Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/9B03DEA0C03111EE9B102A88775412E6.roa
File: 9B03DEA0C03111EE9B102A88775412E6.roa (raw, json)
Hash identifier: UGUq20VZu78CYjutpQi8XnOT5YXZZhACFgjuzIGC/WY=
Subject key identifier: CC:F5:86:82:EB:86:E1:61:9B:C6:A0:EF:AC:E8:0A:AA:D1:94:75:15
Certificate issuer: /CN=F36C3A58AF/serialNumber=E15F50DDD28E02FD6E6966D5918D1B0BBF4684E8
Certificate serial: 2A
Authority key identifier: E1:5F:50:DD:D2:8E:02:FD:6E:69:66:D5:91:8D:1B:0B:BF:46:84:E8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4V9Q3dKOAv1uaWbVkY0bC79GhOg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/9B03DEA0C03111EE9B102A88775412E6.roa
Signing time: Wed 31 Jan 2024 12:09:38 +0000
ROA not before: Wed 31 Jan 2024 12:09:34 +0000
ROA not after: Fri 31 Jan 2025 12:09:34 +0000
asID: 21003
IP address blocks: 102.220.142.0/24 maxlen: 24
102.220.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 14:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C3A58AF/serialNumber=E15F50DDD28E02FD6E6966D5918D1B0BBF4684E8
Validity
Not Before: Jan 31 12:09:34 2024 GMT
Not After : Jan 31 12:09:34 2025 GMT
Subject: CN=65ba3882-3bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:21:be:7a:8b:c4:18:dd:9a:f1:0f:33:44:e0:
47:ff:8d:b7:eb:40:58:b7:6a:3e:ae:c9:cc:25:91:
fd:01:35:91:52:55:b1:b5:9c:cb:32:bc:dc:40:e1:
d4:da:cd:4a:67:82:e8:7c:27:39:9d:04:b6:53:7a:
9e:51:0f:e4:05:5e:e8:d6:0e:83:fd:e8:f1:d1:0c:
fd:f5:7f:af:9b:02:9a:82:b3:ef:2c:4e:85:c6:7c:
83:87:5a:24:c5:3e:e3:91:be:7f:2e:97:39:ab:e7:
53:8a:a2:56:df:5b:b4:71:e5:e5:cd:0b:1b:44:50:
2d:90:fc:18:e9:47:f0:aa:c3:36:fa:d1:83:6c:ff:
d9:e1:56:ac:25:9f:76:a4:27:4a:9a:59:5b:78:3b:
e4:37:37:20:da:f8:27:1e:78:e2:b2:c8:be:e1:13:
7a:12:a3:c0:1c:f4:f9:19:59:f8:66:09:9f:5e:89:
f2:bf:75:4a:c5:a5:bc:f9:d8:a8:8d:2c:17:fd:52:
7b:c8:0c:a0:ae:e8:24:41:99:9f:5a:a5:5e:db:55:
22:03:ab:d7:f9:25:b6:5f:7e:43:d4:b3:0f:85:eb:
91:74:21:24:77:fb:05:1e:a5:ec:67:63:d3:56:0f:
1c:bf:6d:b3:56:55:48:62:ec:9b:8e:f8:b7:7a:1d:
cb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F5:86:82:EB:86:E1:61:9B:C6:A0:EF:AC:E8:0A:AA:D1:94:75:15
X509v3 Authority Key Identifier:
keyid:E1:5F:50:DD:D2:8E:02:FD:6E:69:66:D5:91:8D:1B:0B:BF:46:84:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4V9Q3dKOAv1uaWbVkY0bC79GhOg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/9B03DEA0C03111EE9B102A88775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.142.0/23
Signature Algorithm: sha256WithRSAEncryption
51:e8:5f:3c:cd:f1:9b:71:4d:dc:87:22:21:e1:dd:80:94:5c:
20:45:f0:80:1b:9f:38:93:5b:6a:3e:a5:25:0e:87:6a:a3:f3:
d1:29:f4:ba:dc:81:3f:cb:59:34:13:2f:d3:f3:3f:45:6a:41:
87:2c:0a:df:8f:62:2f:9a:3e:8e:bb:1c:8e:1e:ec:85:a4:63:
cf:f7:8f:02:50:2b:25:40:a8:6c:ea:33:d7:de:9c:d4:df:21:
0e:cc:26:1b:38:f3:7b:d8:27:fc:6f:e5:47:04:fa:ed:d7:16:
5c:03:a1:74:7f:6f:8b:36:06:a4:50:db:c9:14:22:e9:9b:b8:
84:33:30:ff:a3:3b:e0:80:40:f2:93:04:63:a0:a8:ac:0b:96:
f0:42:52:5b:ad:8e:e0:80:90:d4:1d:12:b8:c4:a2:8b:41:11:
9c:44:03:03:c6:18:3a:6b:33:45:3c:16:84:a2:a2:58:7c:08:
d0:95:5f:d6:7f:e1:f1:5e:4f:8e:e5:66:d7:c9:90:b7:b7:0d:
c1:fc:0d:71:e0:08:23:55:e9:34:d3:bb:8c:d8:e9:f4:75:35:
ac:9b:15:c0:da:12:59:f3:81:b2:8c:2b:38:64:22:36:52:c2:
7c:23:55:73:b1:5e:a2:7c:71:96:4f:e6:38:4f:13:d9:32:c9:
c6:67:b3:b8
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBKjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZD
M0E1OEFGMTEwLwYDVQQFEyhFMTVGNTBEREQyOEUwMkZENkU2OTY2RDU5MThEMUIw
QkJGNDY4NEU4MB4XDTI0MDEzMTEyMDkzNFoXDTI1MDEzMTEyMDkzNFowGDEWMBQG
A1UEAxMNNjViYTM4ODItM2JjZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMQhvnqLxBjdmvEPM0TgR/+Nt+tAWLdqPq7JzCWR/QE1kVJVsbWcyzK83EDh
1NrNSmeC6HwnOZ0EtlN6nlEP5AVe6NYOg/3o8dEM/fV/r5sCmoKz7yxOhcZ8g4da
JMU+45G+fy6XOavnU4qiVt9btHHl5c0LG0RQLZD8GOlH8KrDNvrRg2z/2eFWrCWf
dqQnSppZW3g75Dc3INr4Jx544rLIvuETehKjwBz0+RlZ+GYJn16J8r91SsWlvPnY
qI0sF/1Se8gMoK7oJEGZn1qlXttVIgOr1/kltl9+Q9SzD4XrkXQhJHf7BR6l7Gdj
01YPHL9ts1ZVSGLsm474t3ody3UCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBTM9YaC
64bhYZvGoO+s6Aqq0ZR1FTAfBgNVHSMEGDAWgBThX1Dd0o4C/W5pZtWRjRsLv0aE
6DAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QzNBNTgvMUI3OEM2MENBOEJGMTFFRUJCM0NBODU1Nzc1NDEyRTYvNFY5UTNk
S09BdjF1YVdiVmtZMGJDNzlHaE9nLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvNFY5UTNkS09BdjF1YVdiVmtZMGJDNzlHaE9nLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzNBNTgvMUI3OEM2MENBOEJGMTFFRUJCM0NBODU1Nzc1
NDEyRTYvOUIwM0RFQTBDMDMxMTFFRTlCMTAyQTg4Nzc1NDEyRTYucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWbcjjANBgkqhkiG9w0BAQsF
AAOCAQEAUehfPM3xm3FN3IciIeHdgJRcIEXwgBufOJNbaj6lJQ6HaqPz0Sn0utyB
P8tZNBMv0/M/RWpBhywK349iL5o+jrscjh7shaRjz/ePAlArJUCobOoz196c1N8h
DswmGzjze9gn/G/lRwT67dcWXAOhdH9vizYGpFDbyRQi6Zu4hDMw/6M74IBA8pME
Y6CorAuW8EJSW62O4ICQ1B0SuMSii0ERnEQDA8YYOmszRTwWhKKiWHwI0JVf1n/h
8V5PjuVm18mQt7cNwfwNceAII1XpNNO7jNjp9HU1rJsVwNoSWfOBsowrOGQiNlLC
fCNVc7Feonxxlk/mOE8T2TLJxmezuA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org