Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1CA5B20840DA11EE9484368A4AD9E6FC.roa
File: 1CA5B20840DA11EE9484368A4AD9E6FC.roa (raw, json)
Hash identifier: juHejUxYlqkMcUFEDNJ3Jo6ao+RNarmfybtR4rQ2Qxc=
Subject key identifier: CA:58:14:6B:00:D8:6C:E3:D1:8F:55:CA:6E:BB:0D:E6:89:99:70:7D
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0CDE
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1CA5B20840DA11EE9484368A4AD9E6FC.roa
Signing time: Tue 22 Aug 2023 10:53:22 +0000
ROA not before: Tue 22 Aug 2023 10:53:19 +0000
ROA not after: Sat 23 Aug 2025 10:53:19 +0000
asID: 834
IP address blocks: 102.129.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3294 (0xcde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 22 10:53:19 2023 GMT
Not After : Aug 23 10:53:19 2025 GMT
Subject: CN=64e493a2-1b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:26:09:07:26:f8:18:59:bf:44:f7:71:1a:01:
03:c1:4f:d4:e9:76:60:5c:2f:85:42:d5:13:47:08:
9e:ed:b1:9f:a5:8c:8d:ec:da:c1:c1:1b:0d:c2:ab:
29:86:13:b5:1a:b5:61:64:87:b6:47:94:21:2b:d7:
4f:22:a1:3c:16:c3:12:de:1e:36:43:ec:43:31:21:
7f:58:f6:6a:3f:d1:2c:74:23:37:fa:a3:b6:ac:97:
d0:d4:df:80:9f:c1:97:9d:19:35:44:6f:c0:ce:d9:
ac:65:28:1d:8d:6c:cb:8b:86:17:2b:a2:78:2b:9c:
3d:43:7e:f5:16:3d:80:8d:04:57:bd:e3:db:10:e7:
9e:a3:93:84:ba:56:80:64:2c:60:e2:c3:ca:25:be:
32:63:ff:1b:2c:61:42:9b:85:e5:56:3c:aa:9e:81:
3a:5a:93:47:a8:65:1d:44:f8:be:22:7a:96:14:12:
b4:53:71:bc:de:ff:ac:8a:64:62:24:7c:51:ae:10:
0b:03:d6:4f:f0:e9:23:16:1d:57:cb:b9:df:86:54:
8c:51:59:a9:fb:91:c6:be:9c:78:47:b0:98:5c:a1:
49:2e:e5:44:81:14:71:08:59:01:d2:94:29:3c:cb:
e9:9f:3c:e4:5a:3d:ad:28:28:92:1d:ef:62:80:25:
13:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:58:14:6B:00:D8:6C:E3:D1:8F:55:CA:6E:BB:0D:E6:89:99:70:7D
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1CA5B20840DA11EE9484368A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.255.0/24
Signature Algorithm: sha256WithRSAEncryption
88:98:aa:e5:07:28:7f:b0:1a:b2:42:95:88:45:74:04:cc:03:
20:9f:af:60:c8:de:b3:2d:0d:57:8b:0d:8b:6f:9b:fe:11:a5:
fd:56:0d:53:ac:2a:05:88:1d:f1:51:b5:42:46:c3:55:2c:ca:
bb:c4:28:44:0e:c5:0c:25:1c:89:63:4f:aa:72:fe:6a:f0:68:
5a:6d:46:d6:86:76:0a:d9:87:5b:36:d0:e7:2a:36:4f:90:d4:
60:fd:96:8e:63:3c:6d:8d:d5:6f:da:4d:8f:59:f6:5f:f7:98:
9d:b1:50:93:4c:88:ac:d8:4b:08:b9:98:06:92:bb:27:b4:b8:
55:f8:cc:25:7f:6e:59:d7:83:91:3b:23:7b:36:f1:92:37:62:
97:91:69:d8:ce:1b:c3:98:c1:8d:f5:68:ae:14:bf:28:05:5a:
1b:d0:b8:11:18:97:48:41:60:e4:d3:ad:b4:10:d1:3c:08:77:
bc:3b:c7:50:19:53:50:96:bd:2f:aa:f0:48:4f:20:7d:c0:1a:
fd:b5:aa:51:e4:42:53:01:84:a7:9c:24:41:97:4e:df:bb:3d:
db:6f:26:46:d4:5d:5f:b5:21:fa:63:c7:5f:96:43:6e:ab:a4:
90:5e:ac:a3:fa:d0:0e:74:b2:6d:53:ce:dd:c8:76:79:c4:9f:
7d:a6:33:66
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDN4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzA4MjIxMDUzMTlaFw0yNTA4MjMxMDUzMTlaMBgxFjAU
BgNVBAMTDTY0ZTQ5M2EyLTFiOGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCgJgkHJvgYWb9E93EaAQPBT9TpdmBcL4VC1RNHCJ7tsZ+ljI3s2sHBGw3C
qymGE7UatWFkh7ZHlCEr108ioTwWwxLeHjZD7EMxIX9Y9mo/0Sx0Izf6o7asl9DU
34CfwZedGTVEb8DO2axlKB2NbMuLhhcrongrnD1DfvUWPYCNBFe949sQ556jk4S6
VoBkLGDiw8olvjJj/xssYUKbheVWPKqegTpak0eoZR1E+L4iepYUErRTcbze/6yK
ZGIkfFGuEAsD1k/w6SMWHVfLud+GVIxRWan7kca+nHhHsJhcoUku5USBFHEIWQHS
lCk8y+mfPORaPa0oKJId72KAJRNdAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUylgU
awDYbOPRj1XKbrsN5omZcH0wHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzFDQTVCMjA4NDBEQTExRUU5NDg0MzY4QTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgf8wDQYJKoZIhvcNAQEL
BQADggEBAIiYquUHKH+wGrJClYhFdATMAyCfr2DI3rMtDVeLDYtvm/4Rpf1WDVOs
KgWIHfFRtUJGw1UsyrvEKEQOxQwlHIljT6py/mrwaFptRtaGdgrZh1s20OcqNk+Q
1GD9lo5jPG2N1W/aTY9Z9l/3mJ2xUJNMiKzYSwi5mAaSuye0uFX4zCV/blnXg5E7
I3s28ZI3YpeRadjOG8OYwY31aK4UvygFWhvQuBEYl0hBYOTTrbQQ0TwId7w7x1AZ
U1CWvS+q8EhPIH3AGv21qlHkQlMBhKecJEGXTt+7PdtvJkbUXV+1Ifpjx1+WQ26r
pJBerKP60A50sm1Tzt3IdnnEn32mM2Y=
-----END CERTIFICATE-----
Generated at Thu Sep 14 00:07:51 2023 by rpki-client on console-fra.rpki-client.org