Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FFE56618F92C11EC9FAF19FAF1222468.roa
File: FFE56618F92C11EC9FAF19FAF1222468.roa (raw, json)
Hash identifier: FBEjKv773vuU9UozrrJa3jD8HfA9ePzZ5xslhfmNOuQ=
Subject key identifier: 4C:61:B5:98:C0:C5:C6:89:3D:09:0C:76:A5:BF:B6:C9:73:4C:05:58
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 06D0
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FFE56618F92C11EC9FAF19FAF1222468.roa
Signing time: Fri 01 Jul 2022 11:00:21 +0000
ROA not before: Fri 01 Jul 2022 11:00:17 +0000
ROA not after: Mon 01 Jul 2024 11:00:17 +0000
asID: 209181
IP address blocks: 102.129.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Jun 2024 11:07:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1744 (0x6d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 1 11:00:17 2022 GMT
Not After : Jul 1 11:00:17 2024 GMT
Subject: CN=62bed3c5-776a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:85:d3:9f:52:65:b5:9c:15:92:8b:da:7f:ea:
dd:4b:ce:b9:00:51:30:b9:e9:6a:27:19:98:46:44:
cc:05:d0:35:db:6d:2d:7e:b4:1b:25:4d:ef:56:c6:
c3:14:9e:94:cc:59:7e:68:be:62:4b:fa:19:9b:ee:
78:5f:15:26:44:2c:5e:5f:bf:38:22:76:4b:9a:c7:
a0:af:db:17:57:c0:1a:37:18:23:fd:08:19:81:05:
a4:c0:56:36:75:66:ea:e5:69:4a:1b:05:7f:18:f4:
b4:92:e6:66:4d:f6:9d:fd:08:c4:5c:f5:8c:cd:01:
fa:6f:31:c0:3a:e0:46:11:d0:d5:53:79:7d:a4:f8:
10:80:d7:43:87:0c:9a:e4:6a:c1:43:be:39:49:cf:
a6:71:2e:5e:4a:97:f4:49:8f:a4:60:88:67:bf:7d:
f2:6f:b1:67:8f:a4:04:94:7c:4b:b4:54:26:41:ed:
11:e0:cb:44:ca:22:75:fb:ad:dc:41:f6:b4:38:80:
ab:6f:b2:d7:84:f8:5e:80:de:c5:61:4e:b9:8e:50:
d5:c5:5e:3a:61:a6:49:30:9a:da:b7:83:a6:e8:08:
7e:3d:fc:63:8e:18:b9:3e:57:26:d8:19:0c:12:bf:
29:09:67:28:3b:72:5e:10:30:fa:8b:ce:de:36:25:
18:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:61:B5:98:C0:C5:C6:89:3D:09:0C:76:A5:BF:B6:C9:73:4C:05:58
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FFE56618F92C11EC9FAF19FAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.253.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:da:e4:66:ff:a2:f0:fa:ba:2b:4b:21:d6:2c:70:b7:32:78:
91:0e:81:59:11:8d:f7:95:6d:d9:ef:e2:ca:10:be:91:9e:d8:
00:36:e0:94:bb:51:0e:ae:cd:ba:fc:d7:a2:b3:c7:c3:84:5b:
40:64:0d:3e:87:6b:fb:a3:cb:6c:e0:1e:23:bb:aa:a3:b2:c5:
e8:26:68:56:af:41:30:98:d8:9b:d0:b3:0a:64:60:34:c7:c6:
55:47:93:8e:75:86:85:c0:24:af:18:32:11:24:69:e6:79:97:
55:0d:00:0b:a7:73:b7:e5:3e:e8:e2:08:14:90:fe:32:13:d8:
34:35:85:8d:83:9f:3b:23:aa:ca:22:2a:26:71:f5:4a:6b:ee:
11:a8:d7:05:2d:f5:f9:7b:47:4c:a0:e8:3c:8e:af:a3:d5:cc:
84:95:3f:86:b8:1a:e7:79:bf:f2:cb:49:5f:58:a8:47:18:94:
43:78:1e:4a:33:f9:85:4a:f8:a9:45:d9:4f:75:25:0e:ec:d2:
4c:51:3c:66:63:7e:e1:97:b0:dd:06:f5:99:72:40:77:0a:4e:
27:61:60:44:8a:09:08:43:44:ed:f1:c8:98:89:48:42:48:aa:
e9:6c:7e:f5:67:7c:83:28:7c:7a:b3:43:7e:7e:6a:86:0a:4a:
6c:dd:2f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 13:19:40 2024 by rpki-client on console-ams.rpki-client.org