Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F7A401B83A9211EF954FB2A1762E951A.roa
File: F7A401B83A9211EF954FB2A1762E951A.roa (raw, json)
Hash identifier: Uklo10oIJ+/EaeaTjOk1SRkv9/hbVrRD62lcvsXEFB8=
Subject key identifier: 19:FE:54:3D:B6:48:31:74:92:EE:CF:B2:A7:C0:C0:F8:C6:8F:FD:A8
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1142
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F7A401B83A9211EF954FB2A1762E951A.roa
Signing time: Fri 05 Jul 2024 05:53:57 +0000
ROA not before: Fri 05 Jul 2024 05:53:53 +0000
ROA not after: Sun 05 Jul 2026 05:53:53 +0000
asID: 834
IP address blocks: 102.129.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jul 2024 06:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4418 (0x1142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 5 05:53:53 2024 GMT
Not After : Jul 5 05:53:53 2026 GMT
Subject: CN=66878a75-ad4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1e:b1:13:56:f7:e4:05:51:3d:29:7d:59:0f:
b5:79:63:a8:d5:13:68:eb:16:46:8a:e5:28:1c:c9:
aa:9b:eb:7c:68:cf:68:0b:56:ec:8a:a4:a5:e6:2a:
de:76:1c:bd:77:2f:65:90:ef:34:31:48:01:0b:7f:
29:15:08:60:8a:ba:31:16:95:65:72:8c:50:df:fa:
30:83:f8:53:3a:07:d6:8a:be:b3:72:9f:55:53:93:
95:b6:4b:1c:9d:05:98:c9:be:0e:80:e7:a0:06:72:
5c:d4:7d:5f:ce:66:ad:ca:b5:d1:ed:b9:99:af:7c:
02:b4:92:bc:f8:4b:ee:2a:b6:ca:e4:77:22:72:15:
9e:c0:87:33:34:b4:8e:f5:23:7f:93:60:fa:7b:18:
ff:1e:dd:d6:a7:90:fb:b3:c7:1f:ec:c5:12:d7:1c:
b1:19:13:d6:cf:a9:32:ef:42:75:b6:34:f8:6b:8a:
52:19:f2:87:e0:64:68:de:6c:d6:11:c1:42:0f:ec:
db:f5:6d:1a:3d:a9:6a:fd:fa:a8:0f:f1:3a:82:78:
79:71:74:d0:06:4b:cb:b0:27:20:6a:9e:71:95:67:
15:0c:de:69:33:7d:6d:66:f5:39:72:09:6d:87:83:
f3:fc:92:9d:6c:e6:33:7a:44:a7:47:81:a0:d0:d0:
66:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FE:54:3D:B6:48:31:74:92:EE:CF:B2:A7:C0:C0:F8:C6:8F:FD:A8
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F7A401B83A9211EF954FB2A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.166.0/24
Signature Algorithm: sha256WithRSAEncryption
35:1d:53:5f:5d:10:21:fc:d1:55:b0:83:80:05:2f:64:06:26:
65:e9:16:e3:5a:6c:22:09:62:80:4d:7c:1a:3e:a8:e0:92:98:
cd:22:e4:9a:50:40:c9:a1:b5:42:41:b5:2b:25:de:d5:a4:3c:
f1:7b:4b:63:88:46:9f:37:2e:0a:e5:74:f3:c6:c9:60:12:d0:
49:6c:17:97:2a:75:06:e6:94:b1:25:a9:09:e7:3f:5f:8b:21:
e7:35:5c:9e:6b:6a:61:ee:9b:0a:89:2f:19:05:98:66:3c:b3:
e9:d2:63:ba:0e:8a:ba:57:58:51:6d:97:0a:d8:81:37:f9:26:
12:2c:6a:08:38:31:aa:ff:66:e3:18:38:4f:4a:ce:1e:a0:e2:
d0:0a:f3:e0:8e:0a:e3:f1:3c:1e:d9:44:7e:76:81:34:77:39:
77:65:8c:ed:dc:6d:cf:6b:7f:ce:87:91:da:f0:d0:c0:ee:60:
7d:16:72:ed:c6:52:62:dc:99:0c:6f:7d:1c:27:95:b4:57:a4:
3c:d5:db:50:69:71:f3:88:a5:68:09:66:cf:fc:62:3c:10:6b:
f3:8e:86:b1:d0:d8:a3:e0:3f:8f:87:d3:98:cd:4c:77:e5:09:
e1:66:71:c9:60:aa:5a:88:d4:f8:2e:9f:d1:df:09:a0:a3:8b:
a3:18:1f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 08:08:13 2024 by rpki-client on console-fra.rpki-client.org