Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/59D51980AC2F11EBBE60245AF8AEA228.roa
File: 59D51980AC2F11EBBE60245AF8AEA228.roa (raw, json)
Hash identifier: UpFz7mM7UuBQ1sRJypG1sbjSXnp6w57u+CKXfTGC+WM=
Subject key identifier: F3:41:D4:EB:D6:D4:D0:7F:8D:BC:BC:FA:47:AC:9E:7D:34:3C:77:72
Certificate issuer: /CN=F36B5804AF/serialNumber=C64EB41B03D4C13329B363F5A793F2CD9CB42CB7
Certificate serial: 02
Authority key identifier: C6:4E:B4:1B:03:D4:C1:33:29:B3:63:F5:A7:93:F2:CD:9C:B4:2C:B7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xk60GwPUwTMps2P1p5PyzZy0LLc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/59D51980AC2F11EBBE60245AF8AEA228.roa
Signing time: Mon 03 May 2021 16:48:13 +0000
ROA not before: Tue 04 May 2021 16:48:08 +0000
ROA not after: Sun 01 Jan 2040 16:48:08 +0000
asID: 328381
IP address blocks: 102.130.248.0/21 maxlen: 21
102.130.248.0/22 maxlen: 22
102.130.248.0/24 maxlen: 24
102.130.249.0/24 maxlen: 24
102.130.250.0/24 maxlen: 24
102.130.251.0/24 maxlen: 24
102.130.252.0/22 maxlen: 22
102.130.252.0/24 maxlen: 24
102.130.253.0/24 maxlen: 24
102.130.254.0/24 maxlen: 24
102.130.255.0/24 maxlen: 24
2001:43f8:11d0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B5804AF/serialNumber=C64EB41B03D4C13329B363F5A793F2CD9CB42CB7
Validity
Not Before: May 4 16:48:08 2021 GMT
Not After : Jan 1 16:48:08 2040 GMT
Subject: CN=6090294d-6fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:68:a1:e3:b4:e4:9c:00:7f:23:aa:47:ba:22:
52:52:86:19:72:00:bb:f3:86:46:8c:86:91:48:68:
eb:77:46:d9:36:49:55:e3:57:5c:d8:31:28:74:a6:
09:32:38:f3:b7:ad:a7:81:9b:0d:31:f5:67:9a:8c:
1b:c3:38:5a:2b:25:1c:17:51:87:60:77:b8:b5:24:
59:4e:42:c4:6e:1c:93:99:07:99:9b:68:3c:fc:ee:
b6:d4:58:b0:c2:8a:11:9a:56:07:e3:e3:e4:9e:b2:
45:24:76:3d:46:9a:bd:db:f1:13:2a:52:20:75:b4:
0d:37:84:29:1c:c2:2f:fa:e0:b5:c8:09:1b:fd:23:
d9:79:6a:f1:a0:93:31:fb:40:89:ca:1e:ee:d8:57:
e2:86:e5:36:e1:d0:61:13:cb:c2:d2:f0:37:f8:3b:
e7:a0:3a:26:58:c4:ca:db:cf:63:e3:23:14:ea:bc:
54:11:92:e2:1f:5f:37:d0:d5:84:20:e4:89:4a:0e:
b7:3b:45:17:68:de:f6:22:a1:34:23:e1:68:c7:04:
ee:f1:3e:8e:62:4b:eb:52:d4:78:8d:dd:90:79:e6:
a7:c5:42:e5:01:04:e6:48:af:7c:9d:8f:56:42:6e:
1f:46:91:72:43:de:f4:7b:2a:e2:96:9c:d8:80:5b:
c8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:41:D4:EB:D6:D4:D0:7F:8D:BC:BC:FA:47:AC:9E:7D:34:3C:77:72
X509v3 Authority Key Identifier:
keyid:C6:4E:B4:1B:03:D4:C1:33:29:B3:63:F5:A7:93:F2:CD:9C:B4:2C:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xk60GwPUwTMps2P1p5PyzZy0LLc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/59D51980AC2F11EBBE60245AF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.130.248.0/21
IPv6:
2001:43f8:11d0::/48
Signature Algorithm: sha256WithRSAEncryption
2f:84:8c:0a:20:34:53:88:bc:11:8e:b3:8f:28:22:d4:af:76:
de:19:1b:c4:f9:94:cb:70:82:b6:05:31:ba:83:0e:c2:9f:b4:
59:1c:51:9a:51:93:ae:85:ca:ee:47:29:7c:1c:64:05:23:16:
41:83:72:15:50:a3:d0:b9:59:3e:0b:f0:2d:90:c1:d1:4d:8d:
ac:9d:71:f8:51:8d:6c:fe:53:bf:6a:85:ec:0d:ab:ab:56:d0:
19:3e:c1:a7:90:e1:d1:96:05:3b:75:72:d2:13:cb:cf:21:e0:
bb:53:07:2b:20:6f:3e:79:3d:47:63:31:a4:2c:73:de:9e:18:
7d:b7:70:95:97:50:6e:ea:c8:7e:c0:74:be:6f:12:dd:15:4f:
22:34:69:be:04:1b:e9:45:62:ec:3b:a9:45:11:c1:76:6d:fb:
e2:13:97:82:b1:38:a1:5a:dd:e7:fb:35:4f:94:7a:e2:a2:11:
60:77:14:f2:33:e4:ae:c3:28:90:57:36:ab:5c:fe:13:1d:02:
e1:d0:b0:d7:22:dc:e7:01:ab:62:04:55:b1:ed:85:a8:12:53:
92:e3:a7:53:7f:ed:db:40:b3:5e:2b:9e:83:75:63:8d:b9:e0:
7f:cb:6d:9b:4c:9d:04:97:91:2d:09:0e:a3:ab:88:50:46:c1:
2e:b5:2a:48
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZC
NTgwNEFGMTEwLwYDVQQFEyhDNjRFQjQxQjAzRDRDMTMzMjlCMzYzRjVBNzkzRjJD
RDlDQjQyQ0I3MB4XDTIxMDUwNDE2NDgwOFoXDTQwMDEwMTE2NDgwOFowGDEWMBQG
A1UEAxMNNjA5MDI5NGQtNmZkZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOxooeO05JwAfyOqR7oiUlKGGXIAu/OGRoyGkUho63dG2TZJVeNXXNgxKHSm
CTI487etp4GbDTH1Z5qMG8M4WislHBdRh2B3uLUkWU5CxG4ck5kHmZtoPPzuttRY
sMKKEZpWB+Pj5J6yRSR2PUaavdvxEypSIHW0DTeEKRzCL/rgtcgJG/0j2Xlq8aCT
MftAicoe7thX4oblNuHQYRPLwtLwN/g756A6JljEytvPY+MjFOq8VBGS4h9fN9DV
hCDkiUoOtztFF2je9iKhNCPhaMcE7vE+jmJL61LUeI3dkHnmp8VC5QEE5kivfJ2P
VkJuH0aRckPe9Hsq4pac2IBbyIUCAwEAAaOCArYwggKyMB0GA1UdDgQWBBTzQdTr
1tTQf428vPpHrJ59NDx3cjAfBgNVHSMEGDAWgBTGTrQbA9TBMymzY/Wnk/LNnLQs
tzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QjU4MDQvRDc0RTQyRkFBQzJCMTFFQkFERjQ4QjU1RjhBRUEyMjgveGs2MEd3
UFV3VE1wczJQMXA1UHl6WnkwTExjLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMveGs2MEd3UFV3VE1wczJQMXA1UHl6WnkwTExjLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjU4MDQvRDc0RTQyRkFBQzJCMTFFQkFERjQ4QjU1RjhB
RUEyMjgvNTlENTE5ODBBQzJGMTFFQkJFNjAyNDVBRjhBRUEyMjgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA2aC+DAPBAIAAjAJAwcAIAFD
+BHQMA0GCSqGSIb3DQEBCwUAA4IBAQAvhIwKIDRTiLwRjrOPKCLUr3beGRvE+ZTL
cIK2BTG6gw7Cn7RZHFGaUZOuhcruRyl8HGQFIxZBg3IVUKPQuVk+C/AtkMHRTY2s
nXH4UY1s/lO/aoXsDaurVtAZPsGnkOHRlgU7dXLSE8vPIeC7UwcrIG8+eT1HYzGk
LHPenhh9t3CVl1Bu6sh+wHS+bxLdFU8iNGm+BBvpRWLsO6lFEcF2bfviE5eCsTih
Wt3n+zVPlHriohFgdxTyM+SuwyiQVzarXP4THQLh0LDXItznAatiBFWx7YWoElOS
46dTf+3bQLNeK56DdWONueB/y22bTJ0El5EtCQ6jq4hQRsEutSpI
-----END CERTIFICATE-----
Generated at Wed Jan 3 15:41:59 2024 by rpki-client on console-ams.rpki-client.org