Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3069927877E911EEB0C702194AD9E6FC.roa
File: 3069927877E911EEB0C702194AD9E6FC.roa (raw, json)
Hash identifier: eupCRAyjbURNA+99a3cYvBwCJQW1d9BSs9RHsaG7mIA=
Subject key identifier: 87:CC:83:B0:BF:93:2C:94:14:5F:2E:89:00:0E:64:81:52:C3:A2:51
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0E19
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3069927877E911EEB0C702194AD9E6FC.roa
Signing time: Tue 31 Oct 2023 12:29:52 +0000
ROA not before: Tue 31 Oct 2023 12:29:49 +0000
ROA not after: Fri 31 Oct 2025 12:29:49 +0000
asID: 834
IP address blocks: 102.129.168.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3609 (0xe19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 31 12:29:49 2023 GMT
Not After : Oct 31 12:29:49 2025 GMT
Subject: CN=6540f340-10ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3d:27:ce:be:57:5c:ae:18:36:be:33:be:d5:
70:bd:c6:d5:6f:a5:5b:fd:21:e8:5f:59:7a:d6:e8:
d6:66:d5:5a:98:d5:02:72:5b:08:47:bb:4b:87:1b:
66:39:9d:fb:41:cd:9f:b0:e5:dc:89:d2:86:12:85:
40:b7:28:04:fe:a2:d1:73:a5:bd:45:a9:56:5f:98:
58:2f:c0:b0:87:ba:d3:24:8a:88:43:c9:84:9c:e2:
b9:57:b4:02:ed:83:c2:57:8a:2d:8c:12:a9:31:65:
81:40:f0:5f:b5:9a:ea:36:5b:41:c8:db:66:85:cc:
6b:2b:50:1e:d3:6c:43:04:ba:28:92:9c:2e:03:64:
86:de:be:c6:9d:37:87:70:09:a1:e6:73:20:02:47:
7b:55:d5:5c:f1:8e:d2:97:d0:91:73:be:cb:c9:ec:
17:0d:32:3b:9c:ce:d0:20:a3:f3:b5:68:e7:1d:35:
a2:b0:b6:1a:b4:9e:b8:71:b8:db:c3:61:c9:80:77:
79:22:5a:9c:71:c0:fa:11:fc:9a:00:1b:ff:fd:26:
f2:2d:3d:14:a3:bd:6c:6d:ff:0b:ed:ee:6f:aa:e2:
f1:06:cf:d1:10:9f:ac:32:f1:ee:3c:47:50:da:db:
cd:ff:15:0c:94:23:a5:1d:68:8d:55:0f:91:58:08:
1c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CC:83:B0:BF:93:2C:94:14:5F:2E:89:00:0E:64:81:52:C3:A2:51
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3069927877E911EEB0C702194AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.168.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:08:65:fa:08:64:26:37:63:61:d6:c0:71:97:30:b8:65:98:
98:c0:3e:1c:18:ba:7d:bc:7c:7c:88:fe:15:90:8f:c1:12:bd:
e5:48:d6:ea:19:b7:16:25:5a:3f:78:4a:ad:76:c4:9d:af:47:
51:47:8e:61:62:70:f3:0c:e5:29:53:cd:3f:c6:5f:d5:a5:59:
6c:d8:48:cc:b9:61:6d:6e:4f:ba:ee:fe:55:8c:5c:21:ec:83:
24:cd:df:fe:f9:7e:ce:15:25:92:b9:a6:24:fb:d8:40:61:3f:
f3:46:71:81:08:17:2f:b5:b4:aa:40:97:47:64:f5:5d:45:ee:
02:a6:e3:9d:d6:a3:7e:08:ad:67:4c:65:c0:79:04:8a:64:9e:
ee:25:ce:97:20:c8:e6:a3:8e:05:28:1e:39:49:de:e2:a6:96:
51:2d:47:ce:63:bf:e3:a8:35:15:74:e2:95:43:f1:d1:7f:2f:
2d:4a:c9:8f:19:02:55:d6:7d:77:36:e2:34:76:6d:4b:9b:6d:
03:68:8d:8d:4a:ba:ca:8f:17:82:e8:27:8c:f0:d0:58:e6:e8:
70:3b:fd:2b:ca:ae:3e:83:40:13:a9:87:ea:78:08:bd:eb:c3:
0b:ee:d3:e6:51:2d:a6:f6:ab:ca:90:23:f4:86:63:94:97:86:
d3:c7:df:d5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDhkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzEwMzExMjI5NDlaFw0yNTEwMzExMjI5NDlaMBgxFjAU
BgNVBAMTDTY1NDBmMzQwLTEwYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMPSfOvldcrhg2vjO+1XC9xtVvpVv9IehfWXrW6NZm1VqY1QJyWwhHu0uH
G2Y5nftBzZ+w5dyJ0oYShUC3KAT+otFzpb1FqVZfmFgvwLCHutMkiohDyYSc4rlX
tALtg8JXii2MEqkxZYFA8F+1muo2W0HI22aFzGsrUB7TbEMEuiiSnC4DZIbevsad
N4dwCaHmcyACR3tV1VzxjtKX0JFzvsvJ7BcNMjucztAgo/O1aOcdNaKwthq0nrhx
uNvDYcmAd3kiWpxxwPoR/JoAG//9JvItPRSjvWxt/wvt7m+q4vEGz9EQn6wy8e48
R1Da283/FQyUI6UdaI1VD5FYCByNAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUh8yD
sL+TLJQUXy6JAA5kgVLDolEwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzMwNjk5Mjc4NzdFOTExRUVCMEM3MDIxOTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgagwDQYJKoZIhvcNAQEL
BQADggEBAKoIZfoIZCY3Y2HWwHGXMLhlmJjAPhwYun28fHyI/hWQj8ESveVI1uoZ
txYlWj94Sq12xJ2vR1FHjmFicPMM5SlTzT/GX9WlWWzYSMy5YW1uT7ru/lWMXCHs
gyTN3/75fs4VJZK5piT72EBhP/NGcYEIFy+1tKpAl0dk9V1F7gKm453Wo34IrWdM
ZcB5BIpknu4lzpcgyOajjgUoHjlJ3uKmllEtR85jv+OoNRV04pVD8dF/Ly1KyY8Z
AlXWfXc24jR2bUubbQNojY1KusqPF4LoJ4zw0Fjm6HA7/SvKrj6DQBOph+p4CL3r
wwvu0+ZRLab2q8qQI/SGY5SXhtPH39U=
-----END CERTIFICATE-----
Generated at Wed Nov 1 09:13:54 2023 by rpki-client on console-fra.rpki-client.org