Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F4FF8A406BEE11EEB321F1544AD9E6FC.roa
File: F4FF8A406BEE11EEB321F1544AD9E6FC.roa (raw, json)
Hash identifier: XcrpsvSK+QjdjAj42bOv5YvBsChY4sVn4ubsjn3wZvE=
Subject key identifier: 33:6B:5F:0C:53:A6:D5:65:8E:82:5F:26:38:F4:DF:86:56:19:A9:92
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0DE4
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F4FF8A406BEE11EEB321F1544AD9E6FC.roa
Signing time: Mon 16 Oct 2023 06:40:55 +0000
ROA not before: Mon 16 Oct 2023 06:40:52 +0000
ROA not after: Wed 16 Oct 2024 06:40:52 +0000
asID: 62240
IP address blocks: 102.129.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Dec 2023 12:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3556 (0xde4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 16 06:40:52 2023 GMT
Not After : Oct 16 06:40:52 2024 GMT
Subject: CN=652cdaf7-c12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:28:1c:4f:89:1f:3b:57:32:5c:de:12:8e:e2:
40:05:08:ae:46:08:c4:68:95:bb:38:59:2f:ee:45:
36:07:c5:ca:de:e1:5b:9e:d0:09:7f:28:f7:0f:51:
74:44:92:c8:b7:62:be:83:9e:13:cb:0b:1b:6f:fc:
9a:93:80:d4:63:17:18:e6:e1:8e:b2:82:30:8b:1b:
3f:11:bb:2c:53:95:b7:a6:3a:02:1b:5e:8c:a3:4b:
a0:63:c6:37:fc:7f:44:26:df:58:fa:83:2a:17:b0:
35:bf:03:e1:e1:9a:ef:0a:6c:09:3d:ac:c5:17:fc:
7a:54:7b:cb:ef:d5:3c:d2:59:df:7e:c2:74:e3:c3:
0b:76:61:9a:8b:a6:30:38:81:0c:c9:b7:76:63:0e:
aa:8b:0a:ed:4b:70:ad:fe:22:6f:56:4b:cc:8e:ee:
05:1b:3d:75:9e:25:c6:61:9d:b9:7e:74:05:18:07:
f1:6c:45:23:c5:37:8a:46:f1:ca:46:41:5e:92:df:
b5:d7:c1:53:42:1b:26:99:9f:ff:d4:dc:32:46:39:
a9:cf:dd:9f:3d:dd:7b:6c:af:51:1f:2b:b6:09:05:
85:d8:d0:fb:7a:74:a5:20:f1:c9:cf:15:db:f2:8a:
cc:ac:a0:a8:61:fb:bf:8e:cc:24:82:bc:47:83:fb:
53:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6B:5F:0C:53:A6:D5:65:8E:82:5F:26:38:F4:DF:86:56:19:A9:92
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F4FF8A406BEE11EEB321F1544AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.217.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:fe:9e:8b:7c:0a:82:ff:bc:b2:99:a4:82:67:0b:62:d2:8b:
a1:94:86:12:4c:af:f6:d8:6d:f4:fe:35:13:5e:f3:db:e1:dc:
d8:e0:af:ef:87:d3:e5:7c:60:15:e4:ac:f5:15:4c:14:56:7e:
3c:76:ba:2a:43:4c:04:9b:3c:2b:f8:65:fc:7d:22:44:68:8c:
b0:70:b1:46:30:d4:6a:77:f4:42:3f:83:24:9f:1f:be:20:97:
72:bf:b1:7e:2e:62:6e:0a:79:b8:1e:ff:88:07:b2:f1:24:34:
5a:58:b7:69:26:b4:1b:8c:c8:9d:6c:83:39:33:4e:57:f8:2d:
b4:6a:2f:31:7a:a1:4b:df:7d:15:d7:ed:d8:28:53:69:09:83:
5f:ed:dc:3c:81:da:96:72:6b:6d:6d:72:8c:a5:f7:35:d3:fc:
b7:30:5b:c6:70:93:b3:f6:5d:48:8d:5f:b0:7e:69:d5:30:41:
3a:c9:ad:85:ba:04:fc:90:ee:05:8b:b8:c9:e4:45:c9:87:5e:
4b:19:19:16:d2:8a:a4:ae:d4:66:c5:73:a3:d7:d5:9a:c2:fc:
77:e2:14:40:a4:05:57:cf:71:12:0e:b6:d5:83:3c:b2:46:42:
9c:7e:97:95:4d:88:fc:43:8b:b0:07:f4:62:7c:dd:d8:76:e4:
12:c1:b0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:40 2024 by rpki-client on console-ams.rpki-client.org