Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F6320AB6654311EEB91CD98A4AD9E6FC.roa
File: F6320AB6654311EEB91CD98A4AD9E6FC.roa (raw, json)
Hash identifier: O/qBoksh+Xm6vXdF6wPgVQ0uh/oINejmygQm4RdqpwY=
Subject key identifier: 26:3B:EC:09:15:A0:24:CA:DF:B7:00:A7:87:CC:36:84:65:56:1D:52
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0DB4
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F6320AB6654311EEB91CD98A4AD9E6FC.roa
Signing time: Sat 07 Oct 2023 19:01:46 +0000
ROA not before: Sat 07 Oct 2023 19:01:43 +0000
ROA not after: Tue 22 Oct 2024 19:01:43 +0000
asID: 151592
IP address blocks: 102.129.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Nov 2023 11:18:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3508 (0xdb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 7 19:01:43 2023 GMT
Not After : Oct 22 19:01:43 2024 GMT
Subject: CN=6521ab1a-c68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f2:f8:5c:b8:5c:5f:2a:e6:6b:41:59:25:93:
64:78:7a:3d:7a:2d:8d:26:02:60:b2:87:53:3c:cd:
2c:18:ee:6b:8e:61:24:8d:e6:ef:ef:6f:32:94:d9:
21:19:e0:53:5e:d5:7a:4c:d9:0b:34:3a:74:fc:f4:
41:a3:dc:82:59:f6:fd:d5:d2:90:20:63:de:f3:68:
f7:dc:55:b2:5a:97:56:f7:04:a3:3b:01:21:33:0b:
36:f8:24:83:12:6e:e7:87:c6:55:e5:e4:92:63:45:
ae:56:bc:9e:51:4b:c2:7b:b3:dc:e0:47:bc:30:40:
bd:a4:75:74:3d:dd:a7:fb:c0:1d:ed:a3:a8:ea:8f:
97:25:7e:ae:f2:7f:50:79:ad:9c:15:ac:21:c0:42:
0f:f0:23:74:d1:60:02:0c:91:45:92:4b:dc:82:16:
c6:83:d8:fa:82:ed:6a:ae:ba:d2:d0:84:e8:9f:cc:
a5:bd:74:4c:ca:2e:fe:22:98:71:42:91:cf:ba:26:
94:3e:86:af:0c:a0:54:4d:b4:31:f2:68:73:f4:6b:
83:b8:fd:4b:29:b0:96:63:e4:c8:8b:31:d6:96:6e:
8f:17:4b:54:47:ee:9b:e7:f9:4b:d0:cb:af:13:7c:
a7:84:f8:b2:87:25:2b:db:61:29:2e:14:fd:6b:39:
59:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3B:EC:09:15:A0:24:CA:DF:B7:00:A7:87:CC:36:84:65:56:1D:52
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F6320AB6654311EEB91CD98A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.225.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:49:1c:28:e1:52:76:25:c0:c9:bf:4c:2a:2a:40:7a:58:b5:
30:5f:28:d4:7d:09:db:d8:9f:2a:a7:93:fb:0c:6c:3d:a2:d1:
4a:13:6b:1a:eb:56:fe:ac:c9:4c:5e:d2:74:7f:8e:5e:28:6a:
ea:6a:b8:03:40:e4:66:0c:57:80:78:72:a0:37:19:62:08:1a:
31:a1:99:dc:6b:17:a9:17:97:21:24:a4:9e:b2:a4:f8:95:8a:
65:95:43:b1:33:fb:de:40:b1:b3:31:6f:0f:df:ce:5a:e5:4e:
f6:c8:ba:6c:f6:18:ed:74:62:be:ed:45:1c:0a:2e:65:0d:fc:
f3:9c:c3:c8:4b:4f:ce:17:0d:8f:76:bb:32:de:7d:95:00:89:
59:ee:c2:3c:69:8f:9f:90:15:7f:12:27:65:47:08:28:66:c0:
a5:a5:22:25:f2:17:50:1c:e4:08:31:9b:29:8b:6b:56:c4:f0:
4a:46:ba:1d:c7:2c:01:1a:35:36:86:f6:e1:93:55:53:3c:e0:
89:77:e8:c2:a5:9c:47:1d:ac:48:ce:e7:cf:5e:68:47:2b:c8:
0a:4e:81:d9:9c:07:31:20:f2:ef:d7:85:66:09:dc:fe:0d:7f:
29:dd:2f:87:01:6f:92:52:2d:72:73:98:d8:c3:5c:ea:88:03:
4f:c9:99:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org