Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/18AE4DF20D7A11ED80DF0C7DF1222468.roa
File: 18AE4DF20D7A11ED80DF0C7DF1222468.roa (raw, json)
Hash identifier: Fj05dzekUuTCrt+/B1xJEkCX9dSW9i/jdsLGftH4okI=
Subject key identifier: 00:9D:93:BA:5A:60:1B:F6:F4:20:B6:6F:5C:E6:5E:3A:44:74:23:06
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 074C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/18AE4DF20D7A11ED80DF0C7DF1222468.roa
Signing time: Wed 27 Jul 2022 07:02:37 +0000
ROA not before: Wed 27 Jul 2022 07:02:33 +0000
ROA not after: Thu 25 Jul 2024 07:02:33 +0000
asID: 46573
IP address blocks: 102.129.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1868 (0x74c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 27 07:02:33 2022 GMT
Not After : Jul 25 07:02:33 2024 GMT
Subject: CN=62e0e30d-2380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:02:7a:61:21:b1:73:38:ab:ad:34:41:51:c3:
64:35:17:88:f1:6b:60:72:4e:35:9a:49:85:b4:43:
0b:9f:b8:49:b0:b6:b9:cf:fb:94:98:fb:27:84:50:
0f:68:69:89:56:29:1a:7a:79:56:28:a7:35:c0:f4:
0f:ef:64:fd:d0:b8:51:ae:5e:79:b2:59:8e:69:ad:
56:70:9c:37:2b:14:b9:73:f2:29:05:0b:71:b6:52:
bf:e3:a7:30:7f:8e:03:93:83:14:14:b1:43:89:28:
8e:22:6d:8b:24:35:7e:7b:ba:84:e3:a1:54:50:0f:
da:56:9f:e8:42:a5:22:eb:c7:b4:4e:f2:c2:c4:03:
b8:c7:d8:3a:39:35:32:1b:6d:28:67:5d:b9:f9:f7:
b8:e7:21:f1:e4:68:8d:6e:93:a1:13:8f:d9:98:55:
07:5c:e6:d0:ac:ec:2e:3d:b0:74:43:e9:64:33:17:
12:8e:66:4e:e0:68:91:18:b5:4d:0e:d4:50:bd:5f:
a9:c6:cd:48:c1:05:29:14:ff:f5:c4:33:15:ed:32:
07:12:93:0d:f3:bf:0d:86:f5:40:b5:e9:d0:84:82:
34:76:bc:41:9d:99:12:c9:33:c6:d5:9f:7f:66:e2:
ad:2e:f6:2b:db:03:a9:d2:11:66:70:d9:d9:a3:39:
d6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9D:93:BA:5A:60:1B:F6:F4:20:B6:6F:5C:E6:5E:3A:44:74:23:06
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/18AE4DF20D7A11ED80DF0C7DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.188.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:87:e3:2c:ba:27:bb:ed:18:59:1b:e8:32:87:1b:90:d1:43:
ac:04:b3:67:80:d5:f7:7e:ca:e9:2b:3e:d2:4c:6c:63:5b:79:
64:9d:a5:d2:a7:3e:56:d6:77:5a:9d:54:bb:b1:a9:9a:15:f5:
ae:a9:81:4d:88:78:ac:5c:07:66:fb:e2:fd:86:07:32:85:41:
87:cf:4b:e2:8f:4e:a2:5f:35:ba:0e:54:00:fd:d6:96:83:45:
f6:70:38:51:82:b1:db:75:a0:8f:c3:da:9b:c0:90:ae:1d:ef:
96:5f:8f:55:2c:1a:b3:1f:e4:72:84:ea:81:55:4d:a7:f8:97:
69:43:b8:f4:4f:65:76:01:5a:52:56:41:73:34:19:8c:b1:a3:
72:2d:f7:ab:fe:98:e2:b6:c9:39:56:a0:c1:f1:3c:26:7b:c1:
a0:97:d9:fc:33:0e:1e:a9:44:27:ed:a9:60:69:a1:af:98:1e:
14:89:f7:b9:e6:71:08:d9:f3:1e:9a:a9:a8:cf:a4:c9:49:2c:
e7:c8:86:27:da:09:42:05:e7:50:8c:44:da:f0:21:09:91:5a:
98:c0:1c:ac:83:5f:ba:eb:aa:1b:a3:93:75:14:9f:ed:5f:10:
8c:2d:11:bb:92:28:66:96:82:61:4f:8a:e6:42:62:b8:c7:ae:
40:a7:bd:5a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB0wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMjA3MjcwNzAyMzNaFw0yNDA3MjUwNzAyMzNaMBgxFjAU
BgNVBAMMDTYyZTBlMzBkLTIzODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDBAnphIbFzOKutNEFRw2Q1F4jxa2ByTjWaSYW0QwufuEmwtrnP+5SY+yeE
UA9oaYlWKRp6eVYopzXA9A/vZP3QuFGuXnmyWY5prVZwnDcrFLlz8ikFC3G2Ur/j
pzB/jgOTgxQUsUOJKI4ibYskNX57uoTjoVRQD9pWn+hCpSLrx7RO8sLEA7jH2Do5
NTIbbShnXbn597jnIfHkaI1uk6ETj9mYVQdc5tCs7C49sHRD6WQzFxKOZk7gaJEY
tU0O1FC9X6nGzUjBBSkU//XEMxXtMgcSkw3zvw2G9UC16dCEgjR2vEGdmRLJM8bV
n39m4q0u9ivbA6nSEWZw2dmjOdaBAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUAJ2T
ulpgG/b0ILZvXOZeOkR0IwYwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzE4QUU0REYyMEQ3QTExRUQ4MERGMEM3REYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgbwwDQYJKoZIhvcNAQEL
BQADggEBAF+H4yy6J7vtGFkb6DKHG5DRQ6wEs2eA1fd+yukrPtJMbGNbeWSdpdKn
PlbWd1qdVLuxqZoV9a6pgU2IeKxcB2b74v2GBzKFQYfPS+KPTqJfNboOVAD91paD
RfZwOFGCsdt1oI/D2pvAkK4d75Zfj1UsGrMf5HKE6oFVTaf4l2lDuPRPZXYBWlJW
QXM0GYyxo3It96v+mOK2yTlWoMHxPCZ7waCX2fwzDh6pRCftqWBpoa+YHhSJ97nm
cQjZ8x6aqajPpMlJLOfIhifaCUIF51CMRNrwIQmRWpjAHKyDX7rrqhujk3UUn+1f
EIwtEbuSKGaWgmFPiuZCYrjHrkCnvVo=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org