Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E2FBCAFC435911EDBF79F7EBF1222468.roa
File: E2FBCAFC435911EDBF79F7EBF1222468.roa (raw, json)
Hash identifier: Rg68jj+842avrm4v7IoPcyRu78PHkZTta67pgitfUvU=
Subject key identifier: 81:07:C9:07:32:81:8C:50:DC:3B:A7:CB:30:6E:E7:42:6F:CD:E4:44
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0825
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E2FBCAFC435911EDBF79F7EBF1222468.roa
Signing time: Mon 03 Oct 2022 20:28:06 +0000
ROA not before: Mon 03 Oct 2022 20:28:01 +0000
ROA not after: Sat 05 Oct 2024 20:28:01 +0000
asID: 30058
IP address blocks: 102.129.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 16:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2085 (0x825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 3 20:28:01 2022 GMT
Not After : Oct 5 20:28:01 2024 GMT
Subject: CN=633b45d6-7d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8b:97:1e:b2:3f:74:ff:38:53:5c:74:20:0b:
f0:a1:93:eb:bf:de:17:22:c3:c8:44:72:8f:bc:54:
06:5e:86:c3:18:4f:8b:dd:2f:aa:a5:20:d7:19:89:
f3:f8:f6:fa:2c:26:a0:94:f3:c7:0b:c9:56:21:d8:
2f:58:2a:c3:23:3d:43:a8:4f:ea:e3:59:f5:1a:31:
60:bc:4f:e0:f6:da:46:9e:6b:34:79:4f:5f:75:35:
5c:2c:52:42:a7:d6:3c:c8:3b:43:cf:e7:06:69:51:
09:f9:c9:8d:6e:57:34:e7:f2:4b:4a:0b:2b:a9:37:
c1:54:31:5e:6e:8f:1e:c9:0d:a6:a6:d3:3e:55:bb:
4f:09:f3:24:90:02:c8:3b:da:f1:7d:a3:48:9e:b1:
17:a7:dc:d4:03:07:2a:00:0e:6b:4b:eb:38:f3:46:
37:c9:9c:01:e9:74:13:95:63:ec:4e:01:31:a7:dd:
36:9d:1e:10:af:42:24:1d:d0:75:e0:e5:dc:05:67:
14:e1:18:52:57:97:e4:e8:d4:0f:32:f9:af:d6:1c:
bc:e6:8c:02:29:eb:6a:35:31:b1:3f:5e:28:ac:40:
22:1a:26:cb:77:a7:c9:82:bf:0d:54:a1:3d:f9:b9:
da:be:af:53:55:dd:76:48:67:ae:2e:1d:39:ae:a8:
59:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:07:C9:07:32:81:8C:50:DC:3B:A7:CB:30:6E:E7:42:6F:CD:E4:44
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E2FBCAFC435911EDBF79F7EBF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.130.0/24
Signature Algorithm: sha256WithRSAEncryption
90:04:bb:99:f9:c0:7d:74:2a:d4:ca:5e:74:cb:2f:68:ac:86:
20:2a:48:ee:08:41:11:80:64:db:28:db:08:9e:1e:d9:ff:d6:
da:86:1a:e8:9f:59:c8:00:9e:64:34:de:1a:90:06:b6:1b:05:
8e:37:c6:2d:c4:7f:5d:ae:ec:a4:3b:37:fa:05:2f:35:3f:41:
ec:84:c2:c1:4d:8b:94:eb:d8:ad:58:96:c7:bb:59:ef:ea:2c:
bd:3f:b6:af:d0:3d:f3:e1:10:41:df:6e:6b:ab:28:3f:f6:f3:
39:2f:99:78:e5:db:28:49:b0:1d:2c:08:49:7e:91:fb:4f:af:
12:6f:b3:ed:94:08:fd:ec:df:2e:bf:27:11:d8:ab:f5:22:97:
f3:50:e7:67:fb:62:0c:54:1e:2c:56:f5:1e:c6:6d:51:85:f4:
c1:06:e2:39:f2:51:18:56:ec:89:6f:01:96:0e:8f:7e:da:02:
e6:12:3c:63:ff:19:36:b1:66:41:d8:ed:08:a9:68:45:4b:2a:
69:9e:0c:65:0b:c7:27:c4:8d:81:eb:26:31:e2:ca:8e:43:13:
bf:c6:52:1f:f6:90:bf:13:6a:0d:40:65:09:81:83:26:1b:db:
44:a1:01:d8:f0:86:10:9f:fa:e1:00:45:5d:d4:29:97:79:69:
c0:51:cf:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 17 21:47:45 2024 by rpki-client on console-fra.rpki-client.org