Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/B4D6A5EE862211EF9AFB3A5D762E951A.roa
File: B4D6A5EE862211EF9AFB3A5D762E951A.roa (raw, json)
Hash identifier: sg7ZjInNkk/xbatUfRzu9qv38lBO6UfkBnPJAoCIKzo=
Subject key identifier: D6:EE:5C:4A:21:B3:28:B5:7E:3B:2E:59:89:EA:78:8D:65:9F:03:E5
Certificate issuer: /CN=F3695083AF/serialNumber=E5103ED119E6479BB036B7C3F48DCC9E62C17424
Certificate serial: 03
Authority key identifier: E5:10:3E:D1:19:E6:47:9B:B0:36:B7:C3:F4:8D:CC:9E:62:C1:74:24
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/B4D6A5EE862211EF9AFB3A5D762E951A.roa
Signing time: Wed 09 Oct 2024 09:41:49 +0000
ROA not before: Wed 09 Oct 2024 09:41:46 +0000
ROA not after: Thu 09 Oct 2025 09:41:46 +0000
asID: 329303
IP address blocks: 102.211.132.0/22 maxlen: 22
2c0f:1440::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 09 Oct 2024 15:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3695083AF/serialNumber=E5103ED119E6479BB036B7C3F48DCC9E62C17424
Validity
Not Before: Oct 9 09:41:46 2024 GMT
Not After : Oct 9 09:41:46 2025 GMT
Subject: CN=67064fdd-3ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4f:bf:af:6e:64:44:95:45:53:03:f5:d3:b0:
5f:11:e2:09:0c:b5:5f:38:56:fd:80:e9:a3:2d:ae:
1f:75:d4:f4:bd:77:61:dd:c1:64:80:bd:57:e1:ca:
36:4e:f6:ac:46:f5:23:fa:20:ea:5f:e0:a7:73:5e:
28:ae:b8:2c:99:37:b9:65:35:fd:47:81:3e:b0:07:
45:41:a8:50:4e:fb:8c:da:66:28:c3:79:02:fd:25:
05:1f:67:fb:54:7c:59:c3:6b:5a:5d:54:b2:cd:84:
60:23:ad:54:43:6a:b8:e9:13:0f:7d:5a:3f:f5:67:
7b:de:f1:df:23:5e:aa:a1:6c:3e:de:a4:ea:09:1c:
ed:a9:71:a6:c5:b0:32:86:a7:e5:8e:cf:5d:6f:35:
e7:5a:23:06:6d:d9:26:f6:3c:4f:35:4b:85:79:bb:
6d:0e:9d:de:f3:dd:52:4b:8e:07:b7:31:ab:f4:c0:
f2:36:f5:83:7b:88:fa:52:0b:3f:c5:82:10:a6:47:
4e:8b:bb:c0:55:8a:f8:80:a7:8c:f4:64:af:37:0f:
28:eb:aa:a0:df:1c:e7:4b:5a:2b:65:a8:6d:12:50:
b3:27:c4:b3:3e:e5:fa:2e:61:47:56:f7:65:bc:09:
7a:0c:23:66:39:a1:cd:bb:db:43:9f:05:e3:2c:a4:
e4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EE:5C:4A:21:B3:28:B5:7E:3B:2E:59:89:EA:78:8D:65:9F:03:E5
X509v3 Authority Key Identifier:
keyid:E5:10:3E:D1:19:E6:47:9B:B0:36:B7:C3:F4:8D:CC:9E:62:C1:74:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/B4D6A5EE862211EF9AFB3A5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.211.132.0/22
IPv6:
2c0f:1440::/32
Signature Algorithm: sha256WithRSAEncryption
4b:1d:07:d9:11:25:55:23:78:6f:09:06:20:42:60:c1:82:bc:
31:9b:61:69:f7:17:6e:3e:8c:37:2c:67:31:d1:1e:95:77:4d:
37:76:10:01:d1:4b:e8:5a:4e:b4:ff:38:57:64:22:bc:6e:b0:
89:4c:b3:01:9b:f9:e4:e0:22:ce:5c:77:a9:3f:7c:77:5c:a3:
f6:6e:bb:6d:7b:c2:5f:f6:40:03:be:ab:26:76:4f:f1:e4:3a:
9f:40:bf:90:7f:79:25:24:9b:a6:da:ed:fe:47:39:e7:eb:a3:
8a:9a:de:e7:f4:69:92:e5:00:65:86:48:06:cb:95:90:0f:f8:
1d:3a:b7:1a:8b:1a:a9:0f:78:84:61:2c:72:e4:e9:d0:9a:28:
e6:8b:12:ad:19:25:d7:38:55:79:53:6c:02:6e:2b:4f:ee:2b:
14:07:a2:5b:06:3c:ae:6d:65:90:0a:18:af:82:ca:26:c2:8f:
ac:5c:c4:ea:79:d9:83:30:b8:e5:ca:ba:f6:dc:19:ba:e6:db:
a9:8d:02:d6:36:e1:83:20:a6:76:17:71:8e:18:08:e8:1b:5f:
29:71:25:e6:70:3b:8b:6c:29:53:b4:72:a1:b5:e0:bb:85:2b:
bd:8a:39:a7:f2:15:cc:e6:84:f9:f7:ef:40:e0:66:0b:2e:33:
54:d5:b5:05
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY5
NTA4M0FGMTEwLwYDVQQFEyhFNTEwM0VEMTE5RTY0NzlCQjAzNkI3QzNGNDhEQ0M5
RTYyQzE3NDI0MB4XDTI0MTAwOTA5NDE0NloXDTI1MTAwOTA5NDE0NlowGDEWMBQG
A1UEAxMNNjcwNjRmZGQtM2FkMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKhPv69uZESVRVMD9dOwXxHiCQy1XzhW/YDpoy2uH3XU9L13Yd3BZIC9V+HK
Nk72rEb1I/og6l/gp3NeKK64LJk3uWU1/UeBPrAHRUGoUE77jNpmKMN5Av0lBR9n
+1R8WcNrWl1Uss2EYCOtVENquOkTD31aP/Vne97x3yNeqqFsPt6k6gkc7alxpsWw
Moan5Y7PXW8151ojBm3ZJvY8TzVLhXm7bQ6d3vPdUkuOB7cxq/TA8jb1g3uI+lIL
P8WCEKZHTou7wFWK+ICnjPRkrzcPKOuqoN8c50taK2WobRJQsyfEsz7l+i5hR1b3
ZbwJegwjZjmhzbvbQ58F4yyk5D8CAwEAAaOCArQwggKwMB0GA1UdDgQWBBTW7lxK
IbMotX47LlmJ6niNZZ8D5TAfBgNVHSMEGDAWgBTlED7RGeZHm7A2t8P0jcyeYsF0
JDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OTUwODMvMEZBNDFDNkU4NjIyMTFFRjhGQ0JENzU4NzYyRTk1MUEvNVJBLTBS
bm1SNXV3TnJmRDlJM01ubUxCZENRLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvNVJBLTBSbm1SNXV3TnJmRDlJM01ubUxCZENRLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTUwODMvMEZBNDFDNkU4NjIyMTFFRjhGQ0JENzU4NzYy
RTk1MUEvQjRENkE1RUU4NjIyMTFFRjlBRkIzQTVENzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAmbThDANBAIAAjAHAwUALA8U
QDANBgkqhkiG9w0BAQsFAAOCAQEASx0H2RElVSN4bwkGIEJgwYK8MZthafcXbj6M
NyxnMdEelXdNN3YQAdFL6FpOtP84V2QivG6wiUyzAZv55OAizlx3qT98d1yj9m67
bXvCX/ZAA76rJnZP8eQ6n0C/kH95JSSbptrt/kc55+ujipre5/RpkuUAZYZIBsuV
kA/4HTq3GosaqQ94hGEscuTp0Joo5osSrRkl1zhVeVNsAm4rT+4rFAeiWwY8rm1l
kAoYr4LKJsKPrFzE6nnZgzC45cq69twZuubbqY0C1jbhgyCmdhdxjhgI6BtfKXEl
5nA7i2wpU7RyobXgu4UrvYo5p/IVzOaE+ffvQOBmCy4zVNW1BQ==
-----END CERTIFICATE-----
Generated at Wed Oct 9 20:37:44 2024 by rpki-client on console-fra.rpki-client.org