Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D2C7CCC0B16E11EDA491299FF1222468.roa
File: D2C7CCC0B16E11EDA491299FF1222468.roa (raw, json)
Hash identifier: /wQypAFNY/b9gSS1gazadWEOSY9xd0io2DHCPFliWjk=
Subject key identifier: 03:E5:5A:53:41:E7:23:21:3A:85:CA:6B:A4:71:20:36:9F:77:12:8B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A31
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D2C7CCC0B16E11EDA491299FF1222468.roa
Signing time: Mon 20 Feb 2023 22:35:06 +0000
ROA not before: Mon 20 Feb 2023 22:35:02 +0000
ROA not after: Fri 21 Feb 2025 22:35:02 +0000
asID: 7922
IP address blocks: 102.129.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 11:36:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2609 (0xa31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 20 22:35:02 2023 GMT
Not After : Feb 21 22:35:02 2025 GMT
Subject: CN=63f3f59a-2593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:e3:ba:c8:6d:ef:fc:26:7e:ad:2c:d3:a0:
d7:6d:19:5f:0d:1e:16:9a:46:07:2c:f1:4f:56:c4:
0f:a8:ff:7f:50:0c:e4:e9:d5:a9:ce:70:10:5e:6e:
7c:59:ee:d5:b5:f2:6f:95:6b:4a:68:e1:ed:83:c5:
ee:ef:91:c0:96:92:db:9c:bd:5f:82:55:ff:f8:82:
ad:cf:58:63:3a:c3:9d:83:60:84:fa:41:f5:e6:5a:
07:e9:c8:23:eb:5b:2c:fa:be:21:6a:af:77:56:c0:
f5:1f:4e:db:7b:e8:c9:87:23:ba:81:db:48:b9:a6:
0f:ea:84:f0:4d:2e:11:db:86:cc:96:d1:65:40:6b:
d1:49:f6:9c:6e:eb:53:d1:1b:83:2d:8b:50:24:a0:
80:04:e6:ad:5f:f8:6a:72:e2:03:da:55:40:52:0b:
f3:51:5b:a9:56:5b:88:cc:f8:ba:b6:1c:cd:e5:25:
9f:df:d3:db:e3:b8:a5:dc:a3:c2:c6:0b:e7:63:e3:
99:ea:4d:b0:3a:39:de:d7:06:f2:9e:5c:96:01:81:
9e:b3:1f:ec:15:88:2b:9c:9a:35:75:17:e7:4f:08:
dd:e5:34:1c:e6:55:8f:d9:9a:e8:ba:38:99:12:b3:
e9:06:58:1b:72:04:54:f2:b6:91:96:8e:d4:46:94:
d4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E5:5A:53:41:E7:23:21:3A:85:CA:6B:A4:71:20:36:9F:77:12:8B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D2C7CCC0B16E11EDA491299FF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.178.0/24
Signature Algorithm: sha256WithRSAEncryption
94:ad:54:79:80:b8:fe:51:e6:14:e2:cc:64:69:7e:b5:e8:cd:
ea:59:96:49:ed:64:15:8d:0d:88:9a:b3:eb:8a:a0:d7:a3:62:
40:3e:12:26:13:8c:5f:c5:c2:02:0f:8a:8d:6e:6f:85:4a:c0:
93:c2:e0:9b:2f:f0:61:04:d9:45:0b:c8:b0:0a:1a:a2:0e:00:
c8:60:0a:27:c1:59:f9:14:4c:f8:5d:3b:65:d0:dc:6d:e5:40:
5c:e4:c9:21:34:9c:73:a6:14:4e:72:63:69:d6:f0:12:77:cd:
fc:88:b1:68:f1:20:c4:27:d9:26:90:4e:ac:93:00:da:7a:f4:
1a:ed:68:8f:06:01:e1:34:4d:63:06:51:1e:e8:29:81:f0:82:
8c:81:ac:8c:d6:56:3b:f5:4a:b0:b2:35:27:7f:c3:4d:6d:8d:
84:d9:cf:c0:e7:e8:28:51:64:37:1d:39:87:f9:4c:1c:30:48:
dc:33:b7:ce:51:15:6e:3d:68:ae:97:41:b6:e9:27:51:af:e2:
ae:a0:3b:94:e5:f1:b7:92:df:9d:c4:27:8d:55:ff:da:c3:32:
78:03:0d:41:03:7e:58:f8:c3:71:3d:5a:25:53:42:af:85:d2:
c8:19:cf:b9:19:93:69:cf:70:4c:da:56:f6:04:d5:79:af:db:
88:fc:08:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 20 14:54:00 2024 by rpki-client on console-fra.rpki-client.org