Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F78E8B02B52811EEB3D7B976775412E6.roa
File: F78E8B02B52811EEB3D7B976775412E6.roa (raw, json)
Hash identifier: oJF9xwKr8bW/SQG/Xk8aDtgRgwWXzyXmbaSE6ejmD28=
Subject key identifier: A3:0B:E4:E2:0F:3C:29:7B:EA:00:D6:D5:6C:69:30:84:2C:B4:2C:B6
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0F05
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F78E8B02B52811EEB3D7B976775412E6.roa
Signing time: Wed 17 Jan 2024 11:10:05 +0000
ROA not before: Wed 17 Jan 2024 11:10:02 +0000
ROA not after: Sat 17 Jan 2026 11:10:02 +0000
asID: 26042
IP address blocks: 102.129.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jan 2024 11:44:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3845 (0xf05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 17 11:10:02 2024 GMT
Not After : Jan 17 11:10:02 2026 GMT
Subject: CN=65a7b58d-aa8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:91:f6:12:a8:84:f7:be:38:a2:47:3d:42:
ea:4e:47:9c:92:4f:47:c1:1a:8d:d9:78:4c:e3:cb:
a8:c4:e9:6d:1e:da:8d:0e:2b:18:09:fe:a8:d2:7f:
e6:4f:39:77:65:89:74:7d:57:01:b4:01:66:df:98:
a0:bb:a3:68:74:b5:48:5b:1f:c3:79:c2:4a:8f:35:
3c:f4:a4:e7:af:67:9e:0d:a7:de:c5:bf:ed:ba:3e:
24:4f:94:a5:18:93:f7:36:7d:e6:bb:c7:b9:ae:de:
59:ea:c1:19:cf:a5:b8:b3:60:02:58:73:86:5a:b5:
79:d6:9d:f9:45:84:a9:16:dd:d3:2a:b5:53:de:3b:
e7:a2:2e:ae:99:89:75:4d:24:32:36:d0:6f:c7:70:
b5:45:b5:a0:90:ce:7e:d4:31:11:bf:7d:c1:c3:0e:
a7:d2:c6:97:dd:98:8d:dd:e9:75:da:1b:09:61:f5:
d9:23:a2:a0:6b:54:35:41:23:4c:48:9f:29:d7:bc:
46:bd:8b:1f:f9:a1:92:e0:1e:e7:5c:0f:b4:91:26:
66:f0:6d:85:8d:01:e9:d4:25:7c:d2:bb:ac:0b:60:
c4:bf:a0:a1:52:4f:03:94:89:49:b2:0e:dc:73:a5:
f0:7c:19:15:e5:2d:1f:72:51:64:d0:15:9d:43:03:
60:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0B:E4:E2:0F:3C:29:7B:EA:00:D6:D5:6C:69:30:84:2C:B4:2C:B6
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F78E8B02B52811EEB3D7B976775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.246.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:66:42:a2:97:70:1b:57:4e:8c:20:78:c9:71:2b:13:26:dc:
a4:21:d8:76:3f:cc:8d:ae:b8:b8:66:48:3f:e7:f3:80:47:fb:
5e:d8:6e:42:3a:76:73:2f:42:e1:29:78:a9:04:d8:da:e7:7b:
57:28:b5:21:cf:8a:9b:38:43:63:fe:8d:e2:79:d7:c8:7b:74:
7f:cf:c5:b7:b6:34:4f:6e:89:15:40:37:c5:a0:6c:dc:cb:04:
a6:d9:7e:91:5a:f5:f7:79:94:d3:07:4c:4b:1b:ea:96:d0:91:
36:25:78:30:8d:0c:cf:05:28:cb:02:a4:53:72:ea:ae:69:6e:
1f:51:bc:7d:db:36:26:3b:70:ec:cb:cb:d6:e1:23:e2:92:20:
28:9f:f5:9a:f3:23:f7:2b:2e:1c:c0:09:23:22:5b:4d:0b:b1:
43:88:54:97:0b:71:75:4c:46:07:ee:b8:27:7a:27:d5:3c:01:
d0:e0:47:3c:bd:4a:cf:04:3c:71:ac:f1:58:29:5a:50:14:a5:
90:1a:5f:3a:78:40:85:e1:c5:a5:f2:50:50:34:c1:a5:3a:72:
c7:cb:9f:e2:30:25:5b:11:db:50:5d:5b:d8:f7:2e:c4:4f:2a:
d8:5d:39:9b:e2:df:d6:13:32:f3:db:31:dc:d9:29:c8:7a:2e:
68:78:34:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 26 15:52:01 2024 by rpki-client on console-ams.rpki-client.org