Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FC873E74FB9311EC8B30299DF1222468.roa
File: FC873E74FB9311EC8B30299DF1222468.roa (raw, json)
Hash identifier: tIgEuUrjy1eNphRkOeenfKh4LUHRwMS+GVTNZYX0+sU=
Subject key identifier: DC:67:8B:29:EB:B5:9B:EF:31:F2:E0:99:9D:BA:EF:E1:A0:7B:F2:2B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0705
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FC873E74FB9311EC8B30299DF1222468.roa
Signing time: Mon 04 Jul 2022 12:22:36 +0000
ROA not before: Mon 04 Jul 2022 12:22:32 +0000
ROA not after: Thu 04 Jul 2024 12:22:32 +0000
asID: 40676
IP address blocks: 102.129.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Aug 2023 08:39:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1797 (0x705)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 4 12:22:32 2022 GMT
Not After : Jul 4 12:22:32 2024 GMT
Subject: CN=62c2db8c-acb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e3:4f:d1:2a:c6:c1:72:5d:70:59:a8:ab:ad:
39:29:54:c1:71:ea:7a:c6:bc:01:c5:76:4b:41:05:
7f:9e:08:6e:50:c8:da:9e:dc:43:02:bf:6d:8f:c3:
4f:8e:02:f5:4a:c0:f3:6c:03:1a:5e:1c:e5:2f:31:
f8:64:89:35:df:bb:5b:af:af:3e:af:f2:14:95:ec:
e8:44:96:10:92:62:95:cd:3a:e4:82:af:5c:29:3b:
05:ff:44:7e:19:21:ab:d8:7c:1c:07:f1:98:c9:19:
d5:bf:9f:26:d7:6a:ea:58:ea:b4:a1:45:3d:b2:22:
2b:08:7d:7a:54:10:4c:96:aa:8c:0c:6f:75:78:86:
8f:09:4c:a4:58:49:d1:52:ea:de:ec:b7:03:eb:82:
73:c0:40:99:d6:df:96:f3:6a:bd:54:77:2b:db:03:
45:be:96:70:99:0c:2c:48:f3:18:7e:1a:b9:21:a9:
e6:0e:91:fe:86:0c:5d:60:1b:9c:3c:d4:b4:70:23:
f1:4c:e8:c5:96:6f:a7:b4:45:33:e9:2f:c7:fd:2c:
00:cc:26:a9:2b:3a:b9:f6:e2:0b:61:fd:98:d2:cb:
61:d7:eb:65:6c:68:1e:dc:da:0d:3b:aa:9c:1c:0d:
46:50:f1:a7:05:c6:a9:fb:96:da:24:0e:2d:cd:9c:
4a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:67:8B:29:EB:B5:9B:EF:31:F2:E0:99:9D:BA:EF:E1:A0:7B:F2:2B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FC873E74FB9311EC8B30299DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.163.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:11:27:74:7e:ce:e6:09:f7:86:8f:4b:c9:6a:dc:95:a0:25:
3e:3d:89:cd:bd:88:3a:36:b6:24:13:1e:c3:71:ab:c2:f9:be:
54:7c:f5:cd:bb:6b:15:2c:74:6b:ae:a6:87:8e:c4:0a:5d:b3:
60:11:4b:f0:46:2f:1d:df:2d:28:46:ad:14:b9:9d:3d:20:0e:
a7:e9:7f:2b:13:d1:81:61:98:2e:f4:20:8e:8b:1c:86:b8:67:
91:93:28:80:b3:ad:7b:63:67:52:5a:c6:9d:d4:ef:d6:c6:29:
c6:b0:f0:f4:2a:2f:f9:70:d6:6b:40:dd:49:6d:c1:0d:3b:13:
00:db:3a:0c:c5:a3:e8:94:72:86:a5:3d:16:4a:14:31:9f:0e:
26:f2:c1:fe:ae:70:ee:fe:82:ab:30:a3:22:de:6a:2e:ad:52:
21:ba:e8:b1:65:42:9e:d0:91:ca:3e:47:4c:41:ef:61:81:e7:
51:2c:f4:8c:19:b7:0c:2a:6b:74:51:4d:a7:97:14:fc:d2:f8:
5d:d0:8a:35:11:49:14:ec:9f:cf:42:88:f2:3e:34:fb:bd:18:
d2:b1:62:88:74:4e:d5:46:09:02:3c:74:78:ac:97:45:75:c7:
b9:3e:6f:a9:11:12:b2:85:d6:e5:4e:f2:10:ed:de:9e:ed:83:
e4:5d:5c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:40 2024 by rpki-client on console-ams.rpki-client.org