca:b3:ce:03:7b:72:fb:1c:ab:af:
d4:8a:1e:38:39:c3:87:93:96:e5:58:c3:56:50:7d:d1:ae:47:
68:87:0b:f2:f0:0d:ba:07:3c:10:2d:a8:dd:c3:c5:af:49:1a:
01:bd:71:28:fd:05:02:cc:09:72:ab:1c:25:9c:6e:21:72:68:
07:a3:d3:97:50:04:81:8c:22:92:79:0f:95:bb:aa:22:92:13:
16:c3:3d:ae:99:3b:7b:9f:a4:2f:83:dd:dc:d4:77:9e:d1:74:
dd:53:69:f6:5a:c6:c0:2b:e5:dd:30:81:80:de:da:87:e9:4e:
4f:88:7c:fb:f3:48:8d:33:12:6e:98:87:eb:9c:c4:10:42:8e:
f5:e9:e8:33:3f:eb:f9:02:73:ca:3b:c4:2c:9a:30:30:ec:75:
8c:82:97:e6:44:6b:af:e7:2a:34:8a:dc:fe:94:1c:7e:bb:75:
ea:5f:7f:00:28:c7:76:4a:82:41:cc:d4:d7:c1:a3:6f:0b:99:
42:5f:4d:8d:ea:62:b2:0f:ce:1f:7d:ee:dd:68:d1:92:4a:f3:
53:f2:be:ee:a6:cc:49:d5:15:e4:b9:05:89:e2:9c:aa:bb:8d:
fc:f2:d4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org