Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2BF717C82ACF11EDB52A1CE6F1222468.roa
File: 2BF717C82ACF11EDB52A1CE6F1222468.roa (raw, json)
Hash identifier: qPAF84omjUs5eAOSmOJUJKC2WJaTAwhJimVY95YBbo0=
Subject key identifier: 84:13:35:35:A2:04:2C:89:76:20:8A:07:E5:A3:BE:64:9B:91:BB:3F
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 07D6
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2BF717C82ACF11EDB52A1CE6F1222468.roa
Signing time: Fri 02 Sep 2022 14:54:40 +0000
ROA not before: Fri 02 Sep 2022 14:54:35 +0000
ROA not after: Thu 05 Sep 2024 14:54:35 +0000
asID: 140947
IP address blocks: 102.129.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jan 2023 00:12:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2006 (0x7d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 2 14:54:35 2022 GMT
Not After : Sep 5 14:54:35 2024 GMT
Subject: CN=63121930-f4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:15:a0:ad:6f:09:70:ba:7b:ed:09:b5:bc:8c:
22:19:8f:74:4d:2d:11:2e:e9:23:8c:ef:d7:7d:54:
c0:74:5a:8a:89:4c:57:f2:74:a9:e2:a5:62:ce:ae:
ea:56:a9:26:b0:97:76:5a:12:ff:fc:85:3b:0b:00:
84:31:b0:5c:6b:55:7f:9a:10:c3:26:85:a6:02:06:
b4:eb:98:f0:0a:1d:a8:59:62:c5:86:7b:eb:b8:85:
0d:77:77:7d:c4:36:cf:d1:02:f3:2b:18:88:ea:8f:
6c:12:91:d4:1c:b7:2d:7e:05:62:ce:42:f6:9b:cd:
b7:e7:28:70:9b:87:2b:8b:50:05:97:c9:f9:86:4f:
73:12:d9:21:04:44:ef:c5:88:d8:a0:1b:3d:0b:e8:
d9:56:8b:55:5b:98:0c:3e:37:bc:fd:48:7b:0f:1c:
d6:8b:ab:02:5d:54:c6:37:7d:76:2c:23:45:74:d1:
52:24:bb:f2:18:da:13:ef:10:5f:36:4f:48:a4:02:
85:f9:41:c9:0b:5c:cd:9c:4d:29:bc:83:c8:bc:46:
5a:79:d1:97:a0:ac:4d:28:67:85:df:94:2a:f0:72:
1f:57:0c:bf:f4:34:2f:ea:c1:2b:44:4d:dc:96:4c:
31:24:99:32:d8:d5:0c:48:89:2e:71:b6:26:16:84:
d7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:13:35:35:A2:04:2C:89:76:20:8A:07:E5:A3:BE:64:9B:91:BB:3F
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2BF717C82ACF11EDB52A1CE6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.185.0/24
Signature Algorithm: sha256WithRSAEncryption
33:d9:07:65:d3:a7:94:9b:88:38:95:f5:cb:72:35:be:79:b9:
c7:6c:50:bd:ef:1e:8a:9e:3e:31:cc:22:08:7e:2b:5c:af:48:
3c:39:97:96:fe:19:66:3a:b6:54:c3:81:fe:99:b1:ad:08:e9:
4b:4d:c4:89:15:41:46:75:ac:89:0f:cd:c2:7d:f0:ab:45:c2:
49:1d:e8:9e:77:37:05:8f:cb:0f:bb:75:42:35:1a:59:84:32:
22:43:d1:47:92:66:bb:2f:ac:50:62:6d:0b:e8:02:40:4f:8f:
7f:a5:59:44:0e:55:86:e0:07:f0:3b:a0:31:c3:ca:82:38:8d:
e9:49:66:8e:3d:49:53:43:67:8d:f0:1a:10:25:1e:71:64:a5:
ff:84:d7:e5:c0:69:63:27:9e:bf:c8:9a:65:4c:92:5c:37:01:
09:7a:ad:38:5f:62:d4:7c:79:c4:0a:11:0a:99:71:4e:4b:11:
86:70:d9:f3:ba:f6:98:63:4b:50:3b:60:53:78:d0:5b:f7:f9:
c1:10:40:f8:28:59:f3:4e:15:d4:96:50:a4:66:28:b3:09:6d:
e5:32:7d:2b:59:d2:00:42:e1:a6:53:45:14:bb:3c:56:0b:9f:
dd:d6:21:6e:4f:65:73:31:55:ae:5b:35:b5:68:c5:b8:81:7d:
57:71:f4:96
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB9YwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMjA5MDIxNDU0MzVaFw0yNDA5MDUxNDU0MzVaMBgxFjAU
BgNVBAMMDTYzMTIxOTMwLWY0ZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKFaCtbwlwunvtCbW8jCIZj3RNLREu6SOM79d9VMB0WoqJTFfydKnipWLO
rupWqSawl3ZaEv/8hTsLAIQxsFxrVX+aEMMmhaYCBrTrmPAKHahZYsWGe+u4hQ13
d33ENs/RAvMrGIjqj2wSkdQcty1+BWLOQvabzbfnKHCbhyuLUAWXyfmGT3MS2SEE
RO/FiNigGz0L6NlWi1VbmAw+N7z9SHsPHNaLqwJdVMY3fXYsI0V00VIku/IY2hPv
EF82T0ikAoX5QckLXM2cTSm8g8i8Rlp50ZegrE0oZ4XflCrwch9XDL/0NC/qwStE
TdyWTDEkmTLY1QxIiS5xtiYWhNdZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUhBM1
NaIELIl2IIoH5aO+ZJuRuz8wHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzJCRjcxN0M4MkFDRjExRURCNTJBMUNFNkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgbkwDQYJKoZIhvcNAQEL
BQADggEBADPZB2XTp5SbiDiV9ctyNb55ucdsUL3vHoqePjHMIgh+K1yvSDw5l5b+
GWY6tlTDgf6Zsa0I6UtNxIkVQUZ1rIkPzcJ98KtFwkkd6J53NwWPyw+7dUI1GlmE
MiJD0UeSZrsvrFBibQvoAkBPj3+lWUQOVYbgB/A7oDHDyoI4jelJZo49SVNDZ43w
GhAlHnFkpf+E1+XAaWMnnr/ImmVMklw3AQl6rThfYtR8ecQKEQqZcU5LEYZw2fO6
9phjS1A7YFN40Fv3+cEQQPgoWfNOFdSWUKRmKLMJbeUyfStZ0gBC4aZTRRS7PFYL
n93WIW5PZXMxVa5bNbVoxbiBfVdx9JY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org