Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DC453A80B20811EEB9ABFEB3775412E6.roa
File: DC453A80B20811EEB9ABFEB3775412E6.roa (raw, json)
Hash identifier: mBUIomfKuHLvR21xozaJUpkPLNYt8SDUHuA6cnIHpiE=
Subject key identifier: F5:4F:F1:A2:28:6F:0E:13:7D:46:13:AA:08:FB:29:E8:73:90:52:06
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0EDB
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DC453A80B20811EEB9ABFEB3775412E6.roa
Signing time: Sat 13 Jan 2024 11:42:42 +0000
ROA not before: Sat 13 Jan 2024 11:42:39 +0000
ROA not after: Tue 13 Jan 2026 11:42:39 +0000
asID: 834
IP address blocks: 102.129.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 07:05:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3803 (0xedb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 13 11:42:39 2024 GMT
Not After : Jan 13 11:42:39 2026 GMT
Subject: CN=65a27732-9e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:40:af:21:99:6c:90:c8:28:cd:68:9f:6f:56:
6d:e3:d4:7e:fa:9c:f0:6e:49:b3:c0:fd:1b:60:05:
53:e5:d2:75:81:3a:01:7f:1f:bc:ac:41:d5:48:bd:
e2:08:4e:3e:d5:ec:fc:57:a5:78:98:7f:ca:d4:ce:
66:12:1e:dc:e9:91:b2:68:c3:3b:41:95:41:6a:5c:
19:9a:c4:14:b9:9a:2a:ba:20:02:69:a9:09:9c:9a:
f5:32:0e:60:e8:38:68:c5:50:06:51:53:76:0c:d2:
1b:28:e1:9c:3e:68:a7:c3:79:b8:8d:3f:1f:b1:92:
47:93:ec:31:a7:3c:1b:37:c0:c6:a1:8e:6b:49:36:
f3:b8:8d:4a:a1:86:ae:00:f4:10:8b:45:5c:88:47:
0e:46:7c:cb:dc:03:a6:54:1f:ac:b3:29:86:5c:01:
62:40:7f:df:d6:26:24:dc:38:95:94:d8:90:66:d9:
ff:01:0d:a8:b5:da:f8:2b:94:3c:d7:96:b9:4f:93:
b3:f1:23:dc:bc:ab:4f:3b:23:24:1f:7d:4d:56:21:
6e:ce:b5:ef:b2:f0:00:be:f8:55:35:46:8b:63:af:
9e:ec:5b:5c:ca:ff:5d:d1:6c:19:88:c4:fe:8d:7b:
84:9b:fa:95:0f:60:41:e3:b6:a5:0c:b4:19:32:da:
66:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4F:F1:A2:28:6F:0E:13:7D:46:13:AA:08:FB:29:E8:73:90:52:06
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DC453A80B20811EEB9ABFEB3775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.203.0/24
Signature Algorithm: sha256WithRSAEncryption
69:d5:15:d2:0e:10:bc:13:90:f3:bd:01:a1:7c:0b:01:b4:66:
f5:2b:14:8c:94:bd:00:40:55:37:fe:3d:11:94:5b:1a:64:57:
ab:52:0a:9f:cf:06:27:f8:86:5e:b9:e3:7f:c2:09:f6:b2:33:
29:3f:fb:12:51:97:dc:7c:27:0d:14:bf:39:47:d1:9c:b6:7b:
ee:0e:6b:d7:ac:c1:9c:e3:66:a9:a0:b0:ae:72:fd:61:dc:5d:
98:48:19:8b:e0:e4:8a:2d:9a:ca:86:e5:38:5b:e5:99:52:5a:
1c:5e:27:40:49:c6:3a:02:0e:14:b8:71:7b:a2:52:ff:db:71:
a6:88:17:43:9e:fc:fe:d9:93:69:f7:c6:f9:8c:04:42:0e:da:
5f:0e:4f:61:72:49:09:82:3f:29:d3:86:9f:73:a7:ee:36:dd:
e5:e3:19:d2:47:b4:87:bf:a0:27:a9:de:37:9c:aa:b4:7f:a6:
a0:94:7c:f5:7e:9d:7d:74:25:bc:a5:21:f2:a7:97:1e:59:1f:
fe:6e:66:bf:34:65:e4:e7:4d:8b:10:db:b8:79:f5:4c:5b:bc:
d5:af:93:1a:87:36:e7:88:f2:e7:1d:f6:5a:33:98:72:08:70:
22:94:e8:93:d5:00:17:17:d6:71:81:48:3c:51:79:69:d5:c6:
72:ae:c7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org