Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/EA6D50E289FA11EEA1FC29254AD9E6FC.roa
File: EA6D50E289FA11EEA1FC29254AD9E6FC.roa (raw, json)
Hash identifier: zENQpVfDd1t0enh30p01bO/8H2QeVRhh2n9n3zHhEAQ=
Subject key identifier: C1:B7:76:62:AB:61:3D:77:08:46:51:81:22:3C:3D:E6:8C:48:E7:0E
Certificate issuer: /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial: 0343
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/EA6D50E289FA11EEA1FC29254AD9E6FC.roa
Signing time: Thu 23 Nov 2023 12:22:06 +0000
ROA not before: Thu 23 Nov 2023 12:22:03 +0000
ROA not after: Tue 22 Nov 2033 12:22:03 +0000
asID: 37725
IP address blocks: 102.218.128.0/24 maxlen: 32
102.218.130.0/24 maxlen: 32
102.219.22.0/24 maxlen: 32
102.220.125.0/24 maxlen: 32
Validation: Failed, certificate revoked on Thu 14 Dec 2023 19:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 835 (0x343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Validity
Not Before: Nov 23 12:22:03 2023 GMT
Not After : Nov 22 12:22:03 2033 GMT
Subject: CN=655f43ee-25bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9d:83:38:9e:1d:18:27:1d:ab:5a:e1:f5:73:
01:a5:ce:f6:8b:1e:17:fe:72:5d:68:a8:63:e7:72:
79:f9:8b:64:fc:ae:69:64:3c:f2:81:2e:3b:32:25:
8d:b6:04:70:88:a8:4e:ea:6a:54:02:5a:20:87:ba:
2e:bc:55:f3:4e:f0:3b:f8:2b:c2:e4:9d:b2:bd:05:
4b:ea:3d:0d:40:19:9a:07:7e:fc:bf:5f:ef:c3:eb:
0f:11:6e:71:e9:64:89:62:63:ae:2d:c4:ba:9c:9e:
63:07:86:c7:20:5c:b2:d4:6d:09:af:28:5f:df:03:
e9:0e:2b:40:7e:c5:39:28:6c:5d:9a:b7:d5:3c:1c:
17:44:98:b2:9a:a9:8d:0f:6e:80:30:34:2d:a1:ed:
8f:8b:30:11:1d:a1:17:53:07:dc:bb:db:4a:a2:60:
0d:3d:6f:8c:f8:f6:63:f1:a6:0f:aa:d0:f1:74:77:
ab:43:97:00:d4:d9:3f:d3:70:fb:6d:22:fc:49:8c:
c9:46:00:e8:35:a8:19:30:cf:ce:1f:7b:ca:48:57:
df:f3:92:04:5f:fa:91:1f:d2:38:f5:4a:29:c3:1c:
e2:d1:22:6d:76:73:f1:fd:8f:b0:47:d6:1f:a7:11:
da:19:14:ab:7c:7f:2f:f0:a8:2a:0b:bd:9d:e7:17:
0e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B7:76:62:AB:61:3D:77:08:46:51:81:22:3C:3D:E6:8C:48:E7:0E
X509v3 Authority Key Identifier:
keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/EA6D50E289FA11EEA1FC29254AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.128.0/24
102.218.130.0/24
102.219.22.0/24
102.220.125.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:f0:62:f3:22:5d:20:b4:f1:63:c7:6b:f5:f8:b6:84:62:bf:
5f:ea:23:9c:0b:77:51:5a:75:2c:e2:c6:bc:9b:ec:7a:25:93:
63:1d:5f:29:b4:a5:cf:51:a3:fc:b4:d7:09:14:eb:94:e9:b1:
27:64:c7:40:7d:48:b7:d5:c1:03:30:6a:3a:fc:c2:12:17:9f:
08:f3:d3:50:2e:35:7a:a2:a6:bd:61:23:71:af:77:12:66:a0:
a9:66:cd:29:4d:ea:ec:e1:ae:38:e7:7d:eb:6e:20:ae:5b:aa:
7c:66:ee:cd:05:11:07:f7:64:79:55:3c:fe:69:2f:19:2e:19:
d6:d4:15:ac:c0:c8:3e:b9:39:c1:51:66:1b:2c:ef:5b:34:20:
98:05:78:c4:19:1b:24:f2:7e:85:d5:c9:10:29:98:32:75:74:
25:b8:b1:03:14:23:74:dc:6d:3a:97:cc:33:59:6a:c1:70:50:
58:97:78:1d:f2:b7:6b:51:c3:4a:2e:a0:f3:90:cb:44:61:d6:
e7:0c:7b:0a:7e:44:b8:11:da:42:3a:6a:46:9a:54:49:e3:a3:
21:2a:64:80:bf:74:0b:b0:71:b1:9e:18:98:6c:d1:c8:58:be:
0e:48:df:b5:e6:55:bd:b0:47:f8:01:c5:f1:a9:3b:ac:ca:a3:
b6:9e:49:25
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgICA0MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjMyMzRBRjExMC8GA1UEBRMoMDNGRTVENzI2RjM0RTkzQ0UxQTk1RDk0NTE4RTEy
MjM3QUMzRTJDNjAeFw0yMzExMjMxMjIyMDNaFw0zMzExMjIxMjIyMDNaMBgxFjAU
BgNVBAMTDTY1NWY0M2VlLTI1YmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDmnYM4nh0YJx2rWuH1cwGlzvaLHhf+cl1oqGPncnn5i2T8rmlkPPKBLjsy
JY22BHCIqE7qalQCWiCHui68VfNO8Dv4K8LknbK9BUvqPQ1AGZoHfvy/X+/D6w8R
bnHpZIliY64txLqcnmMHhscgXLLUbQmvKF/fA+kOK0B+xTkobF2at9U8HBdEmLKa
qY0PboAwNC2h7Y+LMBEdoRdTB9y720qiYA09b4z49mPxpg+q0PF0d6tDlwDU2T/T
cPttIvxJjMlGAOg1qBkwz84fe8pIV9/zkgRf+pEf0jj1SinDHOLRIm12c/H9j7BH
1h+nEdoZFKt8fy/wqCoLvZ3nFw6nAgMBAAGjggK3MIICszAdBgNVHQ4EFgQUwbd2
YqthPXcIRlGBIjw95oxI5w4wHwYDVR0jBBgwFoAUA/5dcm806TzhqV2UUY4SI3rD
4sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkIzMjM0LzlFMTIxQzBDMjQxMDExRUNCMkQwNjk1NkQ4QTAxNENFL0FfNWRj
bTgwNlR6aHFWMlVVWTRTSTNyRDRzWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0FfNWRjbTgwNlR6aHFWMlVVWTRTSTNyRDRzWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkIzMjM0LzlFMTIxQzBDMjQxMDExRUNCMkQwNjk1NkQ4
QTAxNENFL0VBNkQ1MEUyODlGQTExRUVBMUZDMjkyNTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBABm2oADBABm2oIDBABm2xYD
BABm3H0wDQYJKoZIhvcNAQELBQADggEBALLwYvMiXSC08WPHa/X4toRiv1/qI5wL
d1FadSzixryb7Holk2MdXym0pc9Ro/y01wkU65TpsSdkx0B9SLfVwQMwajr8whIX
nwjz01AuNXqipr1hI3GvdxJmoKlmzSlN6uzhrjjnfetuIK5bqnxm7s0FEQf3ZHlV
PP5pLxkuGdbUFazAyD65OcFRZhss71s0IJgFeMQZGyTyfoXVyRApmDJ1dCW4sQMU
I3TcbTqXzDNZasFwUFiXeB3yt2tRw0ouoPOQy0Rh1ucMewp+RLgR2kI6akaaVEnj
oyEqZIC/dAuwcbGeGJhs0chYvg5I37XmVb2wR/gBxfGpO6zKo7aeSSU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org