Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E04CC0E8BC4011EE91EB3E60775412E6.roa
File: E04CC0E8BC4011EE91EB3E60775412E6.roa (raw, json)
Hash identifier: tT/sHlYp5nnbM/elMxH0kfP4PJQ+QOk54Ayy9D7E0Vo=
Subject key identifier: FA:81:AD:1E:F7:4C:92:9D:EF:15:63:90:D3:53:43:E0:51:DB:FE:A8
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0F1F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E04CC0E8BC4011EE91EB3E60775412E6.roa
Signing time: Fri 26 Jan 2024 11:48:52 +0000
ROA not before: Fri 26 Jan 2024 11:48:49 +0000
ROA not after: Mon 26 Jan 2026 11:48:49 +0000
asID: 834
IP address blocks: 102.129.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Feb 2024 07:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3871 (0xf1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 26 11:48:49 2024 GMT
Not After : Jan 26 11:48:49 2026 GMT
Subject: CN=65b39c24-1fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:56:e8:68:2a:b7:80:7b:92:56:dc:9c:64:d6:
22:0b:08:6a:2b:e9:3e:66:f7:b3:b0:c6:cb:41:18:
d3:5c:6f:6d:5e:52:2e:a9:d5:1a:72:35:1f:82:9a:
a2:75:da:32:c8:75:cd:57:46:3a:14:9f:1a:97:b6:
b7:3e:3b:7b:af:b1:a7:e1:42:c0:9e:3c:ee:94:d8:
fd:23:7f:b9:03:e1:f6:cc:ba:c2:f9:90:60:a4:34:
c6:a3:55:55:71:bd:44:9f:63:a9:f7:c5:ed:e8:72:
2a:db:de:c1:74:da:42:08:4b:94:a0:9e:66:53:dd:
55:9c:49:50:25:41:b9:b3:a3:3a:10:85:02:93:e7:
67:42:2c:b2:22:08:43:f2:6d:85:74:ee:e6:fd:27:
2b:6a:f7:f0:a8:08:ff:4a:f0:14:42:1a:02:7e:56:
41:a8:41:6f:2e:b4:5b:ac:36:0e:8b:a7:d3:7c:f0:
35:8b:25:6f:34:6b:24:82:8e:e2:35:bc:32:df:65:
23:85:e1:f8:e3:d5:2c:db:9e:79:1a:df:23:8a:83:
93:7a:33:0c:c9:45:19:5e:78:3b:44:b1:be:ec:09:
08:8c:1c:0a:fe:86:bf:1a:06:cc:f4:7d:2d:79:a7:
5f:84:07:bc:92:d9:14:b5:f2:07:88:da:a3:7f:ee:
08:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:81:AD:1E:F7:4C:92:9D:EF:15:63:90:D3:53:43:E0:51:DB:FE:A8
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E04CC0E8BC4011EE91EB3E60775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.246.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:38:4d:e9:83:89:99:8a:b4:55:46:00:d1:38:79:8a:cf:81:
9b:62:7c:59:d9:92:db:69:80:b1:3c:d7:04:f5:f8:d9:72:f5:
2e:59:2d:76:65:31:51:b4:d4:0a:04:a0:dc:91:60:6d:8d:1f:
7e:84:78:3c:35:e5:9c:ca:8c:27:36:98:39:92:5e:9e:e5:2c:
ba:99:9e:e2:25:79:00:87:95:dd:a9:0e:f8:c7:7c:ae:f1:69:
70:f3:87:27:76:fd:18:6b:13:52:06:eb:92:4a:70:d1:6b:99:
23:77:80:0b:8c:38:ea:ec:e1:e0:dd:79:2f:72:9e:8a:ae:b4:
c9:4f:f0:36:fd:fe:e3:4b:d7:94:1e:a8:d0:c3:49:be:c6:58:
7a:aa:df:06:7a:74:ea:39:a3:16:c4:32:11:ea:fb:d4:5b:b3:
e8:d7:a3:71:b2:e1:e3:c4:26:96:cc:6f:bd:e1:da:77:a4:b9:
3b:33:71:c6:34:da:f7:d8:3f:0b:d7:b3:3e:df:26:8d:3e:db:
9e:eb:88:ec:80:a2:df:78:30:34:2c:e8:34:1a:66:c1:8d:c4:
a2:cb:67:a9:c3:22:2b:79:0d:61:10:4b:9a:6b:a9:e9:43:84:
60:d2:66:c8:65:6d:bc:c3:4b:a6:e7:d8:5f:49:da:28:f2:43:
df:35:29:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 09:51:18 2024 by rpki-client on console-fra.rpki-client.org