Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/19C763606BF011EE9398A0584AD9E6FC.roa
File: 19C763606BF011EE9398A0584AD9E6FC.roa (raw, json)
Hash identifier: hF+E010XMIY7q2Z1jMhjROkJDCJUEuHX7yt/CmVG00w=
Subject key identifier: 0A:1E:BF:C4:D8:7C:6B:09:37:0F:11:28:0F:F5:24:D1:0C:07:E1:FC
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0DE8
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/19C763606BF011EE9398A0584AD9E6FC.roa
Signing time: Mon 16 Oct 2023 06:49:07 +0000
ROA not before: Mon 16 Oct 2023 06:49:03 +0000
ROA not after: Wed 16 Oct 2024 06:49:03 +0000
asID: 62240
IP address blocks: 102.165.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 06:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3560 (0xde8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 16 06:49:03 2023 GMT
Not After : Oct 16 06:49:03 2024 GMT
Subject: CN=652cdce2-5991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b9:2b:59:c0:f1:35:93:72:66:87:db:ad:39:
a9:de:6a:a4:f9:53:e2:74:8a:ae:03:e1:9f:0b:4c:
ab:13:33:55:b3:35:74:83:41:6e:2d:76:cd:bf:dc:
39:5e:ef:92:b6:4a:60:c1:34:ee:3e:b0:82:45:7e:
0f:da:20:98:be:46:a5:e0:50:e5:29:64:de:b4:63:
01:f3:d8:78:52:c9:9c:e4:6b:b8:90:8e:79:8f:12:
04:b5:6a:c4:69:0e:e0:f9:18:d8:8c:dc:6f:4d:2c:
26:83:92:9f:f0:b1:8f:28:b7:d6:6e:cb:9b:9c:59:
be:13:72:9d:62:cc:60:53:94:08:47:97:8c:81:6b:
82:9e:79:3d:fa:0f:53:10:54:4f:f8:40:2c:c8:bf:
41:fb:01:8f:73:bf:f9:a3:e2:b6:b0:38:50:1f:a7:
80:0a:ce:94:a7:54:09:65:eb:fc:4a:91:e5:a9:ea:
b5:5c:ab:31:01:a7:ab:a7:fd:03:5d:1c:06:15:51:
5f:d8:ed:b8:5f:5d:5f:ec:af:43:1b:fd:9e:47:90:
4a:e5:ba:62:50:e1:1c:ee:ed:70:72:0c:72:a0:67:
73:7c:5e:41:12:8e:db:ed:96:d8:e4:08:25:fb:3b:
8c:76:d6:cf:74:9c:af:37:26:75:a4:f3:5c:85:d7:
b4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1E:BF:C4:D8:7C:6B:09:37:0F:11:28:0F:F5:24:D1:0C:07:E1:FC
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/19C763606BF011EE9398A0584AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.44.0/24
Signature Algorithm: sha256WithRSAEncryption
12:1f:b5:cf:28:46:90:3d:d4:b1:3a:47:c0:a1:4b:f2:18:3f:
c7:38:1f:f8:88:a2:f7:1e:e3:e8:6c:53:6f:27:de:92:1b:ec:
d2:b7:e1:45:18:10:82:49:18:6e:2e:5e:28:56:09:44:2b:51:
cf:76:24:ab:f8:85:9c:0e:96:e9:b6:31:68:fb:27:97:98:be:
00:e3:68:22:7b:6f:1a:5b:a6:da:b6:0c:cb:1c:e9:4c:a3:34:
6c:a7:e3:35:b6:10:ce:fa:6f:02:ea:19:85:0d:f0:4a:60:f0:
5d:59:88:5a:39:7d:a9:49:71:c3:8e:fe:50:9e:1e:62:5b:38:
bb:5d:16:8c:8a:c2:0e:d7:a7:20:01:22:ae:47:3b:d0:66:bf:
d2:c7:88:41:b4:52:c6:69:3e:cc:b9:af:db:ea:d2:70:4c:88:
d2:78:13:94:52:07:ef:e1:16:cc:4c:52:d4:01:56:9a:9a:92:
4f:00:40:57:4a:f7:2a:9c:1b:28:d7:a0:13:0f:21:c0:71:b9:
c6:10:64:57:61:d2:0f:b4:b6:ea:1f:d0:ba:79:c9:83:3f:a7:
85:65:2b:a6:94:14:a8:92:c9:a3:ba:8a:b8:47:bd:1e:bd:26:
e3:89:71:a7:26:3e:12:72:a2:ed:89:e6:eb:a9:3c:fb:1c:ff:
76:5c:d9:98
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDegwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzEwMTYwNjQ5MDNaFw0yNDEwMTYwNjQ5MDNaMBgxFjAU
BgNVBAMTDTY1MmNkY2UyLTU5OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDcuStZwPE1k3Jmh9utOaneaqT5U+J0iq4D4Z8LTKsTM1WzNXSDQW4tds2/
3Dle75K2SmDBNO4+sIJFfg/aIJi+RqXgUOUpZN60YwHz2HhSyZzka7iQjnmPEgS1
asRpDuD5GNiM3G9NLCaDkp/wsY8ot9Zuy5ucWb4Tcp1izGBTlAhHl4yBa4KeeT36
D1MQVE/4QCzIv0H7AY9zv/mj4rawOFAfp4AKzpSnVAll6/xKkeWp6rVcqzEBp6un
/QNdHAYVUV/Y7bhfXV/sr0Mb/Z5HkErlumJQ4Rzu7XByDHKgZ3N8XkESjtvtltjk
CCX7O4x21s90nK83JnWk81yF17QxAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUCh6/
xNh8awk3DxEoD/Uk0QwH4fwwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzE5Qzc2MzYwNkJGMDExRUU5Mzk4QTA1ODRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmpSwwDQYJKoZIhvcNAQEL
BQADggEBABIftc8oRpA91LE6R8ChS/IYP8c4H/iIovce4+hsU28n3pIb7NK34UUY
EIJJGG4uXihWCUQrUc92JKv4hZwOlum2MWj7J5eYvgDjaCJ7bxpbptq2DMsc6Uyj
NGyn4zW2EM76bwLqGYUN8Epg8F1ZiFo5falJccOO/lCeHmJbOLtdFoyKwg7XpyAB
Iq5HO9Bmv9LHiEG0UsZpPsy5r9vq0nBMiNJ4E5RSB+/hFsxMUtQBVpqakk8AQFdK
9yqcGyjXoBMPIcBxucYQZFdh0g+0tuof0Lp5yYM/p4VlK6aUFKiSyaO6irhHvR69
JuOJcacmPhJyou2J5uupPPsc/3Zc2Zg=
-----END CERTIFICATE-----
Generated at Mon Jan 15 11:27:25 2024 by rpki-client on console-fra.rpki-client.org