Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2348AC78E85E11EF88F8C670762E951A.roa
File: 2348AC78E85E11EF88F8C670762E951A.roa (raw, json)
Hash identifier: 774SJEubWhmmLElwVne/u55C/f5hCLBWdtg5dpAml70=
Subject key identifier: 6D:21:50:0A:50:F1:46:81:17:11:F8:8A:45:8F:6E:AB:51:F5:D2:04
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 13B1
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2348AC78E85E11EF88F8C670762E951A.roa
Signing time: Tue 11 Feb 2025 09:54:09 +0000
ROA not before: Tue 11 Feb 2025 09:54:05 +0000
ROA not after: Sat 13 Feb 2027 09:54:05 +0000
asID: 61317
IP address blocks: 102.129.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 09:55:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5041 (0x13b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 11 09:54:05 2025 GMT
Not After : Feb 13 09:54:05 2027 GMT
Subject: CN=67ab1e41-c5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1e:05:56:0d:ea:13:96:45:f7:69:cc:f0:9d:
cb:0b:b2:1f:a0:d7:b8:06:a3:59:4e:03:04:1c:a0:
89:d2:41:24:cb:e4:83:0d:33:2e:db:25:6c:50:e6:
7c:38:7a:54:04:d2:e9:53:8f:64:3f:9b:b2:8e:64:
5d:8a:9f:72:3e:8b:2c:76:08:62:38:7b:b1:fa:14:
e8:41:c2:2f:bc:ec:b2:2b:e1:ee:06:09:92:3b:2e:
26:f7:f3:a5:78:37:76:ad:22:ed:51:07:ec:62:52:
d5:a6:0f:3f:ee:7c:5e:c6:eb:a8:01:17:7f:b9:12:
9b:5c:7e:cd:44:a2:af:98:bd:6b:cc:11:82:f3:bf:
85:1b:ba:eb:21:22:f9:91:48:26:84:c1:c5:77:9e:
4f:14:67:a8:0f:f5:0b:d2:87:a8:d2:e5:ff:10:bb:
a2:94:41:50:b0:3f:5b:53:91:a9:66:ac:93:2c:a2:
22:e6:06:a0:e7:2c:bf:df:a0:ed:28:f1:72:64:6f:
b8:11:2d:15:d4:73:59:0e:47:46:d0:eb:2b:84:75:
4d:82:01:03:f1:33:58:4a:1e:c0:49:7b:a3:a4:43:
a3:e7:55:c6:44:a7:1c:da:40:0a:9e:52:dd:89:0c:
36:13:61:7b:2c:61:e7:44:4a:17:5e:75:b0:28:94:
58:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:21:50:0A:50:F1:46:81:17:11:F8:8A:45:8F:6E:AB:51:F5:D2:04
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2348AC78E85E11EF88F8C670762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.144.0/24
Signature Algorithm: sha256WithRSAEncryption
05:4f:0f:17:97:a7:05:4f:8d:10:6a:c4:4a:f6:b0:44:68:9b:
42:2f:63:da:3c:10:1a:13:0b:09:d0:00:e0:f7:39:7c:6e:9f:
e7:bd:42:32:d1:11:da:ac:4f:4d:02:8f:e4:6c:fb:45:9e:de:
52:14:61:9e:b2:a7:82:16:5f:6e:a0:ff:10:4d:3c:02:93:c2:
b6:be:e0:09:41:91:dc:b3:a9:59:96:23:e9:b3:ec:11:96:49:
a9:c1:1d:8d:06:cb:8a:6f:6b:e4:cf:15:26:99:89:4b:3e:2c:
fa:e0:6f:bd:7e:d6:34:1d:f2:eb:43:7e:8f:e6:22:ca:28:f7:
29:85:1d:e2:a3:39:4d:af:5e:9a:ac:bd:a2:25:91:a1:7f:d4:
0c:9f:8a:77:2c:4d:82:aa:71:3a:35:b3:97:5e:4f:4a:fa:bf:
40:db:b6:a4:91:60:d9:d4:5b:af:3b:18:ab:5f:dc:bd:ea:95:
31:c6:56:1b:30:d3:04:e4:a4:8a:69:2a:b4:cf:a1:ce:d4:1d:
ff:21:79:11:e6:87:72:a9:d0:66:5c:c4:a1:99:cb:3d:dc:97:
29:56:75:7a:14:12:07:78:2e:33:07:ec:89:d8:e0:03:84:ad:
b9:2f:e2:5f:50:0a:d1:4c:79:e9:c8:3f:ab:05:9a:5b:dc:e2:
05:9f:0f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:11:29 2025 by rpki-client