Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2C08E52E636D11EFB85283A7762E951A.roa
File: 2C08E52E636D11EFB85283A7762E951A.roa (raw, json)
Hash identifier: prvFnhRftg46OdN186tK6vU1AG5T/Z2haQcrfIUGpSI=
Subject key identifier: 94:E0:1E:25:DC:7B:AC:F6:06:44:66:D3:EA:E3:A5:1E:5A:C6:49:8B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 11CD
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2C08E52E636D11EFB85283A7762E951A.roa
Signing time: Mon 26 Aug 2024 05:36:41 +0000
ROA not before: Mon 26 Aug 2024 05:36:37 +0000
ROA not after: Wed 26 Aug 2026 05:36:37 +0000
asID: 834
IP address blocks: 102.129.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 07:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4557 (0x11cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 26 05:36:37 2024 GMT
Not After : Aug 26 05:36:37 2026 GMT
Subject: CN=66cc1469-6f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f8:8f:81:be:db:db:d5:45:2e:70:b0:1f:b6:
55:3a:ea:26:81:6b:5b:65:90:b2:d3:df:d7:87:40:
77:a9:73:75:8d:17:3b:73:37:3c:5f:d2:11:98:ce:
7e:d0:b1:cc:81:d4:f8:f7:0b:8a:1a:2b:2f:d4:99:
63:87:79:3b:8f:9c:22:db:df:32:7c:93:f3:ed:26:
0f:9b:a8:a3:43:11:e6:43:3c:08:4e:95:43:e3:48:
f3:b5:ea:c2:59:04:fa:d9:c3:fa:65:04:e2:be:27:
11:47:a9:c3:55:6d:f2:e5:d4:7b:60:23:20:2b:e6:
0e:a4:90:d2:94:f9:aa:5e:e5:39:5b:5d:e1:ff:47:
ab:57:72:c0:fd:35:53:03:fb:c6:c6:f7:f9:17:91:
85:6f:0d:ac:42:41:e3:e7:63:4c:5b:d1:12:9b:ce:
05:0a:9c:c7:3f:4b:2d:c5:67:a5:5b:3a:31:ef:c0:
d5:f9:ac:ce:28:77:4b:65:ca:b3:c2:bd:6b:37:54:
56:89:9d:14:84:91:2b:b3:e4:39:0e:78:ed:a5:d4:
4b:14:1b:e7:79:58:7a:3b:7e:de:9e:11:dc:85:c9:
5f:c7:ab:66:16:98:6c:2a:6f:57:5f:86:14:59:b8:
a3:bf:9b:b1:bc:4b:cf:d6:83:80:c9:92:fe:2f:2b:
4b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E0:1E:25:DC:7B:AC:F6:06:44:66:D3:EA:E3:A5:1E:5A:C6:49:8B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2C08E52E636D11EFB85283A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.209.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:ea:66:ad:ac:0d:fd:45:56:6b:7a:2f:09:f1:ab:1b:4a:f0:
5a:f6:d9:45:6c:4f:59:0c:cb:a7:1a:63:0e:60:78:db:df:39:
35:3c:19:cd:5a:64:40:06:a7:74:9e:0a:82:b2:e3:33:94:a1:
7a:46:e0:29:ee:38:c4:67:e5:cb:3e:d4:02:b3:1b:f8:a7:54:
c5:6b:1d:7d:be:9c:7f:76:ab:19:6d:26:09:e2:2d:de:ae:74:
10:c6:1d:6c:e8:31:77:c4:f1:62:05:bd:4b:a0:d7:d6:64:13:
b6:a0:54:34:d7:c4:f5:ed:d0:0c:f2:84:6b:4f:82:33:9f:31:
76:88:b2:b6:4a:13:8b:a5:c0:b4:da:b4:6b:26:f7:f6:c0:42:
6f:3b:a8:14:b4:dc:80:02:9f:11:cd:42:d0:17:b2:85:20:bd:
f9:c3:91:37:84:4b:a6:b1:d8:ba:f6:4a:2e:c2:53:eb:61:f3:
56:3c:b1:70:12:a3:e3:f8:c0:4a:4f:85:92:23:3e:97:0b:bd:
d4:37:d1:6c:e2:92:3f:3c:92:0f:64:0d:69:02:91:6b:5a:46:
02:17:19:24:7a:03:55:fd:7c:09:2d:24:bd:5f:24:65:fd:42:
13:76:ee:b7:3b:40:b4:86:fd:c4:7f:06:28:22:e2:e8:09:a8:
15:7c:7f:5d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEc0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNDA4MjYwNTM2MzdaFw0yNjA4MjYwNTM2MzdaMBgxFjAU
BgNVBAMTDTY2Y2MxNDY5LTZmMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCk+I+Bvtvb1UUucLAftlU66iaBa1tlkLLT39eHQHepc3WNFztzNzxf0hGY
zn7QscyB1Pj3C4oaKy/UmWOHeTuPnCLb3zJ8k/PtJg+bqKNDEeZDPAhOlUPjSPO1
6sJZBPrZw/plBOK+JxFHqcNVbfLl1HtgIyAr5g6kkNKU+ape5TlbXeH/R6tXcsD9
NVMD+8bG9/kXkYVvDaxCQePnY0xb0RKbzgUKnMc/Sy3FZ6VbOjHvwNX5rM4od0tl
yrPCvWs3VFaJnRSEkSuz5DkOeO2l1EsUG+d5WHo7ft6eEdyFyV/Hq2YWmGwqb1df
hhRZuKO/m7G8S8/Wg4DJkv4vK0s9AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUlOAe
Jdx7rPYGRGbT6uOlHlrGSYswHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzJDMDhFNTJFNjM2RDExRUZCODUyODNBNzc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgdEwDQYJKoZIhvcNAQEL
BQADggEBALzqZq2sDf1FVmt6LwnxqxtK8Fr22UVsT1kMy6caYw5geNvfOTU8Gc1a
ZEAGp3SeCoKy4zOUoXpG4CnuOMRn5cs+1AKzG/inVMVrHX2+nH92qxltJgniLd6u
dBDGHWzoMXfE8WIFvUug19ZkE7agVDTXxPXt0AzyhGtPgjOfMXaIsrZKE4ulwLTa
tGsm9/bAQm87qBS03IACnxHNQtAXsoUgvfnDkTeES6ax2Lr2Si7CU+th81Y8sXAS
o+P4wEpPhZIjPpcLvdQ30Wzikj88kg9kDWkCkWtaRgIXGSR6A1X9fAktJL1fJGX9
QhN27rc7QLSG/cR/Bigi4ugJqBV8f10=
-----END CERTIFICATE-----
Generated at Thu Nov 21 09:56:35 2024 by rpki-client on console-fra.rpki-client.org