Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C7FE66E259BB11ED92E1269FF1222468.roa
File: C7FE66E259BB11ED92E1269FF1222468.roa (raw, json)
Hash identifier: tSlaD+t7iEiJoZ57OFuMfI2CdEhgUy2cYViAPW8zXPo=
Subject key identifier: 95:E5:5D:3B:38:6F:22:54:CD:F5:D9:AD:B6:29:99:17:86:B5:9D:48
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 08BB
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C7FE66E259BB11ED92E1269FF1222468.roa
Signing time: Tue 01 Nov 2022 08:04:17 +0000
ROA not before: Tue 01 Nov 2022 08:04:13 +0000
ROA not after: Fri 01 Nov 2024 08:04:13 +0000
asID: 33696
IP address blocks: 102.129.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Oct 2023 05:42:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2235 (0x8bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 1 08:04:13 2022 GMT
Not After : Nov 1 08:04:13 2024 GMT
Subject: CN=6360d301-5667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:60:ec:fd:25:fc:cd:56:3f:01:12:cd:a1:ad:
8e:ec:0c:33:15:df:42:68:52:b4:19:d0:52:26:8d:
c3:e5:15:61:5a:2a:48:4a:5c:f9:20:c5:a3:65:d8:
30:e4:20:99:27:a8:e0:5c:c5:0d:36:63:d0:53:96:
03:18:ec:bd:3f:31:c6:8d:19:62:12:d3:5b:d7:5a:
f7:e6:b0:ab:fd:5c:49:ff:0a:df:99:cc:af:41:cd:
42:f0:d7:0c:07:76:04:3d:ba:c8:5b:53:24:7d:23:
78:69:dd:a3:75:b0:58:60:3e:f3:41:58:62:ac:09:
c6:f2:a8:91:65:04:d9:b7:04:2d:f5:35:38:33:b9:
7a:73:4a:17:68:97:75:9e:93:47:77:11:da:44:26:
c8:49:2c:73:2c:04:26:ac:50:92:59:53:df:e7:84:
97:f8:6f:b4:90:bc:8c:dd:37:1c:32:7e:75:77:e2:
f0:94:8b:3b:e8:b7:62:7f:9c:a2:14:cc:22:54:a1:
ad:a5:00:bf:6c:a0:c6:a4:7e:66:49:01:44:ef:89:
ae:42:6d:51:05:da:0f:12:b8:57:29:d3:5f:ac:52:
e7:fa:9a:46:6e:5f:7a:ff:61:fc:3a:a9:13:bb:ff:
fa:4b:d4:a5:bf:0b:88:21:6e:c0:5c:c1:d3:ee:92:
e3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E5:5D:3B:38:6F:22:54:CD:F5:D9:AD:B6:29:99:17:86:B5:9D:48
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C7FE66E259BB11ED92E1269FF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.215.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:2a:14:91:83:a3:1f:8f:d8:43:7d:2f:79:e7:40:4b:a2:77:
6e:c2:bb:e4:b0:ea:ec:32:24:30:63:b1:38:ae:a4:12:da:64:
81:0e:8f:2e:e9:7b:a8:61:1e:2f:5c:bc:32:ac:0c:e8:4b:3b:
2b:05:84:7b:f8:82:91:85:e1:72:56:e4:91:42:3d:43:9d:1c:
6a:56:b1:25:42:9f:09:b2:3a:95:19:c4:b4:14:a8:46:b7:ec:
2c:2c:d5:92:61:5d:93:36:5a:81:f9:c2:b8:80:17:2b:46:f6:
d2:da:7c:03:f5:69:3d:5b:5e:d6:59:d5:81:e6:6c:b1:fb:41:
96:44:c3:04:cc:2d:8e:d1:5d:67:58:14:05:9a:c1:5d:e5:0e:
eb:6c:a0:fc:00:66:3b:11:ed:7d:8e:ab:cd:b6:f7:7a:71:09:
be:0e:e8:6c:88:d3:3b:c5:1c:23:a4:68:35:9c:64:f9:20:ba:
e6:8b:2e:d5:97:6d:8e:6b:b8:83:32:29:18:f1:56:2d:26:90:
5c:19:07:6c:18:5e:09:95:09:e3:f2:b8:d4:f3:f0:00:ef:a9:
e9:fe:c5:73:27:eb:fe:4e:65:fc:7b:a8:4a:74:49:4e:d9:b8:
be:2e:6b:dd:9c:e4:a1:55:61:9a:8f:8c:2d:66:65:b2:90:86:
a9:37:20:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org