Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/09514C08308511EF8DC365A8762E951A.roa
File: 09514C08308511EF8DC365A8762E951A.roa (raw, json)
Hash identifier: yDsNpGC99PATstnRROi8kp2XcPF76JlmWKxWy6fTNpA=
Subject key identifier: AF:8F:9C:5F:F0:38:6F:3F:31:F0:22:3E:E7:E0:0F:2D:69:B3:4E:21
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 110B
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/09514C08308511EF8DC365A8762E951A.roa
Signing time: Sat 22 Jun 2024 10:49:02 +0000
ROA not before: Sat 22 Jun 2024 10:48:59 +0000
ROA not after: Mon 22 Jun 2026 10:48:59 +0000
asID: 11170
IP address blocks: 102.129.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jul 2024 05:28:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4363 (0x110b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 22 10:48:59 2024 GMT
Not After : Jun 22 10:48:59 2026 GMT
Subject: CN=6676ac1e-755f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f6:b8:bd:01:ac:65:cf:aa:02:d5:d6:cd:25:
0a:9b:d1:6e:83:15:cd:59:9a:bd:fc:50:96:47:6c:
1f:ad:db:52:86:9f:4b:ba:12:33:01:83:08:c7:8c:
a6:c2:22:06:df:fd:7f:1b:aa:ed:89:72:f4:72:44:
80:33:0e:09:17:4b:64:f5:cb:72:a7:74:f2:f5:e4:
40:78:ba:26:e1:42:5a:23:83:6e:61:a8:a7:70:61:
4a:09:69:97:07:b7:66:21:f4:72:67:e3:da:65:99:
6a:31:19:69:9d:83:b0:99:6d:c4:e0:61:57:c3:0a:
9f:08:60:b0:b5:09:62:04:69:05:66:75:8c:fa:00:
88:e7:96:88:18:ac:a6:4e:4b:55:b4:71:b2:b3:8c:
31:8e:18:c3:b8:0a:45:06:05:99:4c:76:f5:42:72:
55:03:66:da:c1:f0:b2:23:41:7b:7a:1a:4e:1e:62:
a6:41:4e:75:1a:15:50:af:c8:5b:b4:9a:71:03:11:
11:87:d2:ac:04:04:ec:2e:27:17:f9:20:c1:a5:f6:
0f:a6:22:0d:90:8b:5e:ee:8d:74:cd:55:36:5b:eb:
d7:c7:6e:17:d1:24:23:f8:79:a0:16:fb:39:df:86:
67:6d:0f:ec:c6:27:17:c7:a7:36:3d:c2:67:28:71:
d8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8F:9C:5F:F0:38:6F:3F:31:F0:22:3E:E7:E0:0F:2D:69:B3:4E:21
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/09514C08308511EF8DC365A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.237.0/24
Signature Algorithm: sha256WithRSAEncryption
41:21:a0:db:2c:63:e5:55:26:18:c4:ef:4e:8a:ef:4b:5f:54:
3d:b7:bb:bc:20:a7:31:a4:3b:38:e6:1f:1f:68:db:83:0e:87:
bf:8f:e7:c3:8b:c4:23:73:21:b2:e3:da:b3:01:27:af:28:af:
5f:de:a0:94:a1:56:a5:5e:b7:33:81:44:1c:d8:78:f4:94:06:
23:13:a8:ed:17:34:25:10:64:e1:3c:a6:ef:07:1d:c1:b3:37:
bd:fc:6c:23:70:f9:9b:13:6e:cc:97:fb:d4:b5:ec:f8:c9:57:
a3:0a:36:97:39:62:c2:96:3e:7e:05:e8:d2:d7:e5:a4:fa:5f:
d1:c0:86:b4:fd:fe:23:77:60:24:0b:f3:45:05:2a:0a:bb:bb:
71:e8:d5:c7:58:13:50:16:39:e3:9b:16:c1:b1:04:7c:48:ec:
2a:28:4a:24:03:93:83:d7:fc:fb:21:67:f8:0d:18:9e:23:56:
15:23:b7:03:e3:1a:33:0f:22:aa:67:48:d3:42:a5:89:4f:53:
8f:62:7e:3c:2b:ce:6a:fc:76:66:65:b9:29:d8:27:2a:e6:e5:
78:e2:9f:b6:03:f8:ea:13:9c:56:3f:ff:3c:28:aa:f6:7c:de:
c6:44:ed:c7:79:c7:12:07:58:61:73:51:3f:82:94:c2:be:cd:
bb:21:3e:b8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEQswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNDA2MjIxMDQ4NTlaFw0yNjA2MjIxMDQ4NTlaMBgxFjAU
BgNVBAMTDTY2NzZhYzFlLTc1NWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCy9ri9Aaxlz6oC1dbNJQqb0W6DFc1Zmr38UJZHbB+t21KGn0u6EjMBgwjH
jKbCIgbf/X8bqu2JcvRyRIAzDgkXS2T1y3KndPL15EB4uibhQlojg25hqKdwYUoJ
aZcHt2Yh9HJn49plmWoxGWmdg7CZbcTgYVfDCp8IYLC1CWIEaQVmdYz6AIjnlogY
rKZOS1W0cbKzjDGOGMO4CkUGBZlMdvVCclUDZtrB8LIjQXt6Gk4eYqZBTnUaFVCv
yFu0mnEDERGH0qwEBOwuJxf5IMGl9g+mIg2Qi17ujXTNVTZb69fHbhfRJCP4eaAW
+znfhmdtD+zGJxfHpzY9wmcocdhxAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUr4+c
X/A4bz8x8CI+5+APLWmzTiEwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzA5NTE0QzA4MzA4NTExRUY4REMzNjVBODc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmge0wDQYJKoZIhvcNAQEL
BQADggEBAEEhoNssY+VVJhjE706K70tfVD23u7wgpzGkOzjmHx9o24MOh7+P58OL
xCNzIbLj2rMBJ68or1/eoJShVqVetzOBRBzYePSUBiMTqO0XNCUQZOE8pu8HHcGz
N738bCNw+ZsTbsyX+9S17PjJV6MKNpc5YsKWPn4F6NLX5aT6X9HAhrT9/iN3YCQL
80UFKgq7u3Ho1cdYE1AWOeObFsGxBHxI7CooSiQDk4PX/PshZ/gNGJ4jVhUjtwPj
GjMPIqpnSNNCpYlPU49ifjwrzmr8dmZluSnYJyrm5Xjin7YD+OoTnFY//zwoqvZ8
3sZE7cd5xxIHWGFzUT+ClMK+zbshPrg=
-----END CERTIFICATE-----
Generated at Mon Jul 22 07:23:45 2024 by rpki-client on console-fra.rpki-client.org