Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F60A5C2CDADD11EE8F89714C775412E6.roa
File: F60A5C2CDADD11EE8F89714C775412E6.roa (raw, json)
Hash identifier: IRac6rSw27f2qG83WOD4fYzFNKnsRBnsub0KwiANCek=
Subject key identifier: 96:8C:D9:76:8B:0D:AB:15:A4:00:18:3D:40:7F:C4:AE:6E:4F:42:3C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0FA5
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F60A5C2CDADD11EE8F89714C775412E6.roa
Signing time: Tue 05 Mar 2024 10:48:55 +0000
ROA not before: Tue 05 Mar 2024 10:48:51 +0000
ROA not after: Thu 05 Mar 2026 10:48:51 +0000
asID: 23470
IP address blocks: 102.129.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Apr 2024 12:34:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4005 (0xfa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 5 10:48:51 2024 GMT
Not After : Mar 5 10:48:51 2026 GMT
Subject: CN=65e6f896-0d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0b:1f:fb:d2:84:d6:71:8d:be:31:d3:89:42:
40:2a:a4:36:19:04:a3:61:d0:2d:1b:b0:6f:9f:fd:
51:00:53:61:9e:1a:22:95:95:54:0d:d6:8a:fb:51:
62:1b:a4:6f:64:9d:bc:61:ed:17:83:84:17:d8:a2:
c0:79:d2:7d:3d:ab:d3:d3:b0:89:3f:57:31:b6:33:
fa:e1:5a:01:48:42:d1:ee:c7:e0:f0:20:f7:94:f9:
c4:d7:a0:25:26:14:33:b6:55:14:4c:19:ed:15:a4:
f3:44:42:01:16:e4:91:d5:83:1b:42:5a:ae:b5:4a:
71:d2:95:66:ac:f0:2c:c5:ca:d6:76:7d:9a:ae:bc:
cc:76:79:2e:60:a5:91:f5:4a:ad:d3:d9:c5:f5:10:
ff:d4:ee:af:27:b1:7c:94:94:02:90:28:3d:53:1a:
3d:a1:d3:c1:a0:54:11:4d:16:20:67:1f:b2:ac:8a:
6d:fd:cb:64:41:4a:a0:89:a2:ed:9e:6a:33:ab:9e:
88:77:b6:c1:1a:a1:73:aa:1a:d3:d3:21:63:31:e1:
d6:b9:b7:1b:d2:6a:53:e9:dc:e7:44:07:c2:2e:65:
51:8b:8b:19:90:99:25:f8:09:ed:2d:30:96:c1:6c:
bd:3e:de:33:97:e6:cd:a4:50:68:df:f7:d8:4e:62:
23:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8C:D9:76:8B:0D:AB:15:A4:00:18:3D:40:7F:C4:AE:6E:4F:42:3C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F60A5C2CDADD11EE8F89714C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.199.0/24
Signature Algorithm: sha256WithRSAEncryption
99:b1:78:cb:78:87:46:66:ac:b5:a3:46:24:25:c8:50:c9:55:
8b:c2:00:b1:9a:9f:da:95:7e:e7:3c:4b:a6:5e:63:c8:e4:29:
09:55:64:3e:85:b0:c4:20:ff:02:6f:26:f2:01:f4:e9:be:1c:
1e:a8:cc:a1:5a:b2:1f:76:ce:81:81:76:6e:b8:f3:16:4c:cc:
79:11:db:3c:d4:46:39:97:5c:ed:ef:57:9e:04:6e:5a:33:e7:
c1:25:6e:b4:f9:a0:cb:aa:d2:95:0d:dd:8f:49:e7:2b:78:de:
d3:43:8a:7f:90:02:45:47:31:a8:6d:27:ad:50:85:85:03:fa:
09:70:3f:72:e3:7e:57:80:c1:df:02:f9:a8:26:f0:e8:2a:ef:
b3:35:d3:44:1d:f1:34:e9:ba:8c:b9:87:24:69:57:d0:4c:fa:
a3:f1:1e:09:14:a0:17:7f:0b:88:c9:e4:b7:1b:d9:9e:d1:24:
1b:37:e6:28:bb:a5:81:ef:0f:72:ba:fd:a6:5c:08:9f:3c:8f:
fc:fc:4f:91:a4:7d:05:4d:ac:c5:a9:3a:f4:93:f2:a3:7d:c7:
3d:09:c3:ee:5b:3e:16:3b:ad:c0:a7:37:39:c8:fa:85:ca:76:
2b:4e:bb:c6:bf:74:b3:0d:bc:2f:47:63:5b:3b:d7:04:ac:fb:
02:16:e2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 16:53:36 2024 by rpki-client on console-fra.rpki-client.org