Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/E50C40D0C7EF11EEA7DE779E775412E6.roa
File: E50C40D0C7EF11EEA7DE779E775412E6.roa (raw, json)
Hash identifier: a6DvWbgTWDaXkeP212xIiJPK3+IPkXfzAxFxWVPhKBY=
Subject key identifier: 0D:E9:17:A5:38:0E:9B:25:DA:36:72:B4:95:F9:15:D3:02:BF:5D:EA
Certificate issuer: /CN=F365BE89AF/serialNumber=C3B4A3DDB2DACFC5388EEEC7359D214664496A01
Certificate serial: 14
Authority key identifier: C3:B4:A3:DD:B2:DA:CF:C5:38:8E:EE:C7:35:9D:21:46:64:49:6A:01
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/E50C40D0C7EF11EEA7DE779E775412E6.roa
Signing time: Sat 10 Feb 2024 08:39:25 +0000
ROA not before: Sat 10 Feb 2024 08:39:22 +0000
ROA not after: Sun 10 Feb 2030 08:39:22 +0000
asID: 329210
IP address blocks: 102.216.252.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 11 Feb 2024 12:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365BE89AF/serialNumber=C3B4A3DDB2DACFC5388EEEC7359D214664496A01
Validity
Not Before: Feb 10 08:39:22 2024 GMT
Not After : Feb 10 08:39:22 2030 GMT
Subject: CN=65c7363d-bcbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3e:31:43:96:39:c0:60:a8:bc:9e:7c:3e:74:
45:60:06:e3:2d:84:85:6a:55:7a:a9:fd:69:7d:91:
01:95:af:f9:b7:fe:38:b8:a8:89:92:4a:8a:47:dd:
56:20:1e:b5:b3:77:5d:cc:11:ed:fe:ca:2d:68:df:
be:67:c0:53:36:db:9e:95:37:0a:b5:1e:7f:ee:de:
f8:9b:9b:b6:b1:c7:0a:71:42:32:94:c4:88:46:af:
03:a8:1e:3d:b6:d9:32:5a:76:6c:e0:ec:78:d5:78:
07:7e:c0:8b:a8:eb:e6:13:8a:b0:d9:46:fa:59:e1:
4a:80:50:d3:83:b0:cd:f1:f8:7c:7a:2c:b6:f2:6e:
a4:28:ab:f1:8d:93:b9:9f:63:5f:92:87:b9:50:4d:
22:1f:33:89:45:1f:93:be:49:f8:79:8b:08:cc:40:
92:33:58:00:41:a7:be:57:c6:ff:30:1e:de:0b:3f:
2b:7d:26:78:d4:eb:4e:42:93:c8:a1:be:87:88:fd:
d4:81:b4:86:39:2e:a6:d1:42:7c:c2:0b:2c:47:bf:
bb:1b:83:ec:9d:58:07:ad:4c:aa:9a:11:4b:d8:17:
8b:0b:86:f9:69:a7:2e:2f:14:b9:82:d3:cb:6a:c0:
fc:72:9f:84:28:e5:f9:fe:30:b6:53:d1:2a:fa:0c:
c7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E9:17:A5:38:0E:9B:25:DA:36:72:B4:95:F9:15:D3:02:BF:5D:EA
X509v3 Authority Key Identifier:
keyid:C3:B4:A3:DD:B2:DA:CF:C5:38:8E:EE:C7:35:9D:21:46:64:49:6A:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/E50C40D0C7EF11EEA7DE779E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.252.0/22
Signature Algorithm: sha256WithRSAEncryption
62:15:b3:b1:45:4d:00:42:3a:b9:26:bd:c9:4d:a0:b7:26:52:
e0:86:82:0b:e0:fb:6d:11:ae:e3:6e:1b:0a:4f:4e:db:63:b6:
45:f0:0e:e8:b3:2e:af:a1:57:49:a8:2d:04:c5:78:04:80:ec:
e7:cb:9f:50:1f:7d:45:e6:60:e0:e5:70:aa:80:1d:13:f0:6b:
52:29:ba:98:a3:dc:76:da:e2:d5:29:27:0f:13:56:ee:dd:65:
43:fb:f5:f5:4e:4f:8b:4b:58:72:f2:3c:49:ce:fa:99:7f:8a:
d4:ec:33:54:2e:92:34:a6:16:dc:bd:16:1a:fe:11:bc:0a:09:
57:c8:8a:75:f9:85:bf:fa:bd:c7:71:ed:b1:f7:bf:7d:c8:5d:
ae:87:1e:b3:71:96:99:8a:78:2a:99:bc:64:96:3b:c7:82:0b:
23:7c:bb:ec:78:fd:84:5e:69:9f:b2:99:8b:b1:cd:e1:22:2c:
ac:91:b1:b2:c9:bf:f3:44:e8:b1:16:e6:02:92:5f:7d:f7:e5:
a4:6d:aa:28:a1:ed:b6:93:33:93:34:61:f2:fc:ef:a5:ba:f5:
45:f9:a3:04:8c:a2:c8:9b:5d:c2:5d:5b:a1:eb:eb:ad:21:cb:
20:bf:79:a5:d2:dc:be:c3:51:b9:20:56:8b:11:cd:7a:b7:c8:
61:c6:41:d5
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBFDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
QkU4OUFGMTEwLwYDVQQFEyhDM0I0QTNEREIyREFDRkM1Mzg4RUVFQzczNTlEMjE0
NjY0NDk2QTAxMB4XDTI0MDIxMDA4MzkyMloXDTMwMDIxMDA4MzkyMlowGDEWMBQG
A1UEAxMNNjVjNzM2M2QtYmNiZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALo+MUOWOcBgqLyefD50RWAG4y2EhWpVeqn9aX2RAZWv+bf+OLioiZJKikfd
ViAetbN3XcwR7f7KLWjfvmfAUzbbnpU3CrUef+7e+JubtrHHCnFCMpTEiEavA6ge
PbbZMlp2bODseNV4B37Ai6jr5hOKsNlG+lnhSoBQ04OwzfH4fHostvJupCir8Y2T
uZ9jX5KHuVBNIh8ziUUfk75J+HmLCMxAkjNYAEGnvlfG/zAe3gs/K30meNTrTkKT
yKG+h4j91IG0hjkuptFCfMILLEe/uxuD7J1YB61MqpoRS9gXiwuG+WmnLi8UuYLT
y2rA/HKfhCjl+f4wtlPRKvoMxykCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQN6Rel
OA6bJdo2crSV+RXTAr9d6jAfBgNVHSMEGDAWgBTDtKPdstrPxTiO7sc1nSFGZElq
ATAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NUJFODkvMDk5QjQ4M0FCRThFMTFFRUIxOTVBOThFNzc1NDEyRTYvdzdTajNi
TGF6OFU0anU3SE5aMGhSbVJKYWdFLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvdzdTajNiTGF6OFU0anU3SE5aMGhSbVJKYWdFLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NUJFODkvMDk5QjQ4M0FCRThFMTFFRUIxOTVBOThFNzc1
NDEyRTYvRTUwQzQwRDBDN0VGMTFFRUE3REU3NzlFNzc1NDEyRTYucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmbY/DANBgkqhkiG9w0BAQsF
AAOCAQEAYhWzsUVNAEI6uSa9yU2gtyZS4IaCC+D7bRGu424bCk9O22O2RfAO6LMu
r6FXSagtBMV4BIDs58ufUB99ReZg4OVwqoAdE/BrUim6mKPcdtri1SknDxNW7t1l
Q/v19U5Pi0tYcvI8Sc76mX+K1OwzVC6SNKYW3L0WGv4RvAoJV8iKdfmFv/q9x3Ht
sfe/fchdroces3GWmYp4Kpm8ZJY7x4ILI3y77Hj9hF5pn7KZi7HN4SIsrJGxssm/
80TosRbmApJfffflpG2qKKHttpMzkzRh8vzvpbr1RfmjBIyiyJtdwl1boevrrSHL
IL95pdLcvsNRuSBWixHNerfIYcZB1Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org