Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D0F5FC446C2811EE95E094864AD9E6FC.roa
File: D0F5FC446C2811EE95E094864AD9E6FC.roa (raw, json)
Hash identifier: neU8hJ2GqjCNb/1fCJn33TUs6PU+/8JF048H0qZZ3vk=
Subject key identifier: BF:62:DE:36:16:AF:12:1F:B4:1A:8F:D5:28:4D:9F:6C:65:C4:58:BB
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0DED
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D0F5FC446C2811EE95E094864AD9E6FC.roa
Signing time: Mon 16 Oct 2023 13:35:06 +0000
ROA not before: Mon 16 Oct 2023 13:35:02 +0000
ROA not after: Thu 10 Oct 2024 13:35:02 +0000
asID: 834
IP address blocks: 102.129.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Oct 2023 15:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3565 (0xded)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 16 13:35:02 2023 GMT
Not After : Oct 10 13:35:02 2024 GMT
Subject: CN=652d3c09-663e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:31:39:5f:69:ad:73:71:6b:43:7e:42:a8:cc:
44:c9:61:19:de:05:fb:02:98:9e:4d:f7:b9:f4:f5:
0e:34:8f:bf:a1:05:93:64:eb:ec:bd:58:76:11:cc:
f8:a4:1f:79:e3:6e:80:b3:9a:24:b8:7b:25:35:f7:
2f:3d:60:75:2a:25:cb:44:53:7d:cf:b9:b7:f2:ba:
24:52:6d:1b:99:f7:c6:d2:3b:82:5e:94:f8:e0:93:
65:4c:f8:35:2b:cf:c9:ed:a8:ef:41:cb:4f:4a:e1:
a5:a5:d8:c2:ee:81:50:d3:2b:42:f1:e3:23:52:47:
55:80:60:27:50:a8:b9:bb:3c:91:b6:43:2a:a9:e8:
2c:39:db:61:50:ea:5f:ff:82:e9:a2:dc:b0:cc:4a:
60:21:84:0b:12:e5:7b:d4:6d:6d:cc:40:8f:40:05:
df:9b:ff:17:0a:91:e8:14:94:a2:a0:7b:bf:59:c0:
64:1e:f3:86:96:8c:f9:b9:1b:34:29:65:7b:ea:02:
98:10:93:99:36:90:98:77:6a:b2:48:be:bd:68:9c:
60:2c:13:df:e2:2b:58:5f:81:4c:06:56:43:4b:7e:
9e:d2:83:7e:d2:2c:46:de:67:1c:d2:1c:68:21:ed:
73:51:66:dd:d2:2b:ae:a8:5f:19:4c:a6:c7:f4:fe:
b4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:62:DE:36:16:AF:12:1F:B4:1A:8F:D5:28:4D:9F:6C:65:C4:58:BB
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D0F5FC446C2811EE95E094864AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.255.0/24
Signature Algorithm: sha256WithRSAEncryption
97:0c:40:98:01:b8:20:fd:74:22:16:c4:8f:27:24:a3:5d:16:
82:5a:8a:a1:e8:01:ec:3e:c5:be:2b:1a:f5:1e:8c:01:12:1d:
ec:62:1a:32:92:82:9f:65:73:c6:74:66:13:37:48:c4:22:99:
60:4f:08:b7:51:e2:49:9e:1f:9a:5c:53:23:9e:e7:a0:e2:7c:
01:01:63:56:17:d1:98:99:68:7a:8a:0a:c0:06:f0:78:f5:8e:
b6:c4:27:1d:83:be:a3:0a:91:5f:e2:9b:f6:09:47:c9:66:11:
1d:36:e0:c4:98:38:c0:4c:48:3d:68:ce:d6:bf:24:f3:4d:bd:
1b:72:95:6b:7b:18:6d:ad:18:a9:1a:bc:ca:9f:1a:ae:9a:45:
66:16:bb:04:b3:dc:b1:a4:9b:e2:80:a0:42:d2:b1:f4:06:92:
ea:fd:6a:68:b5:bd:cd:23:85:3a:1b:5d:e0:14:e7:82:69:f4:
38:2a:7c:c3:3f:07:e6:06:b5:8c:4a:db:d6:dd:c7:61:b1:34:
40:5a:60:9f:85:5d:46:90:6e:e7:cb:77:5b:b6:9a:b5:78:4f:
90:5b:dc:68:51:03:40:49:aa:c4:e3:1f:fc:e0:eb:21:fc:95:
62:e0:18:12:4b:94:47:22:29:fd:f1:e9:10:17:14:6d:ca:eb:
51:14:69:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org