Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/61D866E22D0F11EEBC82B57B4AD9E6FC.roa
File: 61D866E22D0F11EEBC82B57B4AD9E6FC.roa (raw, json)
Hash identifier: ZwoSU9ZkKladkTz8ceWO65lS3pDuURpcvSYYcks0dcM=
Subject key identifier: F3:B2:48:8D:B5:15:20:3E:EF:B4:1C:C2:EB:26:F6:2D:D0:48:5D:DC
Certificate issuer: /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial: 02B2
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/61D866E22D0F11EEBC82B57B4AD9E6FC.roa
Signing time: Fri 28 Jul 2023 06:24:18 +0000
ROA not before: Fri 28 Jul 2023 06:24:15 +0000
ROA not after: Wed 27 Jul 2033 06:24:15 +0000
asID: 37725
IP address blocks: 102.218.128.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 690 (0x2b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Validity
Not Before: Jul 28 06:24:15 2023 GMT
Not After : Jul 27 06:24:15 2033 GMT
Subject: CN=64c35f12-838f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:02:4c:f5:eb:47:b6:3e:ec:88:70:15:68:
25:44:5a:bf:2e:8c:a1:87:7b:b0:9a:fa:82:1b:80:
71:4d:3e:ac:68:8b:d9:88:44:a4:b0:5e:c2:50:e2:
91:6f:02:25:0e:1a:dd:7e:73:be:eb:ef:92:f5:b9:
78:67:79:4c:15:5c:54:a6:e4:09:0d:c7:6d:4a:5f:
71:6c:0b:f0:ad:82:c0:86:ac:c2:73:12:0a:7e:22:
c2:69:ab:b9:c3:59:71:88:d1:4c:0e:ca:9a:0d:08:
9f:a8:a5:53:69:dd:b8:4c:37:64:a0:ce:8b:aa:9b:
f2:88:7a:f6:ec:1f:5f:d3:e6:81:f5:29:6b:ab:96:
03:b9:ce:5f:38:e6:4b:50:c7:70:cb:60:6c:18:38:
61:fa:f8:7f:4e:f1:56:cf:ba:2d:c8:e0:5c:be:15:
eb:4b:5a:6f:8b:45:f6:84:59:6f:b8:66:1f:ec:ab:
cc:d4:a5:69:2c:41:06:f4:ba:07:e6:8d:b2:3b:c4:
a5:32:4d:b5:d1:5d:7a:d3:76:0c:13:8a:38:01:fe:
6b:50:dd:dd:f7:61:e7:68:99:bb:b0:57:3e:f5:db:
36:e8:0e:7b:61:fc:9f:99:9a:2f:e3:28:7c:61:c9:
fd:a8:b5:70:a9:c9:a5:b5:38:af:0a:19:29:f7:f4:
5b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B2:48:8D:B5:15:20:3E:EF:B4:1C:C2:EB:26:F6:2D:D0:48:5D:DC
X509v3 Authority Key Identifier:
keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/61D866E22D0F11EEBC82B57B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.128.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:5a:75:24:66:f0:3c:82:fa:c8:47:78:b7:70:e2:5e:b6:c3:
96:e0:3f:41:18:67:7e:4f:72:94:46:37:4c:15:af:f0:31:81:
44:e2:82:72:1e:47:c0:ea:f4:9b:86:31:ba:81:ef:1b:ef:5c:
8c:50:38:03:95:a5:c8:c5:cf:24:f6:62:4a:09:49:c8:75:f6:
69:f4:12:dd:54:40:e5:f7:a0:bf:7f:bd:c3:48:d1:a9:f5:19:
18:0d:45:1f:4a:fe:76:e6:dc:01:f5:4a:3c:68:a5:42:85:dd:
5f:0f:37:96:89:34:9c:5d:a1:80:45:61:9a:dc:f6:e7:a2:81:
0c:e3:2d:1f:69:aa:8c:8d:26:ae:06:aa:fe:e1:bf:11:c7:23:
56:e9:a9:b1:48:5e:b5:e3:b7:10:36:fb:86:45:27:6c:ec:74:
d8:9a:3e:9e:1c:75:0f:63:9a:2d:2d:cb:04:20:e4:44:97:c2:
0b:ff:d5:13:79:85:59:6d:44:1a:b6:f7:a3:14:48:c3:02:44:
62:61:cc:e3:5a:cb:4c:fe:9c:ac:a8:2b:7b:ad:8c:71:37:22:
f6:fd:b7:8e:a2:c3:8f:23:ff:20:50:75:72:e7:c8:b9:39:8a:
80:b3:18:e6:d4:a3:b4:6f:bf:24:9e:d8:07:97:8b:24:62:ef:
b5:07:74:a3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICArIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QjMyMzRBRjExMC8GA1UEBRMoMDNGRTVENzI2RjM0RTkzQ0UxQTk1RDk0NTE4RTEy
MjM3QUMzRTJDNjAeFw0yMzA3MjgwNjI0MTVaFw0zMzA3MjcwNjI0MTVaMBgxFjAU
BgNVBAMTDTY0YzM1ZjEyLTgzOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzuQJM9etHtj7siHAVaCVEWr8ujKGHe7Ca+oIbgHFNPqxoi9mIRKSwXsJQ
4pFvAiUOGt1+c77r75L1uXhneUwVXFSm5AkNx21KX3FsC/CtgsCGrMJzEgp+IsJp
q7nDWXGI0UwOypoNCJ+opVNp3bhMN2Sgzouqm/KIevbsH1/T5oH1KWurlgO5zl84
5ktQx3DLYGwYOGH6+H9O8VbPui3I4Fy+FetLWm+LRfaEWW+4Zh/sq8zUpWksQQb0
ugfmjbI7xKUyTbXRXXrTdgwTijgB/mtQ3d33YedombuwVz712zboDnth/J+Zmi/j
KHxhyf2otXCpyaW1OK8KGSn39FsLAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU87JI
jbUVID7vtBzC6yb2LdBIXdwwHwYDVR0jBBgwFoAUA/5dcm806TzhqV2UUY4SI3rD
4sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkIzMjM0LzlFMTIxQzBDMjQxMDExRUNCMkQwNjk1NkQ4QTAxNENFL0FfNWRj
bTgwNlR6aHFWMlVVWTRTSTNyRDRzWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0FfNWRjbTgwNlR6aHFWMlVVWTRTSTNyRDRzWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkIzMjM0LzlFMTIxQzBDMjQxMDExRUNCMkQwNjk1NkQ4
QTAxNENFLzYxRDg2NkUyMkQwRjExRUVCQzgyQjU3QjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2oAwDQYJKoZIhvcNAQEL
BQADggEBAKNadSRm8DyC+shHeLdw4l62w5bgP0EYZ35PcpRGN0wVr/AxgUTignIe
R8Dq9JuGMbqB7xvvXIxQOAOVpcjFzyT2YkoJSch19mn0Et1UQOX3oL9/vcNI0an1
GRgNRR9K/nbm3AH1SjxopUKF3V8PN5aJNJxdoYBFYZrc9ueigQzjLR9pqoyNJq4G
qv7hvxHHI1bpqbFIXrXjtxA2+4ZFJ2zsdNiaPp4cdQ9jmi0tywQg5ESXwgv/1RN5
hVltRBq296MUSMMCRGJhzONay0z+nKyoK3utjHE3Ivb9t46iw48j/yBQdXLnyLk5
ioCzGObUo7RvvySe2AeXiyRi77UHdKM=
-----END CERTIFICATE-----
Generated at Thu Nov 23 12:55:13 2023 by rpki-client on console-fra.rpki-client.org