Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DCC5DD2258A511EF9E541445762E951A.roa
File: DCC5DD2258A511EF9E541445762E951A.roa (raw, json)
Hash identifier: cH9RcaR3Cnx+OIY1oc0Okzc0aLIWgZe0eNPL7sqenwg=
Subject key identifier: 43:11:AB:7E:02:58:7C:EB:8C:65:5A:13:90:C0:41:43:1D:27:C5:58
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 11A9
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DCC5DD2258A511EF9E541445762E951A.roa
Signing time: Mon 12 Aug 2024 12:24:47 +0000
ROA not before: Mon 12 Aug 2024 12:24:44 +0000
ROA not after: Wed 12 Aug 2026 12:24:44 +0000
asID: 834
IP address blocks: 102.129.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 07:49:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4521 (0x11a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 12 12:24:44 2024 GMT
Not After : Aug 12 12:24:44 2026 GMT
Subject: CN=66b9ff0f-3d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:60:51:0e:4b:ab:1e:2f:7c:d9:b3:38:c8:d9:
a1:92:d0:89:c5:bc:cd:b2:59:41:20:50:c3:45:68:
e5:2d:19:e2:99:8c:8f:96:ff:50:1d:c7:bd:64:8a:
9a:1f:0d:c0:20:84:22:09:3e:f3:f6:f4:cf:6c:8b:
89:16:6f:39:b1:a1:31:19:f4:e7:d0:6d:6d:18:a5:
e3:51:9a:b2:22:d2:d7:7e:40:ee:e2:12:64:c4:85:
a5:5c:67:15:ec:52:9a:9f:f4:08:f6:a7:ea:55:dc:
38:cf:92:83:86:9e:cd:88:57:e0:c8:6e:7b:47:e3:
18:55:ac:73:6f:f6:c3:c6:1f:c1:3c:41:7a:22:b6:
4f:06:c4:59:42:84:28:22:31:5d:e7:e8:da:01:ce:
17:b8:4a:f7:7a:4b:f7:4a:9d:e4:08:0e:46:01:9e:
01:42:2f:36:74:d7:bc:f1:f7:2c:1f:c9:88:f7:19:
3c:46:56:e3:4a:d2:f3:43:19:f5:56:42:b1:1f:74:
74:a2:fc:ed:70:b6:93:37:43:4e:bb:36:e8:8b:89:
ca:be:14:ff:64:57:a7:7a:74:ae:77:61:40:d8:53:
74:c1:36:87:2d:17:50:49:09:6e:f7:d7:86:ab:3e:
b2:a3:3f:29:31:fa:5b:7d:e0:2a:bd:40:8c:95:d0:
6a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:11:AB:7E:02:58:7C:EB:8C:65:5A:13:90:C0:41:43:1D:27:C5:58
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DCC5DD2258A511EF9E541445762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.173.0/24
Signature Algorithm: sha256WithRSAEncryption
15:f7:9c:58:ae:6c:a0:6f:b3:83:fb:c2:de:a5:8d:cc:fb:fd:
7a:04:69:16:97:cd:80:dc:28:2e:a6:d3:d0:28:12:78:b3:4a:
c6:16:ca:27:b0:5c:37:0b:5b:c8:a6:92:c1:08:5e:c7:0f:f0:
03:f1:ad:48:64:c3:0a:d9:af:9c:9a:19:59:58:11:a4:be:e0:
bf:dc:31:11:24:47:8f:70:38:03:13:91:30:e6:e4:b6:e0:ef:
5c:6d:ea:ea:45:c1:ab:68:46:79:f6:ea:a0:82:fb:76:fd:a2:
e7:78:b6:73:23:41:f7:f7:f8:d4:fe:57:b7:0d:98:07:35:5a:
86:7f:f4:5e:fb:63:60:79:97:c8:18:5d:47:ac:65:4d:d5:a4:
80:c7:dc:c3:18:97:ee:68:f8:66:24:5f:64:e4:38:1b:89:5a:
d6:bc:0b:25:92:05:87:39:f7:97:17:ca:c1:d7:c0:99:07:c7:
87:bc:7e:19:79:22:e4:96:c9:aa:00:e6:89:55:29:ef:28:ae:
84:d8:3e:de:40:28:0b:7d:39:c6:b2:2b:77:2e:c6:59:91:96:
67:ca:e7:1d:50:46:28:96:39:a6:c0:a8:64:b5:27:b3:63:39:
34:c5:78:1a:a6:1a:38:a9:a4:9e:45:8a:42:8e:72:a9:52:ac:
97:e6:0a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:47:20 2024 by rpki-client on console-ams.rpki-client.org