Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DBC6FDF6161C11EE86E26E0D4AD9E6FC.roa
File: DBC6FDF6161C11EE86E26E0D4AD9E6FC.roa (raw, json)
Hash identifier: bKrWtodB+OB784dWkKmAgcQk5IE+PWAB9KC1+T7LDuQ=
Subject key identifier: B5:13:05:7E:DF:AC:3F:CF:3A:DD:15:41:C3:81:0B:29:6D:69:B5:F8
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0C39
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DBC6FDF6161C11EE86E26E0D4AD9E6FC.roa
Signing time: Thu 29 Jun 2023 01:32:50 +0000
ROA not before: Thu 29 Jun 2023 01:32:46 +0000
ROA not after: Sat 29 Jun 2024 01:32:46 +0000
asID: 14315
IP address blocks: 102.129.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Sep 2023 06:58:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3129 (0xc39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 29 01:32:46 2023 GMT
Not After : Jun 29 01:32:46 2024 GMT
Subject: CN=649cdf42-7feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1e:26:8e:a7:5b:20:36:db:94:59:f2:f9:1d:
c2:83:d9:59:53:29:b0:37:62:a1:16:89:84:0e:cd:
ac:f8:9f:24:6d:3d:ac:2a:dc:bd:a7:84:38:9c:65:
a0:7c:8c:d1:ee:c0:d5:bc:6a:e6:13:03:b9:55:dd:
25:bb:e4:ee:5f:2b:63:3f:37:e7:ca:68:7e:9b:14:
20:64:a1:67:43:2d:d6:f2:54:95:20:07:6b:2f:e9:
4d:d7:a3:9d:35:d0:bd:79:d5:da:82:ae:52:4b:17:
db:00:14:f8:d0:73:39:6b:7d:be:0f:99:97:33:3b:
44:14:6c:a3:59:35:07:bf:90:d8:ea:ca:9b:1e:e7:
36:0d:12:eb:8e:92:74:ee:de:f0:81:3e:f6:22:92:
40:04:44:46:83:4f:08:9c:b4:c7:3d:10:23:50:48:
8a:8c:9c:e9:d0:82:b8:50:ca:2c:ac:99:5a:7a:d1:
68:a6:e2:be:53:ac:cb:ab:00:9b:f7:71:71:66:00:
dc:0d:43:d8:91:54:9b:f2:95:ba:2e:d2:2a:3d:ba:
77:00:c8:e8:7d:c8:de:db:af:10:63:f4:6b:db:b9:
e9:3f:8a:ba:1f:e1:99:70:4d:94:02:6d:f6:25:ff:
6d:ec:b0:78:28:65:61:59:9e:b9:74:44:c8:e2:fb:
b8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:13:05:7E:DF:AC:3F:CF:3A:DD:15:41:C3:81:0B:29:6D:69:B5:F8
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DBC6FDF6161C11EE86E26E0D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.195.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:91:db:67:ba:9b:6f:5d:1e:55:37:0d:02:be:a2:d1:32:53:
39:16:74:af:8a:e0:ea:31:81:71:3a:57:62:01:d3:a0:e8:c9:
a1:8e:3f:78:5b:ff:05:ec:13:24:f5:cd:cf:2f:0e:f3:24:2d:
f4:1a:88:9b:7e:a0:b5:49:54:e2:c0:a9:1b:27:20:c4:bb:fc:
60:1a:98:b9:1e:9c:16:77:22:6e:76:59:9e:fd:2f:b4:53:df:
82:84:d6:77:9a:09:aa:84:97:45:fc:65:93:50:3c:f0:56:58:
6b:0e:2d:e1:c1:2c:5a:95:d5:94:2e:4c:b5:82:6c:6f:f9:14:
1e:60:48:86:1a:a1:d5:74:35:9f:b8:69:85:06:04:fa:ca:88:
3c:44:de:24:ee:62:47:14:a5:68:e1:39:3a:7c:33:9a:9a:38:
2e:e9:ec:8a:f9:6e:a1:fd:c3:04:72:88:f9:90:d3:97:cb:1a:
37:53:76:20:f3:4d:20:c5:4e:95:8e:3a:4c:86:4f:83:3a:5b:
41:60:02:d1:97:e2:0e:06:7c:34:5c:0d:62:df:ef:08:0b:80:
54:d7:13:09:62:f3:9b:12:b8:77:03:6c:e7:3f:cb:ce:8b:f9:
aa:5c:ec:dc:64:42:16:80:be:c9:a6:82:6b:49:37:ba:73:a5:
31:6a:84:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:40 2024 by rpki-client on console-ams.rpki-client.org