Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7B3CF4001CF411F0A19CC4AFDAE4EC9C.roa
File: 7B3CF4001CF411F0A19CC4AFDAE4EC9C.roa (raw, json)
Hash identifier: gAt17s33Qb9ZZ8A9Kp8GKCuSMc0mV2oqTzzQzO8giXQ=
Subject key identifier: 6E:8E:D8:A8:73:22:5D:56:47:56:DB:9B:97:1F:3B:9E:D7:37:36:CA
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 146E
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7B3CF4001CF411F0A19CC4AFDAE4EC9C.roa
Signing time: Sat 19 Apr 2025 08:01:22 +0000
ROA not before: Sat 19 Apr 2025 08:01:16 +0000
ROA not after: Wed 19 Apr 2028 08:01:16 +0000
asID: 21859
IP address blocks: 102.129.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Apr 2025 11:42:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5230 (0x146e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 19 08:01:16 2025 GMT
Not After : Apr 19 08:01:16 2028 GMT
Subject: CN=68035852-3519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:95:10:9d:b9:da:b7:db:a0:c2:63:56:5a:
d2:70:13:85:c4:59:45:5e:51:c8:5e:70:dd:41:39:
86:23:a4:10:a5:e1:e3:05:03:c8:43:2d:ef:aa:be:
b2:08:5d:2d:2a:b2:0a:5e:4c:94:e9:44:44:b8:d1:
65:ba:9e:57:e8:42:37:b1:58:6c:91:25:91:9c:7d:
88:0d:40:7f:fa:64:2d:0a:30:17:ee:88:cd:64:0b:
83:2e:66:4c:6b:90:66:69:6a:bc:69:1a:bc:07:27:
eb:ac:6c:54:69:31:55:95:29:a2:48:b8:7b:2f:b1:
20:a9:de:9d:44:29:68:99:ea:01:03:29:d7:24:b7:
cd:ea:a6:65:be:db:8a:d8:bf:e1:3e:c1:64:35:4f:
98:01:41:0a:7a:28:a1:e7:ad:cf:17:4b:15:25:b2:
6e:6c:79:ae:ce:1c:46:fa:3f:8f:e6:78:32:c5:9d:
9e:10:45:53:d3:99:eb:f1:20:5f:12:4b:3f:8c:4f:
17:ea:ef:af:08:df:11:70:ae:f0:cb:a9:21:e2:fe:
49:b6:b6:23:88:20:31:d6:06:ae:32:36:ee:82:0d:
db:d5:a5:5b:2b:7e:c1:fe:ed:e6:83:b6:4d:26:01:
7c:24:ce:57:64:2a:de:a8:9d:e7:c4:50:0d:5e:b5:
09:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8E:D8:A8:73:22:5D:56:47:56:DB:9B:97:1F:3B:9E:D7:37:36:CA
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7B3CF4001CF411F0A19CC4AFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.128.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:b8:07:e4:a8:03:07:fa:e4:40:d8:47:aa:fd:ad:7e:f9:e0:
37:3f:a5:f8:0a:2b:40:e5:40:39:8d:4e:7f:86:16:e0:c4:5a:
c2:b8:3c:23:e7:18:fd:c1:6a:cd:7a:7f:91:65:c9:46:99:d2:
4d:20:ca:00:73:04:fd:81:a1:b8:02:96:e8:9e:d3:52:01:34:
2a:ee:31:fa:de:f5:ea:5d:33:e9:36:25:09:dc:09:2d:51:12:
97:c8:89:86:ee:13:88:ed:44:52:b7:dc:ef:c1:5a:91:a8:2e:
9b:d2:ca:91:12:11:6a:0c:d6:a5:fc:db:43:fc:7a:0f:e2:6a:
02:33:36:7c:f7:b6:c2:81:d1:80:34:44:9b:12:a4:d2:be:19:
27:2d:f4:7e:08:9e:a3:6b:a8:2e:45:8f:c5:2a:74:fc:7c:0f:
cb:a7:f4:ec:e2:8a:32:f7:ac:39:57:c8:35:f8:2a:63:c3:06:
0e:bd:e5:2e:f6:47:0d:c9:14:b8:1e:71:c5:e8:41:90:d8:73:
0f:87:41:74:9e:da:3d:a2:96:f3:3e:03:0e:d7:22:11:71:2e:
c6:d2:d1:f7:f8:de:09:19:40:89:d0:35:a6:71:a0:c1:87:19:
38:59:83:c8:e9:48:13:b9:04:79:9d:eb:3a:0a:56:31:c3:a8:
46:c2:c8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:17:21 2025 by rpki-client