Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/289762BA9AB611EEB714D805D25BE465.roa
File: 289762BA9AB611EEB714D805D25BE465.roa (raw, json)
Hash identifier: XgeYUt2gDdVVByRqO4EMgmPEwkDAiPGimsdWXu2jp+c=
Subject key identifier: 64:A7:C5:56:01:8F:E8:95:31:55:74:A2:16:D0:9A:6A:70:C8:4E:51
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0E88
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/289762BA9AB611EEB714D805D25BE465.roa
Signing time: Thu 14 Dec 2023 19:22:45 +0000
ROA not before: Thu 14 Dec 2023 19:22:42 +0000
ROA not after: Tue 31 Dec 2024 19:22:42 +0000
asID: 24768
IP address blocks: 102.129.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3720 (0xe88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 14 19:22:42 2023 GMT
Not After : Dec 31 19:22:42 2024 GMT
Subject: CN=657b5605-dd49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:af:47:0e:ff:7b:ed:31:37:fc:ff:7b:0f:a1:
6c:3f:62:5a:23:dd:de:e6:34:7d:f7:b6:b8:22:00:
f9:61:61:8d:25:9f:9e:47:f5:78:e2:b2:15:39:ab:
d8:6c:71:41:9d:17:20:6d:5b:ce:0c:1c:fb:67:80:
c9:dc:79:f3:8b:db:b4:d4:ca:b2:8d:13:2b:6f:1a:
b0:27:db:30:c8:66:7b:02:1c:d1:59:19:6c:1b:38:
5b:43:70:68:98:b9:d4:29:5c:3a:cf:8e:76:cc:18:
7d:df:e7:e0:c7:72:95:cf:4c:61:f5:a7:4c:a7:39:
1c:93:2b:78:40:e4:fc:2e:bc:7a:1c:44:56:83:63:
55:d0:66:7b:2b:01:86:c9:b1:d8:f8:ba:ee:fb:be:
01:9f:1d:cc:ae:67:56:2d:19:32:25:33:16:91:38:
cd:3c:bb:fd:d5:6c:c5:f3:b8:3c:bb:cb:d1:68:84:
4f:f8:1a:e9:c4:ec:bf:96:a5:6e:ec:2d:24:2a:15:
1f:c5:4b:05:fd:1e:ff:64:19:6a:59:ec:7e:3a:d5:
34:18:2c:76:aa:ac:08:c9:65:7e:46:57:8c:a2:50:
7a:02:9d:88:6b:cc:72:ab:96:37:55:b1:c1:c8:4a:
3c:25:15:1e:fe:a1:90:4d:31:52:60:f6:52:a0:03:
79:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A7:C5:56:01:8F:E8:95:31:55:74:A2:16:D0:9A:6A:70:C8:4E:51
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/289762BA9AB611EEB714D805D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.167.0/24
Signature Algorithm: sha256WithRSAEncryption
71:42:87:9a:1a:7f:a1:83:67:f1:fd:92:5f:47:d6:76:62:78:
20:f4:65:54:56:53:21:16:c9:07:f9:f8:b1:95:82:de:b4:b6:
5d:21:6e:69:e1:4f:04:2d:33:62:09:81:26:8b:98:2b:92:6f:
3d:51:af:16:f4:2f:f7:aa:f1:e6:26:bf:d9:6b:16:02:cd:83:
e7:a4:a3:51:06:8a:7b:7e:cc:0b:c5:3e:01:38:e2:cf:82:8f:
cc:f6:b4:74:99:3d:27:c7:df:0b:62:a9:fa:c9:7d:df:5c:54:
78:48:53:98:ec:dc:df:6b:aa:88:d9:51:30:ba:2d:b1:2b:7f:
a4:9b:a9:56:36:e8:20:6d:aa:7e:a0:f1:d4:bb:44:78:af:ab:
ca:19:65:cb:6f:01:b9:b8:78:bc:27:d4:5d:9d:d3:57:10:c7:
36:74:17:8d:7c:08:33:ba:90:7e:a3:76:78:bd:a5:8f:81:d9:
56:68:92:ef:4a:9c:3a:bc:66:6f:cb:c0:60:48:2c:fe:e5:71:
ac:93:2a:f1:09:51:51:ed:6f:cc:e0:d5:70:b1:bf:2e:2c:64:
55:9f:36:a2:55:6d:99:3e:b2:9c:9d:ac:b1:31:5c:41:bd:de:
ad:81:97:ac:49:c9:86:e0:4d:ac:a4:30:a6:de:2d:70:e5:0b:
09:32:ae:97
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDogwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzEyMTQxOTIyNDJaFw0yNDEyMzExOTIyNDJaMBgxFjAU
BgNVBAMTDTY1N2I1NjA1LWRkNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCpr0cO/3vtMTf8/3sPoWw/Yloj3d7mNH33trgiAPlhYY0ln55H9XjishU5
q9hscUGdFyBtW84MHPtngMncefOL27TUyrKNEytvGrAn2zDIZnsCHNFZGWwbOFtD
cGiYudQpXDrPjnbMGH3f5+DHcpXPTGH1p0ynORyTK3hA5PwuvHocRFaDY1XQZnsr
AYbJsdj4uu77vgGfHcyuZ1YtGTIlMxaROM08u/3VbMXzuDy7y9FohE/4GunE7L+W
pW7sLSQqFR/FSwX9Hv9kGWpZ7H461TQYLHaqrAjJZX5GV4yiUHoCnYhrzHKrljdV
scHISjwlFR7+oZBNMVJg9lKgA3mFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUZKfF
VgGP6JUxVXSiFtCaanDITlEwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzI4OTc2MkJBOUFCNjExRUVCNzE0RDgwNUQyNUJFNDY1LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgacwDQYJKoZIhvcNAQEL
BQADggEBAHFCh5oaf6GDZ/H9kl9H1nZieCD0ZVRWUyEWyQf5+LGVgt60tl0hbmnh
TwQtM2IJgSaLmCuSbz1Rrxb0L/eq8eYmv9lrFgLNg+eko1EGint+zAvFPgE44s+C
j8z2tHSZPSfH3wtiqfrJfd9cVHhIU5js3N9rqojZUTC6LbErf6SbqVY26CBtqn6g
8dS7RHivq8oZZctvAbm4eLwn1F2d01cQxzZ0F418CDO6kH6jdni9pY+B2VZoku9K
nDq8Zm/LwGBILP7lcayTKvEJUVHtb8zg1XCxvy4sZFWfNqJVbZk+spydrLExXEG9
3q2Bl6xJyYbgTaykMKbeLXDlCwkyrpc=
-----END CERTIFICATE-----
Generated at Fri Dec 29 14:53:43 2023 by rpki-client on console-ams.rpki-client.org