Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F0A188A64BFE11EDBDB6D9C4F1222468.roa
File: F0A188A64BFE11EDBDB6D9C4F1222468.roa (raw, json)
Hash identifier: FOgHeea4LsHr9wqHXQMYG7UVwIR+Cl9U9ikrPPpcMXI=
Subject key identifier: 2B:29:28:BF:5B:CB:35:F6:C1:C4:F0:62:76:AF:5B:35:CD:FC:88:30
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 085A
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F0A188A64BFE11EDBDB6D9C4F1222468.roa
Signing time: Fri 14 Oct 2022 20:29:45 +0000
ROA not before: Fri 14 Oct 2022 20:29:40 +0000
ROA not after: Tue 15 Oct 2024 20:29:40 +0000
asID: 140947
IP address blocks: 102.129.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Dec 2022 01:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2138 (0x85a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 14 20:29:40 2022 GMT
Not After : Oct 15 20:29:40 2024 GMT
Subject: CN=6349c6b9-4d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d1:76:2a:d9:1e:42:b6:d4:36:34:d1:4c:78:
15:19:7f:c6:ba:9f:e4:10:c7:2d:f7:0d:0a:4b:e6:
a9:fb:78:56:f4:dd:43:a6:3f:e5:85:6c:ea:1d:7a:
12:d3:2b:e6:5f:b4:4a:f0:2f:77:ef:d2:bb:88:2b:
b8:3c:ee:2e:a2:43:7e:2b:74:46:e1:78:9b:e9:55:
09:42:c8:6f:90:71:7e:4d:fc:a3:7d:cb:4b:b9:3b:
38:15:29:63:28:15:b5:6d:33:0d:3c:43:77:86:b6:
2e:0d:8a:f5:58:98:d8:a2:a3:fa:df:7c:7b:fa:32:
ae:ca:1f:27:9f:42:f4:0d:f5:10:78:2b:2c:e4:fb:
15:fe:59:55:93:16:fc:74:34:fd:9f:54:e4:37:a1:
5a:2b:61:37:c5:e6:c4:91:14:44:c4:9d:ce:36:b8:
57:4d:8a:2b:6e:0a:f9:a0:a5:d7:3f:41:4e:ef:27:
c2:a9:7f:b2:6a:c5:a7:a8:80:23:36:8d:61:98:bb:
7d:54:96:37:47:f3:62:ea:b0:54:a9:7a:59:58:49:
48:9f:93:68:e3:fa:27:71:d5:e8:32:1f:02:0f:b0:
f4:c3:af:05:0c:84:a7:e9:56:82:fb:f4:ef:12:d6:
ff:92:08:a8:86:35:cb:38:46:09:32:be:e4:3d:ec:
bd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:29:28:BF:5B:CB:35:F6:C1:C4:F0:62:76:AF:5B:35:CD:FC:88:30
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F0A188A64BFE11EDBDB6D9C4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.246.0/24
Signature Algorithm: sha256WithRSAEncryption
18:27:64:00:d7:60:b5:26:a8:d8:19:b1:b7:47:41:66:a8:3f:
ca:6e:d3:8a:d8:df:35:40:ee:9e:2d:29:8a:ce:59:5d:a3:5f:
8f:22:2d:cb:31:64:9e:fa:f7:25:e8:d9:8e:56:22:7a:33:30:
a7:1b:85:f0:ec:93:aa:0f:f2:df:ff:e0:1f:e5:db:c8:23:00:
14:2d:59:31:29:00:6c:38:e1:f9:9b:32:8a:6f:b1:7c:35:f5:
08:ca:70:d6:8e:cb:94:bd:3d:64:97:ad:dd:44:a2:38:aa:81:
08:ff:ab:1b:0b:5b:fd:e1:a9:c0:1a:6b:53:36:58:06:1b:66:
b4:3e:4d:1e:f6:c6:d4:77:6c:e7:20:1b:a7:8d:ea:68:20:1c:
40:00:a4:71:4f:3e:d4:01:ca:9a:2d:db:03:5a:6f:31:91:bf:
f0:00:f9:a8:84:a7:05:ed:a0:ef:6e:a9:8c:3d:d7:8a:39:05:
04:4a:90:ae:eb:04:b7:8a:a1:70:65:22:04:f5:06:48:bc:f6:
9c:77:90:57:7d:a9:f4:c3:86:63:a1:a4:82:b9:4c:96:2d:bd:
8d:e3:26:73:1a:c1:ea:c1:38:14:2a:b0:d8:f0:83:e7:d5:df:
ca:c0:31:1a:9e:ca:8c:c2:9f:fa:c3:55:b4:ee:16:65:82:4e:
73:dc:ac:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:40 2024 by rpki-client on console-ams.rpki-client.org