Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FFDA343EA64511EDB68FA4E1F1222468.roa
File: FFDA343EA64511EDB68FA4E1F1222468.roa (raw, json)
Hash identifier: Zidqacp3ytnXcanKNY7W+/XRtd3WiqckCbf9abg8ioY=
Subject key identifier: CC:A2:A3:E6:C3:4E:00:8F:D4:C1:9F:54:CC:81:7C:7E:08:48:58:DF
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A09
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FFDA343EA64511EDB68FA4E1F1222468.roa
Signing time: Mon 06 Feb 2023 17:45:10 +0000
ROA not before: Mon 06 Feb 2023 17:45:04 +0000
ROA not after: Tue 06 Feb 2024 17:45:04 +0000
asID: 212669
IP address blocks: 102.129.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 12:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2569 (0xa09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 6 17:45:04 2023 GMT
Not After : Feb 6 17:45:04 2024 GMT
Subject: CN=63e13ca6-fe3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:11:d2:54:41:e0:ca:0c:9f:ae:0c:6c:29:63:
3e:26:78:31:d2:21:c1:36:27:53:17:d2:6a:1d:17:
6f:41:a3:11:7c:20:d0:9e:60:0e:fd:d2:22:27:b5:
62:d7:e4:9d:30:f8:da:da:8a:a7:59:58:9a:9a:b6:
c1:7e:72:e1:24:f7:6d:37:75:1e:ce:42:92:b1:6d:
93:1e:bc:95:5d:03:0e:e8:0e:d2:c0:33:35:3e:a0:
33:99:6e:b9:03:e8:40:c3:7f:96:84:3e:57:e0:8f:
c0:b0:bc:51:6b:ca:2c:6a:12:33:a8:ff:e6:cf:c5:
13:d9:43:df:ab:e1:02:27:40:37:61:8b:9e:b5:bb:
4f:34:03:a3:c8:f5:1c:3b:e4:5c:3f:0a:1b:d3:2b:
ce:42:9a:2a:46:58:5b:43:c1:55:21:1b:d7:94:06:
c5:2f:02:d4:a4:27:44:4d:d1:5d:a9:99:ee:81:df:
40:f6:ce:de:1d:2b:28:06:7c:db:2c:52:ff:01:70:
89:cb:1f:f4:9d:82:fa:38:f8:71:35:14:a7:a3:14:
df:77:8a:2d:f8:71:e7:73:ed:d4:b6:8f:27:f8:b1:
3f:fb:ea:db:d8:85:94:df:dc:44:c3:85:8a:e2:48:
4d:39:bf:2d:cc:a6:2b:5d:52:4c:6b:26:e5:d2:ae:
3b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A2:A3:E6:C3:4E:00:8F:D4:C1:9F:54:CC:81:7C:7E:08:48:58:DF
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FFDA343EA64511EDB68FA4E1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.149.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:5f:ee:d1:b5:b0:66:78:d3:91:72:77:65:39:13:20:d1:76:
c5:33:28:4a:5c:a0:e1:19:1d:d8:25:bb:ab:7b:81:06:9e:1e:
f0:a9:45:e9:49:ce:d9:8f:e2:8f:67:d6:22:fb:ea:10:07:fd:
0a:27:43:bb:16:ae:50:52:0a:96:ee:d4:7e:19:6b:4b:d5:4c:
72:5d:62:8a:74:98:b4:e8:36:13:12:57:42:67:bb:4d:d3:eb:
9d:ca:ae:51:da:0e:06:d2:e8:51:4e:ff:af:37:e0:0c:32:42:
63:34:8a:91:a8:e7:00:c1:d5:1e:5f:a2:6a:f2:b4:13:71:02:
06:c0:47:5a:bc:98:c6:06:e3:b2:1e:37:a9:0b:a1:56:f9:0d:
59:20:d6:38:34:83:42:65:a1:f6:cf:a2:eb:d5:fb:c7:c4:15:
33:54:3d:e3:c2:1c:3e:83:67:31:79:24:34:ac:c3:6d:5b:8f:
bf:55:74:36:1f:91:3d:de:e0:95:95:09:78:2c:9d:f3:3a:dd:
81:f7:d5:6d:ec:67:c1:aa:e8:9f:19:8f:f7:d3:ff:42:d6:4c:
c9:bc:0c:eb:24:88:87:3a:09:09:04:10:07:69:54:36:76:b6:
b2:67:a4:94:62:ad:6d:47:92:0c:14:97:2e:74:bd:24:08:03:
d2:aa:b2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 16:10:59 2024 by rpki-client on console-fra.rpki-client.org