Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E8255422485211EEA390F4534AD9E6FC.roa
File: E8255422485211EEA390F4534AD9E6FC.roa (raw, json)
Hash identifier: vsnC5pRljwV7T/owA0d2WFRo4i2as1nfKgP47HwqFvA=
Subject key identifier: 22:41:77:3D:36:3C:70:02:C3:00:5D:3F:CE:C9:0D:63:A0:F3:E7:08
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0D02
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E8255422485211EEA390F4534AD9E6FC.roa
Signing time: Thu 31 Aug 2023 23:05:41 +0000
ROA not before: Fri 01 Sep 2023 23:05:36 +0000
ROA not after: Sun 01 Sep 2024 23:05:36 +0000
asID: 20473
IP address blocks: 102.129.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 11:56:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3330 (0xd02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 1 23:05:36 2023 GMT
Not After : Sep 1 23:05:36 2024 GMT
Subject: CN=64f11cc5-3cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:3e:27:a2:ac:83:2c:c8:fe:c7:e1:16:3a:
84:0b:e8:7a:18:fb:7b:18:1e:4f:b7:e1:30:bb:a0:
b9:d2:a9:79:8f:be:61:50:5c:92:ad:86:46:d5:d2:
c1:7d:55:a5:76:4d:df:bf:21:dc:b2:45:75:65:b9:
0b:26:a9:91:3e:42:82:c9:4a:99:33:53:19:68:40:
ef:bf:29:25:77:98:a0:6c:4c:c2:1a:c9:1f:ef:a2:
c3:4f:6c:03:c9:ba:5b:49:fe:00:dc:12:ef:43:da:
e3:f1:02:b4:b2:64:00:10:bf:5d:c2:ba:e2:71:9a:
07:de:aa:76:bc:04:ca:20:70:5e:f1:94:25:29:37:
9c:73:be:8f:33:e9:26:c8:c6:5d:42:17:1b:fc:70:
93:0d:e2:0d:03:b3:1e:c9:0e:7c:72:50:91:99:57:
40:81:e7:c6:da:6b:6c:d3:11:59:1a:fc:e3:16:36:
1b:84:a0:09:a6:f9:e0:36:aa:dc:94:19:0a:01:02:
76:6f:bf:4a:fe:2a:36:41:63:e9:2d:f8:7e:08:bb:
5d:fb:66:0e:3e:70:04:04:f1:00:4e:45:e6:38:54:
d5:6f:62:be:eb:01:16:c4:e9:35:0c:9f:17:5f:4d:
b1:6e:fd:fa:9f:b0:b5:1a:bb:1f:a9:52:0e:d5:0c:
17:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:41:77:3D:36:3C:70:02:C3:00:5D:3F:CE:C9:0D:63:A0:F3:E7:08
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E8255422485211EEA390F4534AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.150.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:56:c8:19:e6:46:c0:d6:d0:ec:8f:3b:46:b4:5e:2d:c0:06:
70:94:0e:2a:df:8d:aa:12:42:be:28:20:b6:83:13:6a:f0:11:
d8:a0:cc:ab:ee:4b:5a:d3:b5:f5:af:13:0a:a5:a8:8c:95:a5:
b1:03:78:05:ee:1d:1c:6f:55:57:00:09:1c:3e:b2:26:a0:dc:
f9:2d:f9:0b:a4:74:34:2d:f8:6b:42:f5:3e:64:96:d4:1f:2d:
b4:d7:8d:d6:ca:0b:a1:ad:e1:cd:9b:d5:ec:63:b6:43:8c:67:
e5:83:7b:50:3c:70:98:7a:6c:72:e3:b8:4d:11:df:63:d4:18:
94:ea:62:c8:b4:a2:ef:9f:57:aa:b4:4c:2b:76:7c:36:8c:63:
de:26:35:6a:7b:98:12:f8:12:eb:e0:0f:bd:48:d1:74:48:21:
73:6b:ff:c1:16:ca:b2:ce:8b:f4:3a:c4:97:f0:1e:14:81:fd:
65:a7:7e:ec:b0:77:35:4f:65:06:90:23:1e:75:8d:f1:09:29:
80:59:87:f3:5c:9e:eb:1e:8b:c4:cc:d5:ce:90:f8:da:7b:13:
4a:e4:8c:65:58:ab:f8:50:e3:7f:e8:05:1e:cd:6d:4b:84:e8:
37:c6:87:2e:d0:06:69:14:51:e7:11:30:0d:aa:45:c1:ac:72:
99:5c:3f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 14:51:05 2024 by rpki-client on console-fra.rpki-client.org