Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F3E47D9217CC11F08DF6B6D66DB8BCC6.roa
File: F3E47D9217CC11F08DF6B6D66DB8BCC6.roa (raw, json)
Hash identifier: JIqDcmWzPLcCbQrdJ+ENCyWW82Xtg8lSzgLHxXE1QDY=
Subject key identifier: 97:4F:CF:B2:F0:5F:57:C9:A4:6A:DC:A2:B0:A0:51:27:AE:7E:CE:26
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1450
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F3E47D9217CC11F08DF6B6D66DB8BCC6.roa
Signing time: Sat 12 Apr 2025 18:35:48 +0000
ROA not before: Sat 12 Apr 2025 18:35:43 +0000
ROA not after: Mon 12 Apr 2027 18:35:43 +0000
asID: 834
IP address blocks: 102.129.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Apr 2025 07:25:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5200 (0x1450)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 12 18:35:43 2025 GMT
Not After : Apr 12 18:35:43 2027 GMT
Subject: CN=67fab284-b736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f0:f0:1d:9e:7f:f5:e6:9a:cc:90:0b:c2:77:
ec:eb:5e:ce:78:48:7a:02:32:a6:8f:b0:98:51:5e:
8e:41:1f:00:bb:38:ba:50:97:0e:ed:c1:eb:75:9a:
6a:d0:f7:29:f5:d5:fe:13:c7:35:26:1b:f5:35:36:
a7:fc:f8:3d:82:75:0d:b5:fe:0e:94:e9:f2:42:c6:
1a:24:41:fa:a8:1e:f0:21:dc:c4:53:04:58:32:57:
7e:34:f1:e3:d2:cb:58:4c:0c:d5:4c:fd:79:da:2a:
56:4f:93:5e:9f:72:ee:aa:93:45:18:44:ed:86:46:
1d:8c:4a:cf:1e:14:55:a8:62:b0:dd:90:34:c2:0b:
a3:99:a3:5e:37:30:2d:01:46:d6:64:6e:9c:8b:0c:
1a:ba:2a:97:ce:c9:1a:d3:3a:75:9d:8f:18:a0:38:
7d:00:30:ae:03:86:39:1b:ba:50:76:72:7e:e8:f5:
85:de:0b:e1:d5:13:3c:c8:dd:0c:32:1a:90:cb:aa:
63:e5:c9:b2:09:bc:82:97:e8:7f:4e:6a:49:49:11:
4d:d9:d4:59:66:85:a8:63:03:f1:06:65:06:7c:e0:
07:79:fb:b3:13:04:10:bb:87:f9:b2:d2:78:29:ec:
ce:56:ec:50:e7:97:89:7b:aa:4b:19:c3:ac:01:94:
d0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4F:CF:B2:F0:5F:57:C9:A4:6A:DC:A2:B0:A0:51:27:AE:7E:CE:26
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F3E47D9217CC11F08DF6B6D66DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.214.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:99:b0:7e:05:06:45:4a:90:6e:04:ae:85:46:59:03:61:9d:
4c:22:31:2f:ad:d7:80:59:e0:b9:97:79:e5:f8:3c:6c:26:49:
2f:64:b6:93:6c:8c:70:74:25:e6:b9:23:24:bd:a7:8e:a1:0d:
07:02:b6:28:3c:e0:23:bd:86:7c:59:89:4c:ec:e0:df:6e:f2:
ab:22:e0:c2:42:6c:fa:42:05:ff:29:8e:0c:31:f4:ef:01:a2:
d9:12:03:a9:5a:24:f2:06:2e:85:45:54:b8:18:21:64:e2:b2:
21:18:c4:f2:fe:c2:e1:53:ae:8b:08:f4:03:0d:d1:5b:d7:14:
63:73:aa:6a:af:57:a1:8a:51:e4:12:cd:89:13:df:2d:1b:d0:
fe:b2:6e:b7:f9:a8:da:d5:45:08:bb:1f:02:78:ea:90:33:82:
ec:aa:db:fe:9e:0e:c1:50:cf:9e:0a:7a:04:1f:1c:21:af:44:
70:cb:91:60:2d:88:13:78:03:a2:37:50:39:3f:a0:11:7c:0a:
60:a0:70:fb:0a:60:80:de:8e:f8:b7:00:0b:d8:5d:5a:8d:d4:
c6:b9:7b:3e:79:2c:ba:4d:3c:ea:f1:ec:dc:7a:c0:9b:5c:72:
a0:0b:f2:a6:a0:e9:1e:d5:76:48:77:e8:6b:3a:ee:17:cd:00:
6a:86:51:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:16 2025 by rpki-client on console.sobornost.net