Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EA6BDD725F9F11EFAFABCCA9762E951A.roa
File: EA6BDD725F9F11EFAFABCCA9762E951A.roa (raw, json)
Hash identifier: tXqwRg29rHMjHjvtbRsR3OpwAJatWDE2NTWVUTHzoqQ=
Subject key identifier: 88:B9:28:B7:AD:DC:AD:91:D0:17:0E:9D:0D:2B:6B:B2:97:7B:B8:85
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 11C4
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EA6BDD725F9F11EFAFABCCA9762E951A.roa
Signing time: Wed 21 Aug 2024 09:29:51 +0000
ROA not before: Wed 21 Aug 2024 09:29:47 +0000
ROA not after: Sat 22 Aug 2026 09:29:47 +0000
asID: 834
IP address blocks: 102.129.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Nov 2024 07:16:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4548 (0x11c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Aug 21 09:29:47 2024 GMT
Not After : Aug 22 09:29:47 2026 GMT
Subject: CN=66c5b38f-0cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:56:bb:65:f7:6f:fe:14:8a:6e:ba:0d:48:3f:
36:30:3a:b8:f6:57:a7:92:81:99:60:fa:fe:3d:d4:
9b:1f:d4:63:2f:fe:44:58:21:8f:88:14:6d:2b:a8:
a5:60:e8:fa:7a:1f:ee:35:dd:e1:c9:72:9f:27:c8:
27:d1:1c:7a:b5:fa:f1:8c:d1:b9:9c:68:cf:d4:7b:
9e:ab:18:79:79:60:6d:fc:a9:be:14:db:be:42:04:
83:0c:4b:be:fa:03:c9:df:9f:84:04:51:29:ec:8b:
b1:3c:19:fd:8f:c7:7b:61:48:ec:57:d9:b7:c4:90:
25:5f:31:98:11:e1:d4:da:d8:03:c7:5b:15:45:1c:
fa:89:93:00:a1:9d:85:44:fc:93:ad:30:06:35:f6:
d8:30:51:db:41:59:ef:b4:4f:12:25:9b:3e:e4:02:
e6:09:10:5a:52:6a:29:d4:b0:dd:2f:b6:d6:9f:15:
23:06:60:40:e1:53:ff:bf:f3:75:c7:0c:6b:5c:81:
b6:f6:c7:06:77:0c:c9:62:94:8c:7e:63:30:10:af:
df:c3:26:ac:0e:03:5c:b0:8b:2e:ca:55:2b:92:1b:
87:6a:b3:80:a4:ac:1d:90:9e:fe:dd:45:3b:99:9d:
80:34:1b:e9:cd:a2:18:11:1e:ea:b3:99:78:72:fa:
9e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B9:28:B7:AD:DC:AD:91:D0:17:0E:9D:0D:2B:6B:B2:97:7B:B8:85
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EA6BDD725F9F11EFAFABCCA9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.203.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:a9:61:0f:5a:78:09:cd:7a:4f:fa:2b:ac:c5:3c:e8:f7:70:
80:36:1c:9d:6f:59:8b:7f:f5:e1:b8:65:7b:1d:db:01:84:85:
48:13:30:4d:84:e6:33:59:db:55:cc:ba:e3:dc:1d:f2:54:3e:
92:8d:21:17:66:21:ee:b8:37:53:ac:a0:61:08:39:6b:c3:a7:
23:26:33:2d:f0:f7:6d:fd:ab:ee:32:0f:11:e6:42:76:ab:75:
0b:07:9c:d3:04:12:1b:4a:ba:a0:57:37:03:a8:e3:97:01:77:
3c:01:ff:06:1c:fb:1f:41:34:ac:8f:58:79:6b:59:55:85:43:
51:60:cc:a0:9e:5a:9b:91:b8:24:6c:d7:f9:f0:44:93:68:0f:
c7:12:59:7e:4d:b4:16:7d:37:2f:91:ee:32:45:90:48:fb:6f:
51:17:67:f0:2f:72:e3:c5:97:f2:49:27:f5:17:5f:24:72:b8:
62:1e:5b:cc:d6:41:65:62:9d:92:a2:1d:11:3a:f6:db:4f:2f:
a8:5b:65:26:1d:3b:19:fa:a8:d9:8a:75:50:51:86:23:a4:7e:
11:b3:fc:e6:72:4b:56:fd:2c:23:e5:da:64:4a:d0:1d:23:ef:
80:dd:76:fc:57:e6:92:18:6f:73:41:d8:41:a4:c6:46:ae:0f:
96:ba:17:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:46:20 2025 by rpki-client