Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D885F2DE009E11EEADEA397B4AD9E6FC.roa
File: D885F2DE009E11EEADEA397B4AD9E6FC.roa (raw, json)
Hash identifier: 15e/CWME2D2rsayM9s2KUyTkwpHLJIXxODnrKVGXWxw=
Subject key identifier: 11:3C:73:70:94:0E:A1:1C:B4:03:F1:6C:E7:49:BC:54:63:00:15:02
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0BBB
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D885F2DE009E11EEADEA397B4AD9E6FC.roa
Signing time: Thu 01 Jun 2023 17:07:53 +0000
ROA not before: Thu 01 Jun 2023 17:07:49 +0000
ROA not after: Sun 01 Jun 2025 17:07:49 +0000
asID: 834
IP address blocks: 102.129.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jul 2023 10:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3003 (0xbbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 1 17:07:49 2023 GMT
Not After : Jun 1 17:07:49 2025 GMT
Subject: CN=6478d069-6994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5d:54:1d:20:de:a1:be:be:a0:16:d7:76:2c:
2a:a9:c6:0d:81:2f:0e:89:7f:89:94:2c:9c:40:93:
74:e3:cd:a5:a8:68:4e:1e:55:3b:e8:cb:6f:93:ef:
29:e9:f7:c3:3d:78:63:24:b7:77:60:41:6f:ce:d5:
e7:9b:c0:ff:cc:ba:9b:a4:b9:ac:b7:17:ef:0b:80:
a0:98:eb:c0:7c:66:c2:58:c0:50:09:80:ef:5f:98:
33:86:f9:51:e3:38:e0:60:1f:c0:ae:96:29:b8:e9:
cc:32:78:71:a8:57:d6:1e:6d:67:d8:32:cd:ed:3a:
06:f6:34:b4:d3:4f:44:44:fd:f5:50:4e:a6:27:08:
b0:40:c8:78:1f:f9:2e:69:84:e4:65:84:cc:06:86:
a3:03:5d:b3:1e:64:08:8c:b8:1a:a1:c5:c5:31:01:
9b:43:e3:9c:0e:aa:5a:c6:68:34:37:1c:c6:84:51:
51:ac:8f:b4:3e:06:f7:58:3f:06:3d:9e:b0:a6:c2:
54:65:01:0e:9f:1d:07:9d:29:8e:76:32:ec:ab:a4:
16:d2:ca:e1:48:30:0b:94:3f:7b:fa:e4:f7:12:d2:
b7:35:43:28:a9:6b:1a:b1:0e:bd:9b:61:b8:76:47:
3e:55:e2:29:c8:84:5e:31:e9:d8:c1:06:9e:d3:17:
88:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3C:73:70:94:0E:A1:1C:B4:03:F1:6C:E7:49:BC:54:63:00:15:02
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D885F2DE009E11EEADEA397B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.186.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:46:50:03:84:45:b9:8d:6a:33:58:1f:8c:c7:35:13:7e:40:
bb:cb:98:6c:fa:16:49:9c:52:ea:2d:cf:f0:bd:43:03:5e:01:
82:2d:18:1b:86:36:c9:d0:9b:0f:f1:b4:ec:41:43:98:eb:40:
b8:74:e5:a6:2a:55:eb:8a:5f:f3:0e:a8:d9:46:e6:c1:02:a1:
4c:43:1a:df:d9:65:84:20:f0:71:86:c1:28:99:02:d4:42:2b:
e2:4e:ef:53:b7:28:31:76:d9:bf:e4:61:2a:bd:1a:01:d9:c2:
65:51:9b:f7:2d:49:2f:df:38:4b:35:ed:6d:fa:ac:16:15:a8:
59:ad:13:88:63:bf:e2:a3:a4:ca:d5:ed:a2:55:2d:77:42:f8:
ae:65:f5:3c:b8:f3:9f:fa:fb:a6:d1:2d:65:5d:73:f2:8e:f9:
76:bb:4a:3e:14:09:18:8e:3b:a2:84:2f:6b:c5:5d:b0:84:1c:
db:3e:a4:0c:9f:76:06:82:3b:3d:5d:47:2e:3f:48:a4:3b:18:
f7:ba:97:b9:dd:e9:eb:c6:a7:15:6b:c1:5c:38:70:3c:a1:0c:
1a:82:d6:a3:44:64:80:f7:20:e8:da:6b:6a:8f:85:11:3d:2e:
23:d9:f9:b1:f8:70:84:53:f5:c6:c1:13:12:36:71:b8:fb:83:
a5:80:04:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org