Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/A9B4E09601B211EDAFD1478CF1222468.roa
File: A9B4E09601B211EDAFD1478CF1222468.roa (raw, json)
Hash identifier: 9QghAJ7gQZqn8MPkkLLkkjcdyOkxkSCpmQO0rz9aHKU=
Subject key identifier: 61:C9:E2:52:83:01:8D:74:2C:AC:49:D8:E1:70:D8:B5:34:41:7B:9A
Certificate issuer: /CN=F36A4C9EAF/serialNumber=AEF7C777AC3636C67BAE8A0CC69E44638E9A009F
Certificate serial: 02
Authority key identifier: AE:F7:C7:77:AC:36:36:C6:7B:AE:8A:0C:C6:9E:44:63:8E:9A:00:9F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rvfHd6w2NsZ7rooMxp5EY46aAJ8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/A9B4E09601B211EDAFD1478CF1222468.roa
Signing time: Tue 12 Jul 2022 07:17:18 +0000
ROA not before: Tue 12 Jul 2022 07:17:13 +0000
ROA not after: Fri 12 Jul 2024 07:17:13 +0000
asID: 30999
IP address blocks: 102.221.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Aug 2022 06:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A4C9EAF/serialNumber=AEF7C777AC3636C67BAE8A0CC69E44638E9A009F
Validity
Not Before: Jul 12 07:17:13 2022 GMT
Not After : Jul 12 07:17:13 2024 GMT
Subject: CN=62cd1ffe-8c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:01:37:6c:38:d1:89:68:06:c1:2c:58:1a:ee:
10:23:ff:86:b2:5b:8a:a3:b9:d7:86:24:e2:08:5d:
95:1b:47:70:c2:5b:e1:9b:f4:c0:83:99:7c:b5:00:
b4:28:7b:79:38:8d:4f:4b:e1:49:ac:5c:5c:62:f6:
3a:5d:e2:01:a8:c2:43:56:24:bd:83:0f:ea:db:a3:
56:23:ae:48:0a:2b:44:6e:81:1b:66:4b:d1:8f:60:
3d:cb:dc:61:bf:9c:20:f9:61:14:d2:b6:ba:dd:c5:
68:ef:a9:b5:fe:4f:56:cd:4c:fe:b1:ee:d2:a1:cc:
a3:a3:6e:ab:f1:36:42:9f:09:63:ba:cd:ce:f0:6e:
f7:c4:0f:bb:87:27:d4:da:82:1c:b4:63:94:56:b0:
65:05:67:44:31:a7:c0:8b:0b:ea:ac:67:fc:86:86:
50:6d:08:b7:e0:4c:6a:dc:37:e3:33:2f:a3:08:2f:
5f:a0:f8:e3:40:51:8d:06:07:eb:5d:6a:d6:a2:a9:
b7:46:c3:9a:37:13:11:ec:47:08:24:01:80:04:d0:
e7:d6:5c:9b:2f:30:7a:6b:79:43:0b:92:75:d3:05:
eb:65:93:6f:ce:fd:7c:62:56:70:6e:96:ea:3d:2f:
e6:25:7b:8a:b7:ad:50:5c:5b:0f:6b:f2:bd:f9:4f:
b9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C9:E2:52:83:01:8D:74:2C:AC:49:D8:E1:70:D8:B5:34:41:7B:9A
X509v3 Authority Key Identifier:
keyid:AE:F7:C7:77:AC:36:36:C6:7B:AE:8A:0C:C6:9E:44:63:8E:9A:00:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/rvfHd6w2NsZ7rooMxp5EY46aAJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rvfHd6w2NsZ7rooMxp5EY46aAJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/A9B4E09601B211EDAFD1478CF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.221.182.0/24
Signature Algorithm: sha256WithRSAEncryption
89:dc:a0:eb:72:05:2e:c6:0a:3a:a8:a7:56:f8:65:d0:b9:ab:
8c:b6:c3:78:55:33:d1:13:b2:9e:58:bd:ad:3f:7f:ea:42:b4:
e5:33:df:cb:3e:20:18:68:28:94:d0:0a:cb:4d:8c:92:4e:91:
18:f6:36:46:9a:a8:c5:78:60:5e:aa:0b:5b:41:3f:8c:81:fe:
18:66:d4:2d:0d:6c:d6:4e:9b:22:d1:7e:5f:e8:ea:38:6d:93:
a5:38:17:d1:ef:22:5b:14:54:0b:2e:fc:98:45:f9:8d:0e:de:
b6:5f:2e:55:c1:23:74:98:32:da:c7:26:41:0e:bf:85:fb:c1:
62:31:c9:3e:a6:aa:b0:a8:d5:09:08:63:98:75:c7:f3:02:9f:
7a:0d:d1:2b:9e:f5:f4:cb:8f:fb:07:97:18:31:fa:47:c4:9e:
98:87:1b:1b:03:fb:e8:e5:33:d7:52:80:f0:d0:65:b7:66:c2:
e4:27:44:b2:54:37:5d:af:1c:7b:57:49:dd:08:f7:8f:b0:15:
e0:4d:2b:04:78:3e:16:07:b0:e1:e7:22:7b:65:c6:4d:bf:90:
0c:72:a4:d1:39:60:f8:d0:c0:e3:28:77:d8:59:f5:bc:24:b0:
22:de:fa:9a:7a:87:02:ab:18:99:b5:29:ee:51:82:df:78:db:
38:07:81:18
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzZB
NEM5RUFGMTEwLwYDVQQFEyhBRUY3Qzc3N0FDMzYzNkM2N0JBRThBMENDNjlFNDQ2
MzhFOUEwMDlGMB4XDTIyMDcxMjA3MTcxM1oXDTI0MDcxMjA3MTcxM1owGDEWMBQG
A1UEAwwNNjJjZDFmZmUtOGM2ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALcBN2w40YloBsEsWBruECP/hrJbiqO514Yk4ghdlRtHcMJb4Zv0wIOZfLUA
tCh7eTiNT0vhSaxcXGL2Ol3iAajCQ1YkvYMP6tujViOuSAorRG6BG2ZL0Y9gPcvc
Yb+cIPlhFNK2ut3FaO+ptf5PVs1M/rHu0qHMo6Nuq/E2Qp8JY7rNzvBu98QPu4cn
1NqCHLRjlFawZQVnRDGnwIsL6qxn/IaGUG0It+BMatw34zMvowgvX6D440BRjQYH
611q1qKpt0bDmjcTEexHCCQBgATQ59Zcmy8wemt5QwuSddMF62WTb879fGJWcG6W
6j0v5iV7iretUFxbD2vyvflPud8CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBRhyeJS
gwGNdCysSdjhcNi1NEF7mjAfBgNVHSMEGDAWgBSu98d3rDY2xnuuigzGnkRjjpoA
nzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QTRDOUUvRUE2RjQ4MEMwMUIxMTFFRDhEOThFQjg5RjEyMjI0NjgvcnZmSGQ2
dzJOc1o3cm9vTXhwNUVZNDZhQUo4LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvcnZmSGQ2dzJOc1o3cm9vTXhwNUVZNDZhQUo4LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTRDOUUvRUE2RjQ4MEMwMUIxMTFFRDhEOThFQjg5RjEy
MjI0NjgvQTlCNEUwOTYwMUIyMTFFREFGRDE0NzhDRjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGbdtjANBgkqhkiG9w0BAQsF
AAOCAQEAidyg63IFLsYKOqinVvhl0LmrjLbDeFUz0ROynli9rT9/6kK05TPfyz4g
GGgolNAKy02Mkk6RGPY2RpqoxXhgXqoLW0E/jIH+GGbULQ1s1k6bItF+X+jqOG2T
pTgX0e8iWxRUCy78mEX5jQ7etl8uVcEjdJgy2scmQQ6/hfvBYjHJPqaqsKjVCQhj
mHXH8wKfeg3RK5719MuP+weXGDH6R8SemIcbGwP76OUz11KA8NBlt2bC5CdEslQ3
Xa8ce1dJ3Qj3j7AV4E0rBHg+Fgew4ecie2XGTb+QDHKk0Tlg+NDA4yh32Fn1vCSw
It76mnqHAqsYmbUp7lGC33jbOAeBGA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org