Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C8D5E9DA97D911ED892EDFE4F1222468.roa
File: C8D5E9DA97D911ED892EDFE4F1222468.roa (raw, json)
Hash identifier: S2xktqbb8T74dIg+dwAV7zw3vVpXkVtPmg3NQtDiTE4=
Subject key identifier: 07:50:9F:2B:FA:13:F3:8F:38:5E:CE:1B:19:57:99:B3:62:D6:78:3C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 09DF
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C8D5E9DA97D911ED892EDFE4F1222468.roa
Signing time: Thu 19 Jan 2023 09:15:15 +0000
ROA not before: Thu 19 Jan 2023 09:15:10 +0000
ROA not after: Sun 19 Jan 2025 09:15:10 +0000
asID: 834
IP address blocks: 102.129.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Oct 2023 10:07:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2527 (0x9df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 19 09:15:10 2023 GMT
Not After : Jan 19 09:15:10 2025 GMT
Subject: CN=63c90a23-a070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ee:d7:75:69:fe:5c:70:7d:1b:0d:42:2b:9d:
56:47:28:3b:26:be:99:b9:bb:9f:b6:32:f3:34:a4:
25:f1:a9:98:63:a3:16:2c:af:58:04:5e:20:2a:98:
37:0f:4b:3e:4f:e9:dc:98:85:9e:89:73:e5:4f:f1:
4a:40:f9:f5:e2:e2:ab:dc:f0:ff:88:f5:cb:c4:98:
1d:03:76:14:0b:8e:75:26:f3:a5:30:d6:29:87:ee:
f2:d7:0e:fb:aa:12:f7:17:a2:83:3f:c9:95:78:d1:
25:5c:5b:e5:50:88:f5:80:33:a3:22:0a:4e:87:02:
47:b2:1f:63:79:36:fe:e6:80:89:99:3b:33:ab:fc:
c7:7e:af:1e:b6:98:f6:71:6a:82:a7:ee:20:fd:77:
b9:be:ff:22:9d:fd:55:2b:70:4b:2d:ae:a1:c6:e7:
53:02:1e:5f:06:95:33:9a:dc:8b:dd:c7:3b:3b:06:
6f:e5:b2:7b:80:88:9b:61:34:15:5e:aa:3e:72:1f:
c6:49:70:48:eb:0c:7e:cc:3e:19:d0:fe:29:76:00:
9c:51:68:e6:6e:0c:8a:85:3e:c1:d8:e7:ea:85:e5:
ac:8f:c4:f1:68:47:5a:9e:54:79:40:d3:77:bd:82:
bd:5a:6a:ff:09:2a:66:76:25:79:b0:cd:6f:9b:df:
4b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:50:9F:2B:FA:13:F3:8F:38:5E:CE:1B:19:57:99:B3:62:D6:78:3C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C8D5E9DA97D911ED892EDFE4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.184.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:95:1a:0f:9f:e6:b0:6e:b2:bf:42:e5:15:99:e9:57:2c:a5:
33:02:38:80:11:cc:fb:2a:c5:80:e4:cb:24:45:72:5d:df:c3:
2f:61:b3:48:29:06:43:b8:9a:ec:62:54:2c:65:8b:41:ad:17:
7e:1e:65:ce:6c:f6:5b:25:55:5b:b1:43:20:b8:30:f7:7b:14:
56:06:21:9a:47:01:78:1b:96:30:46:41:c0:2f:9c:fa:75:63:
49:26:7f:cb:7b:55:b2:94:ef:27:c8:0b:62:2f:41:04:8b:17:
93:4b:f9:c6:b6:38:c2:cb:8a:17:4a:19:fd:e9:6c:8b:19:de:
ff:fa:bb:f1:13:0f:99:17:09:e2:7a:17:50:7a:c1:be:d7:ce:
9e:a0:34:36:57:c7:8e:1e:0c:0a:32:1d:15:2f:88:79:7c:82:
d7:e8:9b:99:72:d6:ff:16:e6:11:6e:fc:25:5a:0a:cf:d2:b4:
4e:63:f4:c0:41:d1:f0:8f:ad:ec:e0:db:a6:56:e6:83:50:87:
d1:6d:d5:02:41:dd:02:1c:ef:82:8e:db:84:fa:a7:18:06:f4:
9d:1d:c7:8c:11:3e:ab:e7:d9:8b:0c:af:34:11:3e:93:6e:1c:
c2:0a:20:b5:c0:a7:c7:3a:8f:1d:89:a6:b6:f5:2e:bf:3a:b1:
0c:85:e5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:40 2024 by rpki-client on console-ams.rpki-client.org