Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F3339E2CB42E11EDBE77F37FF1222468.roa
File: F3339E2CB42E11EDBE77F37FF1222468.roa (raw, json)
Hash identifier: D22WeGGb38I9YiQEIVoeH6OwbzMB6ZtxpLXdjO34jd8=
Subject key identifier: 57:63:2F:DB:F7:07:2F:04:68:E3:D1:B4:11:9D:AE:87:EE:16:49:86
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A86
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F3339E2CB42E11EDBE77F37FF1222468.roa
Signing time: Fri 24 Feb 2023 10:35:26 +0000
ROA not before: Fri 24 Feb 2023 10:35:22 +0000
ROA not after: Sat 22 Feb 2025 10:35:22 +0000
asID: 61317
IP address blocks: 102.129.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 12:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2694 (0xa86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 24 10:35:22 2023 GMT
Not After : Feb 22 10:35:22 2025 GMT
Subject: CN=63f892ee-8c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4f:7d:ff:89:7c:a6:5c:d1:d0:0e:da:c0:1a:
c7:7b:31:79:63:c9:57:41:03:03:99:de:5a:8b:50:
69:ae:96:c7:49:a6:2d:49:6f:80:de:3d:3d:ec:fe:
d1:74:13:f7:26:15:b9:b7:71:30:83:a1:7e:db:87:
13:8f:36:23:be:f2:54:a3:6d:d6:59:03:c8:ad:99:
cb:49:97:fb:40:8a:6b:de:c5:ad:0d:e8:eb:e2:22:
89:bc:b3:9d:2e:e6:53:83:1e:8c:02:91:fc:6b:9f:
55:b2:00:40:da:7c:93:1d:f2:25:34:f9:ad:a0:75:
50:74:ac:89:d4:44:bc:62:2f:c3:2e:a8:69:74:8c:
c6:a3:8f:e3:b2:e1:6c:66:20:31:36:2a:9f:31:0f:
8f:0b:1c:25:2b:ed:ba:ef:f7:31:73:19:13:da:fa:
93:80:ce:be:9e:14:04:44:43:f2:b5:5d:db:e6:c5:
92:1a:df:e5:a4:b4:c5:04:db:ad:d8:45:1a:8c:a6:
ad:d8:33:5f:48:9d:71:a7:bd:37:09:42:54:96:8d:
da:50:20:aa:4c:25:03:ce:bf:7a:37:c4:8c:75:25:
4d:59:e9:d6:63:a6:87:dd:08:88:05:a5:4b:85:6f:
f6:ca:36:16:40:64:85:a2:bb:e1:b0:29:69:b7:ea:
80:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:63:2F:DB:F7:07:2F:04:68:E3:D1:B4:11:9D:AE:87:EE:16:49:86
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F3339E2CB42E11EDBE77F37FF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.220.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:4c:4e:75:6e:c1:1e:39:b4:e6:f4:fd:73:21:95:ef:f3:0e:
28:f4:e7:53:c4:e0:8a:72:d2:47:03:52:e9:04:7b:57:fe:17:
f8:e5:55:a8:a7:19:e4:b1:75:be:4a:a4:c1:60:47:f9:bc:49:
e5:22:1b:f4:5a:6e:44:c6:03:fc:56:0a:f2:2d:72:20:bc:f1:
b6:cd:53:09:21:b7:03:fb:57:7f:fd:9b:49:2d:80:2e:23:c1:
7d:58:4f:b5:ba:87:14:8b:94:50:9e:47:dd:38:0a:c1:44:0f:
c8:62:7d:e3:89:2a:0f:30:cf:bb:0e:89:45:46:a9:28:5c:c0:
d4:be:b2:22:81:c6:c3:32:08:91:4b:cc:93:36:b6:37:af:7a:
1a:85:3a:5f:0d:a2:a2:12:8d:86:b6:dc:c9:2a:bf:fc:56:c5:
d6:95:2b:c6:60:1c:af:63:67:65:0e:71:44:f8:92:ff:2e:4b:
33:5b:1b:02:04:4d:98:d8:68:31:3c:ba:5b:eb:b0:46:ac:9b:
24:e9:62:c3:0e:e7:47:74:2c:4f:a5:3d:16:14:89:2d:6e:05:
16:c2:c4:60:6f:53:ee:a6:f7:7a:53:60:5b:60:86:00:01:55:
2b:ab:ee:1b:73:84:9c:ef:98:9a:69:ca:38:f7:e3:9f:21:b3:
ee:3a:59:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 17:15:31 2024 by rpki-client on console-ams.rpki-client.org