Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/BECA1828F62D11EDACE6E53D4AD9E6FC.roa
File: BECA1828F62D11EDACE6E53D4AD9E6FC.roa (raw, json)
Hash identifier: Lz712tUK7t09wKgVayug8VbDkdtK2BUfLeOZcenQ3LI=
Subject key identifier: 21:26:8A:8F:0A:F8:9B:F6:4A:1D:13:5C:11:FA:7D:3A:B8:B8:3E:BC
Certificate issuer: /CN=F36D7FB7AF/serialNumber=A58A6D29114C881E005877279D95ABAA39EE141C
Certificate serial: 02
Authority key identifier: A5:8A:6D:29:11:4C:88:1E:00:58:77:27:9D:95:AB:AA:39:EE:14:1C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pYptKRFMiB4AWHcnnZWrqjnuFBw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/BECA1828F62D11EDACE6E53D4AD9E6FC.roa
Signing time: Fri 19 May 2023 10:13:05 +0000
ROA not before: Fri 19 May 2023 10:13:02 +0000
ROA not after: Thu 22 May 2025 10:13:02 +0000
asID: 328344
IP address blocks: 102.135.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Aug 2023 10:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D7FB7AF/serialNumber=A58A6D29114C881E005877279D95ABAA39EE141C
Validity
Not Before: May 19 10:13:02 2023 GMT
Not After : May 22 10:13:02 2025 GMT
Subject: CN=64674bb1-e1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e9:41:20:13:37:94:98:af:9b:fb:0e:d5:42:
03:41:55:4d:76:d2:5e:8e:d9:5f:5f:f0:0c:b2:61:
8c:29:ab:a6:88:07:c3:a1:1e:06:af:50:4a:0a:dc:
ea:f8:aa:ed:51:3c:61:55:31:1c:3d:27:ff:52:fd:
e3:17:52:12:39:b6:5d:11:4f:12:88:40:a5:c5:bc:
63:c6:7f:2f:50:6b:7c:90:20:f4:2d:7a:b2:b7:d1:
93:8f:43:4d:b4:b6:2f:e8:10:8a:f0:54:d1:6d:d2:
00:40:d6:ae:14:19:37:9b:a8:b8:32:03:c3:ee:22:
77:f3:ba:76:ce:8d:52:0a:66:63:c5:8e:a0:01:27:
36:9a:fe:c5:43:b3:1a:45:99:b1:34:c1:ff:1a:13:
83:bc:7d:3a:01:39:54:75:e7:fd:32:f8:fd:60:91:
99:93:6f:ad:76:d2:36:44:a0:d4:66:18:0b:49:90:
45:16:2d:65:44:05:05:46:17:8f:cc:f9:57:ff:ad:
8d:85:9f:93:96:36:a9:09:5c:df:5f:52:1e:44:b0:
72:d8:ef:1b:ff:70:a7:11:2e:0d:3f:7f:5d:c6:b1:
06:c4:0b:d2:66:c1:ce:8b:8d:01:21:48:5d:b0:a3:
95:31:ea:cf:3f:6f:4e:49:ae:0a:f7:69:c6:e2:61:
6f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:26:8A:8F:0A:F8:9B:F6:4A:1D:13:5C:11:FA:7D:3A:B8:B8:3E:BC
X509v3 Authority Key Identifier:
keyid:A5:8A:6D:29:11:4C:88:1E:00:58:77:27:9D:95:AB:AA:39:EE:14:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/pYptKRFMiB4AWHcnnZWrqjnuFBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pYptKRFMiB4AWHcnnZWrqjnuFBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/BECA1828F62D11EDACE6E53D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.181.0/24
Signature Algorithm: sha256WithRSAEncryption
88:09:1b:83:ba:fb:e9:91:23:2a:b5:77:2b:96:8c:64:98:57:
0c:c4:f3:80:17:5d:a8:b6:41:cd:ac:dd:ef:17:3e:e9:15:0e:
76:47:93:04:be:d5:06:d7:11:69:0f:eb:d4:84:80:4a:2f:18:
8f:59:f8:14:e7:e5:14:36:39:6e:e2:8b:63:a8:09:ec:1b:43:
10:5f:87:68:5e:88:c0:98:b1:8f:0b:20:e5:ab:81:81:ba:d3:
21:96:f4:8d:23:89:cd:82:6e:c9:3d:ff:0e:79:79:0d:b9:5d:
f0:55:2e:95:78:ec:c8:b3:d5:96:66:c1:97:b7:93:f8:b9:19:
bd:65:83:b0:28:02:90:f9:7b:7e:dc:e0:2a:ba:3a:b1:ad:e6:
26:d0:fb:8f:b9:29:9d:14:70:e6:24:18:68:69:c6:4b:d3:d4:
f7:f5:d7:cd:ed:b7:34:be:f2:bf:42:4f:4f:33:45:34:c9:14:
b7:c9:65:03:17:f3:4d:44:b5:aa:29:56:4b:9f:fe:97:2b:db:
c1:ec:36:68:3c:65:2d:8d:54:12:04:c5:ec:24:29:0f:04:64:
80:1d:9d:59:48:50:d5:ff:08:15:01:8e:90:de:f7:ef:ed:ba:
72:00:3d:a7:c6:6e:27:29:66:62:d2:17:89:c1:41:17:9e:1e:
ef:f5:5e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org