Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CD32C23022D311ED9FE201D7F1222468.roa
File: CD32C23022D311ED9FE201D7F1222468.roa (raw, json)
Hash identifier: O7TPnCffybBcbE4Okz79ldkblFiX121Ys9B4ShkVIto=
Subject key identifier: EC:9A:F7:F2:A0:31:3F:72:CA:11:76:12:25:3D:FC:3F:83:B8:2D:A9
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0795
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CD32C23022D311ED9FE201D7F1222468.roa
Signing time: Tue 23 Aug 2022 11:07:39 +0000
ROA not before: Tue 23 Aug 2022 11:07:36 +0000
ROA not after: Fri 23 Aug 2024 11:07:36 +0000
asID: 212238
IP address blocks: 102.129.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Dec 2022 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1941 (0x795)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 23 11:07:36 2022 GMT
Not After : Aug 23 11:07:36 2024 GMT
Subject: CN=6304b4fb-d553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:af:bd:6d:d7:13:3a:9e:4a:d0:7f:04:00:e8:
f1:d0:d6:1a:6f:48:9a:b4:62:0c:20:db:d2:f3:a5:
03:14:4d:75:f9:9f:75:17:2c:7b:f8:82:9b:e9:ab:
c5:25:6d:26:dc:64:48:4c:ae:e9:92:b3:b5:04:7d:
99:e2:7b:e2:b0:0e:e6:ef:90:f0:8d:d8:ab:bc:87:
28:c5:99:d0:54:c0:21:97:cb:d4:1c:1f:fc:51:4d:
27:b4:c7:5c:53:23:1d:17:f6:52:41:23:9b:fd:b5:
4e:93:08:c4:56:32:78:6a:e0:97:1b:ea:cf:2a:fe:
f4:ce:dc:fa:09:df:d9:f6:33:6d:df:c3:9a:77:b0:
eb:ee:b3:35:68:2e:f4:c1:17:a5:3a:e2:1c:f6:3d:
6f:a8:34:19:2d:b3:a1:df:90:cb:5d:77:22:19:7c:
27:31:96:01:ea:b4:d3:50:f7:73:07:33:4c:04:ec:
bc:aa:09:5d:5e:8c:4a:a3:af:f2:70:69:98:eb:17:
a9:10:14:b9:d0:bc:9c:44:07:9c:38:6f:69:6d:6b:
a3:48:d4:6b:df:f2:66:4d:89:72:53:09:72:31:48:
88:b6:25:7c:1f:32:00:97:55:90:ac:38:f8:8d:2e:
65:78:92:fa:f4:92:97:e6:e4:1d:aa:45:d7:92:35:
47:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9A:F7:F2:A0:31:3F:72:CA:11:76:12:25:3D:FC:3F:83:B8:2D:A9
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CD32C23022D311ED9FE201D7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.232.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:04:13:80:74:c7:57:96:f0:8c:a8:7c:9d:d2:e1:c5:ea:6e:
30:48:6c:e2:89:ea:e2:38:77:65:b8:9e:6d:1f:28:05:ed:e4:
fb:ad:53:7f:d2:1e:ef:10:1e:e8:d9:f0:6e:96:f6:ff:d9:cd:
24:0a:3d:39:01:3f:ce:0b:7f:12:43:d1:81:95:d1:dc:ff:e3:
8e:6f:ca:ad:a8:95:eb:b7:09:9f:24:b3:1b:a9:56:9c:08:dc:
88:3b:07:60:1b:09:b3:2f:f7:6c:e2:a9:92:73:16:3b:e6:51:
b4:3b:87:97:5a:e4:73:ad:2d:c9:f2:38:69:e4:89:f6:7a:36:
e0:7c:53:d0:64:e0:8b:37:02:b3:ce:85:52:89:69:07:e7:c0:
05:64:78:28:b3:c8:b9:f5:9c:37:48:c2:70:7c:39:b5:57:5f:
0b:c2:64:27:8b:4d:4e:90:60:b5:a6:fc:23:8f:fd:4e:28:96:
05:d1:3d:65:9d:62:26:16:6a:dd:e4:18:07:7e:0d:1b:63:ba:
d2:80:eb:ad:0e:81:8a:f7:2d:d4:e0:77:36:60:df:bb:7d:84:
30:75:bd:8e:21:ed:07:e8:a7:df:33:49:15:2a:07:eb:80:06:
e4:82:67:24:61:6f:ea:6f:aa:15:83:17:da:77:8a:45:a0:a3:
92:a7:a2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org