Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C7A39714B42C11EDB31787F7F1222468.roa
File: C7A39714B42C11EDB31787F7F1222468.roa (raw, json)
Hash identifier: +vLR0vvF9TWloTNpm5qEVrFOA2000t3E6P8jhfoE43g=
Subject key identifier: F9:2F:41:65:26:23:87:72:E2:54:D4:1F:86:37:7C:E8:A8:5D:EA:81
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A6A
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C7A39714B42C11EDB31787F7F1222468.roa
Signing time: Fri 24 Feb 2023 10:19:54 +0000
ROA not before: Fri 24 Feb 2023 10:19:50 +0000
ROA not after: Sat 22 Feb 2025 10:19:50 +0000
asID: 61317
IP address blocks: 102.129.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Mar 2024 16:44:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2666 (0xa6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 24 10:19:50 2023 GMT
Not After : Feb 22 10:19:50 2025 GMT
Subject: CN=63f88f4a-1d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:eb:99:b0:8f:e2:e4:46:aa:76:5c:18:e8:e9:
d1:0a:22:66:c8:5b:39:52:f7:12:31:5b:1e:f7:db:
39:24:e1:49:5b:0d:0a:e0:2f:05:c9:30:c7:37:44:
53:db:57:ec:d7:cb:0a:4d:1c:c8:2e:5d:11:ab:a8:
61:d5:22:2f:4f:9f:1e:41:ee:a2:05:1a:c6:9d:0e:
c9:9d:8f:21:3b:07:b0:90:c0:5a:b6:be:51:34:47:
f3:ce:50:01:31:01:6a:38:50:92:93:10:69:ee:72:
9d:a5:bb:4f:81:ad:40:4a:33:5c:ef:f2:b2:d1:fb:
73:cd:57:e1:57:c4:59:90:ec:76:46:6a:4b:28:06:
c9:7f:cd:1f:cc:c1:6b:69:83:ac:51:a2:83:d1:9b:
3b:7b:e8:cd:d1:38:1e:41:a9:3d:f3:2f:1f:ca:1a:
dc:48:cd:ed:ed:7c:ec:f3:ec:f3:68:01:48:98:03:
77:bc:e9:aa:5b:19:6e:ae:11:7c:b5:99:e2:56:71:
45:3a:43:88:c5:53:13:07:aa:85:68:f0:c8:6c:5e:
e3:cc:3c:41:bf:0d:85:f7:83:72:78:bd:39:d9:66:
45:f0:50:14:2f:6b:cd:68:a0:ab:dd:8d:9c:61:61:
c2:39:cf:0e:58:0f:0c:9d:24:b4:b1:a1:06:f9:3d:
9e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2F:41:65:26:23:87:72:E2:54:D4:1F:86:37:7C:E8:A8:5D:EA:81
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C7A39714B42C11EDB31787F7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.129.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:5f:55:76:82:16:30:54:9a:02:c5:30:7f:3b:a1:21:31:3c:
c1:54:eb:0a:a1:ae:3a:54:b5:f6:cb:9c:dd:63:8c:e1:6a:34:
eb:9c:68:74:1b:47:ad:61:dd:bd:f7:01:be:e3:9a:92:25:5b:
1a:ea:26:b9:a4:1c:0e:59:47:60:c4:81:23:3a:24:6d:b2:70:
1b:67:e6:a4:47:d4:86:f0:0a:aa:b0:ea:bd:6e:ae:4c:50:f9:
23:cc:76:62:29:4a:ef:22:63:53:c9:e4:25:bd:35:a6:ab:7a:
7a:32:8c:64:d8:eb:ba:0d:66:20:f6:f0:9a:cd:c2:dc:3a:61:
ee:b3:2d:97:a9:ec:54:e9:19:60:f5:6f:b1:ae:62:83:32:09:
be:c7:cb:73:9a:5f:ef:74:5d:b0:0f:12:ed:c8:3b:58:36:13:
84:f2:c9:3c:ea:fa:a7:e8:4a:69:4a:c1:c5:7e:3b:ca:c0:2c:
f7:70:30:d5:32:94:df:f2:09:86:ed:9f:59:27:c1:63:db:6d:
33:d3:88:23:92:50:77:87:21:4a:01:3d:4f:de:a2:dd:74:fb:
54:43:7f:35:ed:88:2c:d9:1c:6f:9f:22:68:5d:95:2e:9a:90:
0f:06:1e:e7:82:d5:ec:47:66:77:d3:01:72:45:ab:bd:05:62:
1f:c1:f4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 26 20:00:21 2024 by rpki-client on console-ams.rpki-client.org