Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/AE5704B460FB11EDA33EFF9CF1222468.roa
File: AE5704B460FB11EDA33EFF9CF1222468.roa (raw, json)
Hash identifier: u8Fm0gXJxsC6/48ilFwosBbT2FekofE+jOjqTnssnbk=
Subject key identifier: 6B:08:E5:F3:53:53:BF:BC:CD:AB:AF:6C:BE:52:36:3E:59:9E:CF:62
Certificate issuer: /CN=F36BD4F1AF/serialNumber=85B0B18A318E5A75D04D1A0AA77EFF9505228924
Certificate serial: 02D9
Authority key identifier: 85:B0:B1:8A:31:8E:5A:75:D0:4D:1A:0A:A7:7E:FF:95:05:22:89:24
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/AE5704B460FB11EDA33EFF9CF1222468.roa
Signing time: Thu 10 Nov 2022 13:29:20 +0000
ROA not before: Thu 10 Nov 2022 13:29:16 +0000
ROA not after: Tue 30 Nov 2032 13:29:16 +0000
asID: 328745
IP address blocks: 102.221.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 May 2024 12:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 729 (0x2d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BD4F1AF/serialNumber=85B0B18A318E5A75D04D1A0AA77EFF9505228924
Validity
Not Before: Nov 10 13:29:16 2022 GMT
Not After : Nov 30 13:29:16 2032 GMT
Subject: CN=636cfcb0-21e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:4b:c6:eb:40:9c:c1:43:9d:c8:f0:ee:8d:01:
a6:d1:b2:13:14:dd:13:1d:4f:e5:b1:3d:fa:35:b8:
bd:f6:7f:82:57:8b:37:e4:51:49:de:77:8c:f2:31:
b4:73:35:f6:ef:b6:5a:e7:a4:b1:33:18:d4:81:55:
53:46:24:75:f4:b5:d6:15:7a:c6:2a:ef:ff:a3:82:
a6:16:ef:13:1f:4d:8e:50:08:51:56:77:c3:06:09:
72:35:23:6f:44:2d:11:0d:18:d7:28:85:9d:ff:97:
43:b1:81:7f:90:fe:d6:2d:74:09:00:f0:59:db:73:
89:cf:af:d3:a9:a1:f5:61:f1:4e:8b:3f:36:5c:c9:
b3:dd:27:04:62:38:8a:3c:f0:a1:71:d7:6b:71:3b:
60:a7:63:fd:39:7e:e4:aa:ba:ab:25:48:92:ea:ef:
8e:b7:c6:fa:50:fb:e7:bb:26:d9:29:f1:b3:45:75:
c7:e0:1c:d0:fd:8a:9d:24:03:a0:d3:90:bb:90:21:
a4:a1:38:fe:f1:cf:9b:e3:c1:7c:f9:79:60:9d:13:
c2:fa:6d:38:51:89:be:de:c5:ca:a9:61:73:2f:d5:
5e:09:e0:14:4d:aa:e3:76:a3:ec:cd:8d:e6:41:56:
42:cb:86:f7:c3:69:23:fd:9b:14:fe:d4:c9:a5:48:
d7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:08:E5:F3:53:53:BF:BC:CD:AB:AF:6C:BE:52:36:3E:59:9E:CF:62
X509v3 Authority Key Identifier:
keyid:85:B0:B1:8A:31:8E:5A:75:D0:4D:1A:0A:A7:7E:FF:95:05:22:89:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/AE5704B460FB11EDA33EFF9CF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.221.154.0/24
Signature Algorithm: sha256WithRSAEncryption
28:1a:24:de:dd:d0:d7:df:06:36:cf:c3:c5:5a:7f:11:b9:ef:
e3:9a:37:2f:3e:11:3c:e1:61:b0:b4:75:8a:02:c7:b7:60:9d:
02:30:69:22:31:1c:f7:aa:45:9f:16:a6:68:03:88:42:5a:ba:
3f:5b:99:67:0d:26:2c:1c:44:df:e6:02:2e:6e:42:cc:78:7d:
e1:6a:02:32:6d:e1:25:2a:72:38:28:eb:31:89:25:39:ea:ce:
2c:c4:ab:f3:db:79:fb:93:de:0f:52:af:b6:32:53:20:bf:60:
3a:0c:3d:2f:f9:d3:1f:63:e8:19:7d:9c:65:ca:44:ff:38:d8:
e5:f0:51:1c:f2:27:70:e8:fe:a3:9e:09:9f:18:67:73:82:a2:
19:53:4f:d1:45:33:2d:f5:1b:db:64:05:49:cc:dc:1a:75:bd:
04:53:f5:38:cf:69:1d:d8:f1:f2:24:10:f6:a4:ae:88:d2:b6:
4c:4e:a2:9d:d2:08:56:20:e8:1e:63:fe:5d:61:ec:0c:87:16:
01:e3:36:2c:17:8f:a3:94:c7:f1:7b:9a:95:ef:e7:e2:8e:43:
9a:53:6b:b4:50:03:b3:8c:74:6f:ae:bc:15:36:c5:0e:16:01:
0d:05:74:73:64:e3:fb:4b:0c:18:2d:ba:f0:a2:c3:48:1b:43:
9c:7d:b8:77
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAtkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QkQ0RjFBRjExMC8GA1UEBRMoODVCMEIxOEEzMThFNUE3NUQwNEQxQTBBQTc3RUZG
OTUwNTIyODkyNDAeFw0yMjExMTAxMzI5MTZaFw0zMjExMzAxMzI5MTZaMBgxFjAU
BgNVBAMMDTYzNmNmY2IwLTIxZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD0S8brQJzBQ53I8O6NAabRshMU3RMdT+WxPfo1uL32f4JXizfkUUned4zy
MbRzNfbvtlrnpLEzGNSBVVNGJHX0tdYVesYq7/+jgqYW7xMfTY5QCFFWd8MGCXI1
I29ELRENGNcohZ3/l0OxgX+Q/tYtdAkA8Fnbc4nPr9OpofVh8U6LPzZcybPdJwRi
OIo88KFx12txO2CnY/05fuSquqslSJLq7463xvpQ++e7Jtkp8bNFdcfgHND9ip0k
A6DTkLuQIaShOP7xz5vjwXz5eWCdE8L6bThRib7excqpYXMv1V4J4BRNquN2o+zN
jeZBVkLLhvfDaSP9mxT+1MmlSNc3AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUawjl
81NTv7zNq69svlI2Plmez2IwHwYDVR0jBBgwFoAUhbCxijGOWnXQTRoKp37/lQUi
iSQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJENEYxLzBCMjg2OTg0MzU4QTExRUJBM0RFNjc3MkY4QUVBMjI4L2hiQ3hp
akdPV25YUVRSb0twMzdfbFFVaWlTUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hiQ3hpakdPV25YUVRSb0twMzdfbFFVaWlTUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkJENEYxLzBCMjg2OTg0MzU4QTExRUJBM0RFNjc3MkY4
QUVBMjI4L0FFNTcwNEI0NjBGQjExRURBMzNFRkY5Q0YxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm3ZowDQYJKoZIhvcNAQEL
BQADggEBACgaJN7d0NffBjbPw8VafxG57+OaNy8+ETzhYbC0dYoCx7dgnQIwaSIx
HPeqRZ8WpmgDiEJauj9bmWcNJiwcRN/mAi5uQsx4feFqAjJt4SUqcjgo6zGJJTnq
zizEq/PbefuT3g9Sr7YyUyC/YDoMPS/50x9j6Bl9nGXKRP842OXwURzyJ3Do/qOe
CZ8YZ3OCohlTT9FFMy31G9tkBUnM3Bp1vQRT9TjPaR3Y8fIkEPakrojStkxOop3S
CFYg6B5j/l1h7AyHFgHjNiwXj6OUx/F7mpXv5+KOQ5pTa7RQA7OMdG+uvBU2xQ4W
AQ0FdHNk4/tLDBgtuvCiw0gbQ5x9uHc=
-----END CERTIFICATE-----
Generated at Fri May 3 14:21:11 2024 by rpki-client on console-ams.rpki-client.org