Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D9449A240E9911EDA5DE568AF1222468.roa
File: D9449A240E9911EDA5DE568AF1222468.roa (raw, json)
Hash identifier: WWxAOCFGC5kcwKJCsU6/85qqiJvMA6bnGHosB9yDKDQ=
Subject key identifier: 5C:73:BD:00:06:10:75:40:0B:20:0C:BA:1E:83:95:3F:FD:F5:46:10
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0754
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D9449A240E9911EDA5DE568AF1222468.roa
Signing time: Thu 28 Jul 2022 17:22:26 +0000
ROA not before: Thu 28 Jul 2022 17:22:21 +0000
ROA not after: Sun 28 Jul 2024 17:22:21 +0000
asID: 60721
IP address blocks: 102.129.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Nov 2022 09:59:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1876 (0x754)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 28 17:22:21 2022 GMT
Not After : Jul 28 17:22:21 2024 GMT
Subject: CN=62e2c5d2-a0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:62:0e:70:fb:1c:83:f8:96:15:91:27:f8:88:
ae:c4:22:67:d9:06:7e:81:2c:24:a1:42:ec:a8:18:
c3:74:57:d8:a4:ea:03:69:e0:8a:a7:62:85:65:a8:
ac:3e:4e:0e:ee:50:cc:27:c9:70:96:d3:3f:5c:a8:
d1:82:ba:13:23:06:03:bd:e0:c1:32:18:7e:18:1e:
a9:5b:65:df:92:c7:85:57:0f:a3:a8:cb:60:4b:87:
d4:f4:54:18:e7:44:1f:bf:a4:90:9d:29:23:97:7b:
d9:49:a4:28:7f:1e:96:00:64:87:46:c4:f3:3b:bc:
66:4b:d7:13:67:2e:ce:c6:c2:fc:66:90:ca:0d:8f:
6e:a9:95:77:83:a0:ac:08:a5:d4:1e:38:89:da:09:
ba:11:74:72:f0:25:c4:9a:47:13:33:31:9a:ff:0d:
c0:86:4c:fb:08:02:fe:df:ec:46:63:9d:ec:83:cb:
a9:9f:41:67:a0:40:a3:eb:7f:cd:85:3e:de:e3:7f:
34:62:a4:c2:68:1b:d6:81:5e:ec:f9:6f:a2:1d:7e:
01:a3:17:7e:ac:29:b3:b5:9d:af:df:f9:4d:b3:18:
ec:2d:7a:1b:35:67:58:8b:4b:99:d9:ac:23:16:db:
bd:36:e8:a2:f5:e5:c0:88:16:5b:62:a9:00:88:cf:
d5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:73:BD:00:06:10:75:40:0B:20:0C:BA:1E:83:95:3F:FD:F5:46:10
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D9449A240E9911EDA5DE568AF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.226.0/24
Signature Algorithm: sha256WithRSAEncryption
43:85:28:2e:e5:57:90:89:27:73:46:3a:5c:4f:9d:cd:d6:33:
30:d2:28:8d:f6:ce:d8:62:20:55:7e:2f:0a:3c:a4:70:22:1f:
a9:0b:51:ef:58:d1:b1:62:55:5b:71:91:72:47:1f:a9:d7:98:
2d:c6:cb:3f:41:66:ce:09:14:cf:6e:ec:0a:91:a1:87:72:48:
6c:cf:b0:5a:10:bf:5e:40:34:0f:11:ba:39:3d:c9:61:1a:a4:
35:f5:e9:47:11:8d:a1:9f:40:65:5a:f4:43:59:13:fa:f1:90:
9a:5c:8b:e5:71:6b:cd:21:fe:b4:b0:a4:12:69:ea:59:85:38:
68:f7:fe:4d:df:34:d6:70:87:74:16:f5:1f:eb:d8:fe:f8:9d:
9f:30:7d:14:e7:0e:b6:b7:1a:5d:9e:92:a6:96:a7:05:a9:2c:
7f:5f:5b:e2:b1:e5:67:9a:74:47:a9:5a:c1:2a:35:29:a7:a3:
ed:a2:2d:1a:6f:92:7f:58:14:43:49:ea:47:94:3c:9e:8e:70:
31:13:b5:82:05:93:a9:7f:12:c0:28:2d:11:91:7c:e4:2a:99:
65:23:ef:cc:90:5e:48:9c:76:73:dc:9e:52:18:24:49:af:11:
ee:86:a7:e8:8b:a4:5a:de:27:f7:72:8c:6b:2f:45:9b:e3:f3:
84:24:dd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org