Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/012AE6A41DAF11EEAE21DD184AD9E6FC.roa
File: 012AE6A41DAF11EEAE21DD184AD9E6FC.roa (raw, json)
Hash identifier: 0vt0twpN+UfBe1NTNSXERoWW2u8YMyRzgTDGG96UQDE=
Subject key identifier: B5:F8:F4:DE:60:4C:CB:33:11:35:AA:10:B7:67:71:AC:EF:D0:E6:29
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0C5F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/012AE6A41DAF11EEAE21DD184AD9E6FC.roa
Signing time: Sat 08 Jul 2023 16:46:37 +0000
ROA not before: Sat 08 Jul 2023 16:46:32 +0000
ROA not after: Mon 07 Jul 2025 16:46:32 +0000
asID: 34465
IP address blocks: 102.129.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jul 2023 10:33:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3167 (0xc5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 8 16:46:32 2023 GMT
Not After : Jul 7 16:46:32 2025 GMT
Subject: CN=64a992ed-9a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e3:98:4d:98:f0:48:2d:a7:38:53:8a:37:94:
de:29:ab:7a:d8:3d:20:20:49:91:0b:9f:b0:69:ea:
df:40:7c:60:c8:de:fc:4d:57:aa:cc:82:fd:d4:4e:
a7:5a:0a:58:a1:52:35:ac:43:74:8c:ed:76:cf:db:
9b:68:76:8f:3b:bd:b8:30:5e:91:b8:a4:7f:fb:ad:
40:f8:50:0b:c8:68:e1:f2:49:59:d2:f8:cc:04:a9:
95:c4:fe:f0:8d:64:47:15:cb:4b:08:b1:a9:93:2d:
c3:24:a9:ec:7d:ba:24:83:ae:49:76:52:63:b5:bf:
d1:0d:a8:db:84:ed:9c:a7:a4:a7:4d:85:bb:ee:73:
2c:c4:f0:12:73:75:dc:f8:1d:ad:96:3f:6d:d0:04:
52:02:09:71:95:7f:5b:c7:0d:63:bc:70:ea:74:53:
2e:1a:c4:2e:67:a5:34:08:6f:8f:b1:df:29:1b:0e:
78:68:98:15:37:fb:0a:ac:ce:99:96:d3:0c:8f:59:
9e:54:11:a1:80:5c:39:23:79:6c:71:98:b4:8e:54:
73:e7:5c:67:73:c2:0c:b2:cf:c8:fa:aa:b8:f4:ed:
c2:3a:a6:3f:ef:05:da:a3:70:e9:62:9c:0e:bf:bd:
57:1f:e0:c4:03:c8:a0:c5:c3:5e:94:da:c6:81:cd:
85:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F8:F4:DE:60:4C:CB:33:11:35:AA:10:B7:67:71:AC:EF:D0:E6:29
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/012AE6A41DAF11EEAE21DD184AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.190.0/24
Signature Algorithm: sha256WithRSAEncryption
31:6e:68:21:d3:ab:02:07:8c:bf:df:6d:82:5b:bd:54:9c:e9:
4b:a7:61:8d:23:c6:51:87:67:c0:e5:6f:c4:fe:0a:2e:a1:2b:
7a:a5:20:a1:da:16:5b:4e:fb:b6:18:b2:e8:68:06:a7:4e:47:
54:08:22:59:3b:40:8f:cc:2c:f7:dd:38:8f:8e:e0:0c:de:f8:
0a:e7:1a:22:c5:a3:46:17:0d:53:48:67:25:32:91:ea:c7:3c:
93:f5:7a:37:ec:6a:4c:df:83:06:55:d9:ff:b4:b2:12:1e:b4:
46:b1:6e:c5:ae:aa:7f:b4:2d:b3:cb:4d:b3:c7:9f:a9:fa:07:
7a:c1:17:6f:1b:85:df:ac:35:aa:75:62:ba:20:49:4d:d3:62:
61:fb:42:b6:b6:4a:30:af:24:b9:39:b3:01:f9:dd:0f:43:1e:
07:d5:e3:cc:84:22:37:7d:e6:8f:a0:15:aa:1e:db:35:67:3c:
c9:5a:27:4b:17:b9:c3:2f:b8:63:78:53:5d:96:b1:da:5e:f2:
72:b6:ea:c0:16:6e:4c:09:dd:d4:89:17:91:04:06:0e:90:81:
69:14:c6:07:61:ce:b0:de:9d:c4:5d:89:3e:1f:0c:e8:6b:cc:
75:40:38:99:77:aa:c7:54:93:6a:ea:6b:24:f2:15:43:6b:fd:
01:27:aa:ac
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDF8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzA3MDgxNjQ2MzJaFw0yNTA3MDcxNjQ2MzJaMBgxFjAU
BgNVBAMTDTY0YTk5MmVkLTlhOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCb45hNmPBILac4U4o3lN4pq3rYPSAgSZELn7Bp6t9AfGDI3vxNV6rMgv3U
TqdaClihUjWsQ3SM7XbP25todo87vbgwXpG4pH/7rUD4UAvIaOHySVnS+MwEqZXE
/vCNZEcVy0sIsamTLcMkqex9uiSDrkl2UmO1v9ENqNuE7ZynpKdNhbvucyzE8BJz
ddz4Ha2WP23QBFICCXGVf1vHDWO8cOp0Uy4axC5npTQIb4+x3ykbDnhomBU3+wqs
zpmW0wyPWZ5UEaGAXDkjeWxxmLSOVHPnXGdzwgyyz8j6qrj07cI6pj/vBdqjcOli
nA6/vVcf4MQDyKDFw16U2saBzYXjAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUtfj0
3mBMyzMRNaoQt2dxrO/Q5ikwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzAxMkFFNkE0MURBRjExRUVBRTIxREQxODRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgb4wDQYJKoZIhvcNAQEL
BQADggEBADFuaCHTqwIHjL/fbYJbvVSc6UunYY0jxlGHZ8Dlb8T+Ci6hK3qlIKHa
FltO+7YYsuhoBqdOR1QIIlk7QI/MLPfdOI+O4Aze+ArnGiLFo0YXDVNIZyUykerH
PJP1ejfsakzfgwZV2f+0shIetEaxbsWuqn+0LbPLTbPHn6n6B3rBF28bhd+sNap1
YrogSU3TYmH7Qra2SjCvJLk5swH53Q9DHgfV48yEIjd95o+gFaoe2zVnPMlaJ0sX
ucMvuGN4U12Wsdpe8nK26sAWbkwJ3dSJF5EEBg6QgWkUxgdhzrDencRdiT4fDOhr
zHVAOJl3qsdUk2rqayTyFUNr/QEnqqw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org