Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CFE527425F3811ED8B9C9CD2F1222468.roa
File: CFE527425F3811ED8B9C9CD2F1222468.roa (raw, json)
Hash identifier: YAVRb6IuhcerLuucTrE1xwrsGr/8VnTVQ6IaEDAzrUs=
Subject key identifier: 1B:2C:6F:3B:6F:C5:F7:83:D3:30:AF:FD:3B:0A:B3:35:CD:9A:42:95
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 08D1
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CFE527425F3811ED8B9C9CD2F1222468.roa
Signing time: Tue 08 Nov 2022 07:41:53 +0000
ROA not before: Tue 08 Nov 2022 07:41:49 +0000
ROA not after: Fri 08 Nov 2024 07:41:49 +0000
asID: 62579
IP address blocks: 102.129.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Nov 2023 06:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2257 (0x8d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 8 07:41:49 2022 GMT
Not After : Nov 8 07:41:49 2024 GMT
Subject: CN=636a0841-3eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:72:3b:32:20:1a:54:33:b1:9c:16:5b:ef:54:
17:8e:9d:83:9d:35:56:71:f3:91:27:d6:ce:af:83:
b8:78:5d:95:a9:2e:bd:03:16:6b:b6:f3:a9:07:2b:
0d:52:81:44:1b:c3:b1:6d:7d:5d:a6:89:67:d9:d0:
50:bc:4c:ca:d6:77:3d:24:02:ce:83:f2:ce:09:68:
ac:50:93:8b:5f:51:96:d2:00:b4:fc:3a:c5:65:92:
50:cc:e2:c2:26:d3:58:e3:7d:67:42:13:7b:4b:c0:
24:0f:30:da:63:95:2b:ab:45:4b:4e:93:f8:7c:f6:
7d:3e:c5:09:fb:2e:d3:d5:c4:8f:37:bd:20:2b:b0:
29:9a:bd:77:44:43:86:5f:76:dc:94:25:c6:c5:e6:
71:0b:86:f0:52:73:7f:92:51:4f:94:61:b2:83:68:
62:6f:30:af:27:5a:61:68:0e:f1:80:ef:eb:b9:54:
68:a8:c0:28:15:71:08:e1:0c:2e:60:c0:3a:22:4f:
99:bf:53:28:8d:93:75:a2:94:83:4e:05:6d:d3:d5:
ab:39:58:cf:e5:81:2a:96:e2:f7:8a:f0:cb:5b:50:
36:6b:56:90:66:18:d8:61:fc:26:73:b8:68:f3:7b:
4f:12:92:2d:a1:55:af:13:7d:50:a8:69:17:a2:40:
0c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2C:6F:3B:6F:C5:F7:83:D3:30:AF:FD:3B:0A:B3:35:CD:9A:42:95
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CFE527425F3811ED8B9C9CD2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.137.0/24
Signature Algorithm: sha256WithRSAEncryption
23:f1:13:4a:42:b5:cb:7b:e5:38:41:b4:8a:90:c8:0e:7b:55:
d4:85:eb:4b:1f:f0:f9:2f:59:d7:01:7a:c8:96:0f:f5:01:0a:
f1:7b:74:c2:86:86:d9:47:cc:f0:37:89:9e:52:b5:d6:18:da:
01:99:d9:6d:65:4d:e8:35:b7:cb:5a:47:e0:cd:dd:b0:77:0c:
ec:cd:7e:1f:ae:85:0b:fb:e7:4d:dc:2b:f9:a7:b0:30:d7:6a:
65:73:8a:b5:12:d2:14:23:6d:cc:42:77:f5:38:84:5b:c6:17:
ed:8f:48:2a:4b:50:d4:3a:96:6a:db:3e:2d:f6:0a:de:31:49:
e2:1d:25:28:af:10:71:b6:fb:fc:67:f7:58:a9:3b:ab:92:20:
2e:87:83:1a:f5:b6:66:4e:e3:bd:ac:4e:f0:a0:8a:05:79:80:
00:e7:33:78:d8:e7:84:4d:a4:ce:52:56:41:c0:9d:ff:10:8c:
de:73:69:43:92:52:3c:cc:7b:fe:44:8c:80:4e:4d:cc:04:77:
21:3b:7e:38:96:0c:af:94:28:b5:0b:bc:29:80:33:f2:f7:8a:
ae:d1:ad:a3:8c:51:43:2c:b4:49:87:43:17:9e:37:db:e3:0a:
00:1a:6f:f3:58:7a:75:37:b0:98:3b:0e:b8:cf:0a:da:d4:21:
0d:f4:69:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org