Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/079E08929B4311EEAA83A40BD25BE465.roa
File: 079E08929B4311EEAA83A40BD25BE465.roa (raw, json)
Hash identifier: l3aXdbr79MPKZ4C3014nAflOZiHlYxiiLxfin1b26Cs=
Subject key identifier: CC:D0:6A:06:FB:44:4F:EC:83:38:14:1F:41:6B:3A:D0:51:8C:31:B2
Certificate issuer: /CN=F3656BB8AF/serialNumber=F67066439ACD9EAFD4899FC68C6075C70CE39AD5
Certificate serial: 22
Authority key identifier: F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/079E08929B4311EEAA83A40BD25BE465.roa
Signing time: Fri 15 Dec 2023 12:11:09 +0000
ROA not before: Fri 15 Dec 2023 12:11:05 +0000
ROA not after: Tue 20 Dec 2033 12:11:05 +0000
asID: 16509
IP address blocks: 102.210.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Dec 2023 07:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3656BB8AF
Validity
Not Before: Dec 15 12:11:05 2023 GMT
Not After : Dec 20 12:11:05 2033 GMT
Subject: CN=657c425d-923d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:00:16:43:b7:02:8e:08:0b:22:80:cd:c3:10:
f3:66:48:0f:fc:16:76:73:81:36:17:dc:7b:9f:9e:
21:ad:20:29:9d:c2:6e:9d:a0:68:8b:49:9d:2a:c6:
5a:5f:b8:d0:b5:29:b3:60:91:3a:65:7c:c0:81:0b:
af:56:32:e3:56:84:8f:a3:55:3e:d7:56:21:a6:c6:
fe:5c:e7:c3:36:94:8c:8f:32:03:86:32:d6:f7:95:
2f:f7:f6:94:b5:ff:13:9c:a5:3e:54:46:d1:ed:4a:
66:99:10:d4:f7:e7:79:62:41:5d:1c:47:c0:b3:c8:
f7:3a:17:24:71:91:b4:a9:c2:67:de:a1:15:d3:78:
3d:6f:69:7b:76:f0:4c:77:77:c3:b6:60:3e:20:d0:
07:74:c9:57:26:a6:14:54:fa:da:4a:39:6f:05:0a:
2a:70:61:1e:b2:9a:ea:6e:e7:a6:f0:ca:13:0d:46:
94:73:24:69:f8:7a:eb:b1:cc:1d:9e:bc:d0:d3:25:
ab:b8:94:5b:5b:6c:a6:9d:f5:d5:27:29:a4:66:c4:
4c:14:6f:cf:7d:a8:5a:9e:84:45:8c:ad:ca:45:9c:
b6:74:80:88:98:3c:08:25:e3:69:d0:06:c4:c8:58:
83:05:9b:3b:3f:5f:cc:35:52:00:ff:42:f3:0d:26:
8d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D0:6A:06:FB:44:4F:EC:83:38:14:1F:41:6B:3A:D0:51:8C:31:B2
X509v3 Authority Key Identifier:
keyid:F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/079E08929B4311EEAA83A40BD25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.191.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:a5:7e:c4:2e:f6:f1:a4:05:4e:6a:08:af:16:71:4f:f6:ad:
bc:82:05:ea:2d:bd:49:50:c4:38:e1:50:40:81:51:38:fa:df:
8c:11:10:a7:74:61:5a:bc:b1:95:0d:b0:f0:4b:1f:72:53:da:
9f:39:56:83:32:2b:cb:0b:a4:d4:20:ad:4e:b0:77:67:7c:47:
42:1c:6d:54:ea:04:b5:04:8a:2d:81:3d:0c:a7:1f:7c:65:ae:
4d:c5:aa:6f:3a:bd:2e:28:59:af:d9:2e:70:60:5b:27:e3:69:
4f:49:23:93:39:96:50:ea:7a:b7:47:70:d1:cb:c6:f2:8c:49:
c5:9e:2c:e5:c2:2e:40:fa:57:33:cb:6b:79:d5:86:69:c3:25:
99:da:00:8a:06:d7:3e:6a:8e:9b:6d:2f:59:5c:61:30:75:6e:
1c:49:9e:16:9d:e2:80:6a:8b:66:0f:f1:b8:be:38:7e:66:00:
73:b0:0c:1b:b1:8a:0c:cc:6c:55:75:bf:4c:1b:00:16:1c:5a:
24:11:61:93:d5:d1:98:91:b3:c8:b6:44:55:e8:ce:e5:16:4e:
bd:00:4b:14:a5:c9:77:ab:e3:b4:04:40:03:e5:41:b8:ba:a5:
47:7e:ff:2f:29:5b:26:cc:80:bc:3c:38:38:57:e7:2b:b4:6d:
1d:54:54:48
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBIjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
NkJCOEFGMTEwLwYDVQQFEyhGNjcwNjY0MzlBQ0Q5RUFGRDQ4OTlGQzY4QzYwNzVD
NzBDRTM5QUQ1MB4XDTIzMTIxNTEyMTEwNVoXDTMzMTIyMDEyMTEwNVowGDEWMBQG
A1UEAxMNNjU3YzQyNWQtOTIzZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKoAFkO3Ao4ICyKAzcMQ82ZID/wWdnOBNhfce5+eIa0gKZ3Cbp2gaItJnSrG
Wl+40LUps2CROmV8wIELr1Yy41aEj6NVPtdWIabG/lznwzaUjI8yA4Yy1veVL/f2
lLX/E5ylPlRG0e1KZpkQ1PfneWJBXRxHwLPI9zoXJHGRtKnCZ96hFdN4PW9pe3bw
THd3w7ZgPiDQB3TJVyamFFT62ko5bwUKKnBhHrKa6m7npvDKEw1GlHMkafh667HM
HZ680NMlq7iUW1tspp311ScppGbETBRvz32oWp6ERYytykWctnSAiJg8CCXjadAG
xMhYgwWbOz9fzDVSAP9C8w0mjSMCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBTM0GoG
+0RP7IM4FB9BazrQUYwxsjAfBgNVHSMEGDAWgBT2cGZDms2er9SJn8aMYHXHDOOa
1TAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTZCQjgvRDc5RUVCOTQ4OTFDMTFFRUFGNjVDNzYwNEFEOUU2RkMvOW5CbVE1
ck5ucV9VaVpfR2pHQjF4d3pqbXRVLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvOW5CbVE1ck5ucV9VaVpfR2pHQjF4d3pqbXRVLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTZCQjgvRDc5RUVCOTQ4OTFDMTFFRUFGNjVDNzYwNEFE
OUU2RkMvMDc5RTA4OTI5QjQzMTFFRUFBODNBNDBCRDI1QkU0NjUucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGbSvzANBgkqhkiG9w0BAQsF
AAOCAQEAfqV+xC728aQFTmoIrxZxT/atvIIF6i29SVDEOOFQQIFROPrfjBEQp3Rh
WryxlQ2w8EsfclPanzlWgzIrywuk1CCtTrB3Z3xHQhxtVOoEtQSKLYE9DKcffGWu
TcWqbzq9LihZr9kucGBbJ+NpT0kjkzmWUOp6t0dw0cvG8oxJxZ4s5cIuQPpXM8tr
edWGacMlmdoAigbXPmqOm20vWVxhMHVuHEmeFp3igGqLZg/xuL44fmYAc7AMG7GK
DMxsVXW/TBsAFhxaJBFhk9XRmJGzyLZEVejO5RZOvQBLFKXJd6vjtARAA+VBuLql
R37/LylbJsyAvDw4OFfnK7RtHVRUSA==
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:44:34 2025 by rpki-client