Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D1C3E826F0B611EE922E66A4775412E6.roa
File: D1C3E826F0B611EE922E66A4775412E6.roa (raw, json)
Hash identifier: RbGEUK32L5xAaYHLqFWOAqMk3LNf3gy6LlWfhD/L9RA=
Subject key identifier: 0F:8A:32:2A:2C:A1:C5:4F:E6:66:28:1E:21:EF:E5:29:99:87:3D:79
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1036
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D1C3E826F0B611EE922E66A4775412E6.roa
Signing time: Tue 02 Apr 2024 06:04:09 +0000
ROA not before: Tue 02 Apr 2024 06:04:04 +0000
ROA not after: Sat 04 Apr 2026 06:04:04 +0000
asID: 834
IP address blocks: 102.129.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 12:22:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4150 (0x1036)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 2 06:04:04 2024 GMT
Not After : Apr 4 06:04:04 2026 GMT
Subject: CN=660b9fd9-6da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9d:3c:1a:36:0a:ff:24:f6:b9:70:1a:cf:c1:
87:ae:2e:74:6a:d9:8e:02:82:de:3d:cc:69:48:98:
9b:31:5e:7c:d9:34:3a:f6:53:3a:b6:23:60:01:50:
5d:05:c0:1d:d2:67:a0:af:34:80:ae:83:b7:df:b3:
8a:d3:11:6f:9c:91:49:76:fc:6b:db:77:a2:cb:7b:
8f:5b:2a:57:0e:46:e6:56:87:fc:51:c8:6d:7b:46:
9d:b4:ad:34:d0:02:3c:a4:ec:26:4f:d6:c9:5b:ed:
a0:2a:c4:e4:63:de:ff:e7:91:c0:29:e5:d3:d3:fb:
e0:7f:27:15:14:de:22:9c:41:d0:70:7b:08:5f:a9:
26:db:74:96:49:c7:21:fe:47:16:21:3d:06:41:a7:
6c:6a:d7:a1:48:55:a3:a1:87:3d:9d:a6:d6:af:db:
ce:53:37:23:f9:42:4b:e9:30:e8:92:3f:b0:ed:f6:
f2:0f:42:03:66:06:0b:ba:1f:19:f8:95:51:2d:20:
1c:50:66:c0:93:24:a4:38:8e:18:2d:8c:4b:a7:c8:
b4:51:93:54:da:30:ce:93:9e:89:c4:b5:65:09:cf:
6a:e9:42:cf:22:e6:3b:a1:82:28:87:1f:38:f4:3e:
28:6f:89:13:c8:cf:41:02:f2:db:6f:be:58:4d:a7:
1e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8A:32:2A:2C:A1:C5:4F:E6:66:28:1E:21:EF:E5:29:99:87:3D:79
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D1C3E826F0B611EE922E66A4775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.133.0/24
Signature Algorithm: sha256WithRSAEncryption
79:87:3c:39:36:c5:58:60:3c:f9:90:81:2e:d2:82:35:60:96:
b9:8d:ea:b1:9d:be:f6:e4:be:69:8d:15:23:68:ae:22:c3:92:
47:fe:5c:ac:3f:76:3e:cd:bb:bd:7e:ee:fc:74:c1:f3:5e:5b:
b8:d8:5b:33:ca:1c:8f:c6:23:b4:6c:72:66:71:c1:5a:2c:78:
51:f0:af:9c:49:20:18:ee:85:31:b9:18:89:fd:6d:70:39:6c:
c9:04:40:cb:d6:1b:3f:ca:77:11:c6:05:ef:c6:d1:12:f0:3c:
1c:05:6f:03:36:ea:83:30:cc:28:b6:20:ac:ba:d2:27:56:25:
b9:6e:b0:7b:10:0d:c6:a8:6d:91:78:28:cc:81:89:58:15:a0:
88:a3:52:1f:c4:17:22:23:71:6a:20:ab:ca:6f:66:b2:34:f1:
fd:97:ea:73:19:af:5d:38:63:01:be:74:e1:4b:c3:33:b7:41:
71:52:29:68:a3:da:52:b1:7d:62:02:a1:21:b6:75:56:04:56:
cd:8d:57:bf:b1:d7:e6:f0:e1:42:a6:ee:85:95:90:be:00:b2:
59:37:15:f6:28:46:62:29:7e:4a:12:f7:29:98:3b:1c:7d:10:
90:df:ab:47:f3:0a:34:43:b1:3b:68:38:4a:46:32:d6:89:7f:
01:09:b5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 17:38:52 2024 by rpki-client on console-ams.rpki-client.org