Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CDA2D944F64A11ED8B7F42134AD9E6FC.roa
File: CDA2D944F64A11ED8B7F42134AD9E6FC.roa (raw, json)
Hash identifier: eksCOq4lpoWBTd5/g3umkXVy3B7CeovmyhBcNWl2h5A=
Subject key identifier: E3:2B:7A:20:1C:AF:FF:DE:1F:C2:85:49:46:A9:C8:7E:D5:E2:0D:35
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0B8A
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CDA2D944F64A11ED8B7F42134AD9E6FC.roa
Signing time: Fri 19 May 2023 13:41:06 +0000
ROA not before: Fri 19 May 2023 13:41:01 +0000
ROA not after: Sun 18 May 2025 13:41:01 +0000
asID: 1299
IP address blocks: 102.129.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 May 2023 14:04:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2954 (0xb8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 19 13:41:01 2023 GMT
Not After : May 18 13:41:01 2025 GMT
Subject: CN=64677c72-36d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1c:a2:b4:af:a8:a2:7b:b7:a8:a9:82:cf:76:
fe:ad:59:8c:f6:83:a0:4a:b2:f6:32:2e:fc:10:18:
41:09:77:3e:32:f5:36:94:77:f1:c9:9d:06:2f:35:
cf:10:38:dd:a3:61:03:96:30:c1:66:c2:a2:56:d0:
85:bb:16:62:85:57:92:ae:72:cb:d2:a9:5c:6d:d7:
e2:54:d0:04:3c:73:dd:9b:8a:63:24:08:da:dc:a7:
a1:c8:c0:bc:21:34:05:7c:d0:68:17:48:6f:35:cf:
94:9b:fa:bb:9a:b7:b9:7e:e1:9d:69:11:e8:78:e8:
c5:39:da:22:1a:a6:dc:1e:49:3a:e2:5b:18:a9:66:
6c:de:4f:c7:ed:5a:25:97:28:b6:e7:cd:ef:7d:dc:
b0:d0:d8:0d:98:30:ba:d1:09:71:d1:f3:d7:ea:cc:
90:27:c8:c2:7b:56:3f:d2:72:28:0c:2e:82:73:5e:
df:0a:d3:38:ab:40:c2:7a:40:d9:2e:5f:82:be:37:
93:59:e7:fd:c5:6f:6e:5b:92:13:7e:9b:ee:05:45:
24:74:25:58:6b:68:ff:ab:a1:4b:51:cd:88:2b:bb:
85:35:c0:34:dc:5c:ec:15:73:ca:8f:4d:07:25:8c:
28:53:5f:f8:81:05:41:64:6d:e7:ad:7c:62:2a:e5:
22:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2B:7A:20:1C:AF:FF:DE:1F:C2:85:49:46:A9:C8:7E:D5:E2:0D:35
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CDA2D944F64A11ED8B7F42134AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.167.0/24
Signature Algorithm: sha256WithRSAEncryption
85:bf:5b:9f:5f:79:8d:6e:35:92:cf:4f:f6:65:39:bc:cc:89:
51:69:82:49:80:d5:ea:8a:33:cf:d9:d1:0e:00:5c:2a:52:04:
6b:61:f9:90:a6:c5:fe:4f:05:3a:1e:59:9c:a5:73:09:1f:e7:
f1:0d:ed:f9:63:5b:05:c5:97:87:c8:21:47:93:ea:b6:a3:10:
0c:1c:3d:ed:27:26:3f:c5:2c:c5:f8:4b:71:34:57:3f:fa:b0:
66:9f:b2:33:91:67:46:d5:31:5e:ae:50:40:b0:86:58:93:ab:
64:e1:65:26:03:73:95:a5:40:05:f8:6a:98:f8:f2:22:3b:9b:
b5:f2:70:99:57:7c:f1:49:c9:fe:30:31:3e:00:c7:2a:1a:df:
bc:99:42:bf:86:4b:63:52:72:53:90:01:13:ca:c9:e2:c6:d6:
db:5d:d8:7b:0d:2a:84:1e:a2:91:e1:40:46:3b:3b:af:85:5d:
15:ca:33:29:82:04:ac:f8:5c:99:1d:71:93:41:bc:8d:79:a5:
4c:fe:42:21:45:b8:0f:5a:be:d4:98:ee:e5:12:0d:6c:63:f4:
62:2b:ae:c9:b2:f1:fc:aa:a6:a1:0f:dc:97:d6:16:1b:be:2b:
89:fb:1c:86:a8:47:0b:12:5c:49:ed:39:f1:74:77:d2:e6:fc:
c3:1d:00:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:35:19 2025 by rpki-client