Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EDF39278EB9111EE90285661775412E6.roa
File: EDF39278EB9111EE90285661775412E6.roa (raw, json)
Hash identifier: TWi8fjQnhXu+YrVJdYgoJOMxhZPrcVl9Dah2NxJR9lM=
Subject key identifier: E5:80:CB:29:BB:73:EA:16:AA:88:E6:53:FC:6D:45:B7:54:FE:C6:F0
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1024
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EDF39278EB9111EE90285661775412E6.roa
Signing time: Tue 26 Mar 2024 16:57:29 +0000
ROA not before: Tue 26 Mar 2024 16:57:26 +0000
ROA not after: Sat 28 Mar 2026 16:57:26 +0000
asID: 29802
IP address blocks: 102.129.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jun 2024 10:16:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4132 (0x1024)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 26 16:57:26 2024 GMT
Not After : Mar 28 16:57:26 2026 GMT
Subject: CN=6602fe79-e052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b8:6e:81:3f:67:a3:c3:95:b4:a1:fc:03:90:
32:d0:54:b6:5d:14:49:42:97:88:77:b2:bd:5c:d9:
17:95:31:b5:41:1e:b4:9f:16:82:ec:e0:39:be:1f:
cf:8b:43:f5:ea:19:38:0e:d6:79:7a:3f:cb:8c:62:
1a:83:27:bc:f3:e1:30:97:83:0f:a4:10:e9:3e:5a:
fd:dc:fa:87:5f:2c:77:92:82:8c:41:4e:b5:a7:ea:
1b:bf:b2:c6:c8:6c:fe:fa:a1:26:ad:5d:4e:80:53:
04:68:50:d3:87:99:67:1a:df:c3:50:92:2f:b1:38:
63:79:f1:0b:77:5d:26:7b:fb:3f:29:f0:b1:a5:80:
a7:a6:6d:bc:4d:02:a1:f7:97:11:10:c7:ea:de:3e:
92:30:82:61:0c:9a:5e:49:5a:64:5a:9a:4a:17:19:
3c:93:c0:ad:dc:f7:98:d4:8b:8d:44:a2:55:3d:ef:
ac:47:9a:c8:78:42:e8:e8:c9:37:24:e5:f4:1d:30:
3e:b4:3b:b5:1a:23:df:72:12:d6:7c:c9:5a:e4:80:
53:6a:4a:9b:19:4d:77:be:cf:6b:5d:de:20:a5:40:
54:b7:01:7e:67:59:d1:d6:c9:34:ee:86:8e:cf:49:
bc:82:a6:f6:d3:2c:3f:5e:75:f9:8c:1b:7a:99:76:
27:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:80:CB:29:BB:73:EA:16:AA:88:E6:53:FC:6D:45:B7:54:FE:C6:F0
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EDF39278EB9111EE90285661775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.129.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:0a:3e:e1:4f:c0:a6:54:53:2d:fa:81:dc:cc:54:dc:aa:f2:
2e:b3:66:cd:a5:22:fd:2c:ef:bc:d9:88:4d:1b:60:e9:a1:9d:
50:e5:c1:3c:20:5d:83:03:4c:16:37:a2:1a:ac:57:a7:f5:4f:
d1:19:a0:bf:0b:ab:cf:73:0b:1f:71:a5:f2:c7:74:c7:c1:6f:
c1:8e:ae:5b:0f:9a:0a:90:54:6e:91:9f:4d:b4:fe:55:da:ff:
ed:7b:7b:fe:d2:63:75:2f:39:01:87:e3:a6:81:a0:00:4d:cb:
6b:ce:31:fa:75:2a:89:c2:26:98:bb:ca:bd:3e:a5:ec:0f:83:
22:8d:b2:af:9c:fd:f0:42:99:8a:39:d3:f6:5c:c9:17:cb:c5:
e6:82:67:60:e5:61:a3:97:b6:02:e7:86:c6:a7:84:41:d5:01:
bd:ca:16:6e:77:7b:42:b0:01:24:7c:23:5d:a2:ad:01:af:b9:
7f:d8:c1:10:ff:48:2d:5b:7b:be:7e:88:88:3f:dd:8a:4e:a8:
a3:f2:a5:bb:c9:85:e8:63:d8:ae:2a:54:ff:c1:12:b0:ca:2f:
35:13:fc:f0:83:48:f3:ce:58:ab:73:bc:6d:c4:98:22:71:79:
d1:28:5b:90:5c:0d:39:77:61:39:b8:d9:bb:a7:7f:31:c9:60:
57:38:46:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 16:28:22 2024 by rpki-client on console-ams.rpki-client.org