Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/36A866D4B42E11ED8BB8677DF1222468.roa
File: 36A866D4B42E11ED8BB8677DF1222468.roa (raw, json)
Hash identifier: YnmpA45KuxqYhxgB2beX6+/yjlG4Cm2GQiR1Ndye2TE=
Subject key identifier: E9:B4:32:F2:84:D8:76:59:EA:71:5D:E6:B1:C5:15:A5:1E:B8:07:0D
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A78
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/36A866D4B42E11ED8BB8677DF1222468.roa
Signing time: Fri 24 Feb 2023 10:30:10 +0000
ROA not before: Fri 24 Feb 2023 10:30:06 +0000
ROA not after: Sat 22 Feb 2025 10:30:06 +0000
asID: 61317
IP address blocks: 102.129.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 14:20:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2680 (0xa78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 24 10:30:06 2023 GMT
Not After : Feb 22 10:30:06 2025 GMT
Subject: CN=63f891b2-a73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:97:bd:ea:f4:02:c6:c1:85:f7:84:c2:18:8a:
1c:fa:82:c3:5c:72:7c:66:ae:db:bf:b1:af:76:4f:
f0:35:61:d0:b7:2d:b4:ef:9b:81:11:3b:da:ee:e5:
aa:78:a9:6c:88:48:61:0f:a2:d1:1a:91:f1:23:42:
8c:6a:a5:d3:88:af:7e:a9:75:75:08:06:5a:ec:0b:
ac:b3:ee:4e:e3:a6:35:2f:ac:2d:42:2e:c4:91:ea:
c3:60:81:98:df:c4:41:23:0e:4a:0f:2e:27:5f:82:
b6:a9:04:93:e0:85:b5:65:2d:26:e1:d7:00:f4:5d:
00:21:35:0a:e7:3f:35:a2:97:d6:2f:79:45:54:5b:
ea:66:ab:58:0f:1c:60:45:2f:76:df:de:9c:e2:00:
e9:c7:5d:6b:a2:4a:f6:4f:5e:0f:07:98:d1:76:d7:
69:8c:99:19:1c:a9:9c:3f:3f:9e:a1:77:12:7d:00:
16:a6:99:35:db:9b:af:f5:05:3d:56:ce:e8:2b:b6:
86:c0:7b:9d:14:09:f6:27:e6:cf:aa:6d:e7:52:6c:
f8:5c:b7:33:74:7f:6b:17:e2:d0:aa:db:32:5e:3b:
32:76:25:57:9e:7a:16:65:d8:ae:c5:ac:d3:b7:0f:
f9:1d:38:a5:c5:f3:2b:8c:da:d9:f0:df:04:7b:7f:
40:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B4:32:F2:84:D8:76:59:EA:71:5D:E6:B1:C5:15:A5:1E:B8:07:0D
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/36A866D4B42E11ED8BB8677DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.199.0/24
Signature Algorithm: sha256WithRSAEncryption
50:8d:a4:50:63:85:60:c0:c3:f2:2a:30:98:47:58:14:f9:05:
76:7a:da:88:40:19:f7:a9:15:d3:a3:e4:bd:a8:78:19:a6:16:
9f:fb:2f:e3:d5:20:7f:85:71:06:c4:2f:fa:b5:4e:76:67:74:
39:2a:bf:96:70:47:c8:83:98:a5:0b:f8:04:d7:d2:44:da:ed:
e9:4f:c0:a3:8f:04:5b:9e:e4:9b:44:cd:43:23:a9:00:17:5a:
3c:00:0f:30:af:f5:aa:1a:37:1c:2e:f1:80:69:8b:fc:3d:1e:
04:64:7b:7f:f5:6f:b8:fc:de:cf:7b:ed:6e:38:5c:7c:47:f2:
90:7d:9c:21:7c:0c:90:75:cb:86:5d:fe:e1:5c:1d:00:58:c7:
32:07:46:06:db:fe:32:24:de:da:1e:06:c7:fe:fc:86:36:3c:
0a:b1:58:98:49:83:ee:de:4c:a9:55:20:43:b4:d6:5d:c8:78:
87:09:6f:1d:f5:78:b7:e2:10:5b:87:8a:ae:9b:ce:22:14:f5:
e8:40:3c:eb:0e:c8:a3:a5:0d:aa:d2:52:4c:4c:db:74:64:af:
aa:e6:1d:3c:cc:96:51:18:7a:4b:25:c7:19:73:22:db:44:5c:
bb:0a:7e:ad:37:58:44:54:0a:09:33:9a:43:7f:fc:55:a0:ba:
62:0d:13:a5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCngwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzAyMjQxMDMwMDZaFw0yNTAyMjIxMDMwMDZaMBgxFjAU
BgNVBAMMDTYzZjg5MWIyLWE3M2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDgl73q9ALGwYX3hMIYihz6gsNccnxmrtu/sa92T/A1YdC3LbTvm4ERO9ru
5ap4qWyISGEPotEakfEjQoxqpdOIr36pdXUIBlrsC6yz7k7jpjUvrC1CLsSR6sNg
gZjfxEEjDkoPLidfgrapBJPghbVlLSbh1wD0XQAhNQrnPzWil9YveUVUW+pmq1gP
HGBFL3bf3pziAOnHXWuiSvZPXg8HmNF212mMmRkcqZw/P56hdxJ9ABammTXbm6/1
BT1WzugrtobAe50UCfYn5s+qbedSbPhctzN0f2sX4tCq2zJeOzJ2JVeeehZl2K7F
rNO3D/kdOKXF8yuM2tnw3wR7f0DTAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU6bQy
8oTYdlnqcV3mscUVpR64Bw0wHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzM2QTg2NkQ0QjQyRTExRUQ4QkI4Njc3REYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgccwDQYJKoZIhvcNAQEL
BQADggEBAFCNpFBjhWDAw/IqMJhHWBT5BXZ62ohAGfepFdOj5L2oeBmmFp/7L+PV
IH+FcQbEL/q1TnZndDkqv5ZwR8iDmKUL+ATX0kTa7elPwKOPBFue5JtEzUMjqQAX
WjwADzCv9aoaNxwu8YBpi/w9HgRke3/1b7j83s977W44XHxH8pB9nCF8DJB1y4Zd
/uFcHQBYxzIHRgbb/jIk3toeBsf+/IY2PAqxWJhJg+7eTKlVIEO01l3IeIcJbx31
eLfiEFuHiq6bziIU9ehAPOsOyKOlDarSUkxM23Rkr6rmHTzMllEYekslxxlzIttE
XLsKfq03WERUCgkzmkN//FWgumINE6U=
-----END CERTIFICATE-----
Generated at Fri Mar 1 18:42:05 2024 by rpki-client on console-fra.rpki-client.org