Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D9458378903211EEA322B47AD25BE465.roa
File: D9458378903211EEA322B47AD25BE465.roa (raw, json)
Hash identifier: OZM71mhkPSNs87Typ5a2vxd7zpC+ggLJ4sw2tYWVE+E=
Subject key identifier: 67:E8:F0:9F:CF:AA:A2:1B:10:2F:50:61:73:24:FA:46:07:9C:B1:01
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0E5C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D9458378903211EEA322B47AD25BE465.roa
Signing time: Fri 01 Dec 2023 10:17:36 +0000
ROA not before: Fri 01 Dec 2023 10:17:33 +0000
ROA not after: Mon 01 Dec 2025 10:17:33 +0000
asID: 834
IP address blocks: 102.129.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Dec 2023 15:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3676 (0xe5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 1 10:17:33 2023 GMT
Not After : Dec 1 10:17:33 2025 GMT
Subject: CN=6569b2c0-7bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:06:d1:e9:b4:5d:32:c8:7d:73:19:c0:49:ad:
03:0b:54:be:b7:45:ed:8c:29:67:32:06:ed:9d:a6:
a6:a1:9c:2a:1c:ee:9d:ec:71:26:ed:30:f3:c0:63:
7a:3a:82:aa:c9:2c:6a:8c:64:05:2c:73:81:82:d0:
20:90:77:07:be:87:e0:a6:80:db:5a:08:a9:63:33:
47:71:ce:da:8e:e3:9d:a3:04:b6:e9:0a:25:a1:f1:
a2:05:71:35:e7:2d:36:65:48:ba:70:67:9a:d1:f9:
33:29:d3:6a:0a:ce:5e:10:e4:1d:07:14:6d:e6:1b:
79:91:8b:f0:01:03:05:56:fb:fe:25:64:4f:11:4f:
91:c3:01:fa:b9:55:ff:58:9c:d0:4a:4b:ce:6a:eb:
a2:96:fd:3e:4c:5b:f6:37:a4:30:2b:34:98:06:8f:
95:85:69:4a:5f:e2:6e:cc:39:00:e6:61:a4:12:8a:
09:9e:37:10:97:50:b2:4f:30:fd:01:1f:2d:42:67:
d1:68:61:fd:47:20:82:27:b9:e9:be:5e:3f:3a:5c:
cf:86:fe:18:cc:2d:1a:2a:c2:a4:9a:89:28:79:2c:
cf:b1:e8:65:41:d8:03:aa:02:11:c6:14:ff:03:e9:
29:20:ec:c5:0f:9c:91:2f:9f:e8:79:9f:a9:b1:fa:
ef:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E8:F0:9F:CF:AA:A2:1B:10:2F:50:61:73:24:FA:46:07:9C:B1:01
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D9458378903211EEA322B47AD25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.168.0/24
Signature Algorithm: sha256WithRSAEncryption
53:c4:78:55:7b:5f:6b:56:66:cd:0d:57:5b:94:2a:e2:e6:60:
f0:53:27:be:a4:46:75:4d:f2:64:8f:91:3a:34:f7:61:de:30:
c5:2f:d5:c2:96:aa:80:e4:b8:46:9d:8a:d8:e9:ec:57:88:19:
86:71:51:55:e3:74:48:64:20:fc:c0:aa:a4:a2:72:a0:fa:3d:
9b:5b:ee:61:b6:2a:cf:f3:0f:4a:ae:48:d1:1d:62:95:1d:a9:
a2:37:d4:80:bd:d7:e9:85:a3:2f:99:2c:4b:40:18:70:a9:80:
54:7b:08:77:30:c5:1a:f3:af:59:61:34:c0:53:e4:5d:09:c8:
94:33:da:d0:72:c0:41:35:41:89:7f:56:b9:1c:53:4a:02:32:
64:f6:65:f1:6f:a5:78:91:66:17:a7:4b:b3:78:ac:31:2f:0b:
e5:ee:17:66:bc:4e:a2:19:9c:71:14:d6:a5:3e:a5:28:65:7e:
3e:a4:ab:e5:34:7f:de:9e:bd:58:1d:60:3a:59:d0:01:2d:c6:
64:c9:87:c2:cd:87:27:86:31:fc:bc:4c:99:30:c6:06:bc:e0:
a0:44:c4:36:78:fe:00:b8:14:2b:54:d6:34:56:fd:db:12:b7:
21:09:0b:96:fb:c6:1f:ca:ed:1b:22:29:e1:28:aa:58:e3:e0:
42:7d:ec:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org