Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/373C23049E6311EE983EF735D25BE465.roa
File: 373C23049E6311EE983EF735D25BE465.roa (raw, json)
Hash identifier: kSHYiXqDhKHdo1Pjf5qDCiFoJh4AJR1A9kwJpP/hl7A=
Subject key identifier: 94:CB:AA:AA:5B:5E:4C:31:30:2E:B3:F4:2A:41:43:26:25:74:AA:C8
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0E9D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/373C23049E6311EE983EF735D25BE465.roa
Signing time: Tue 19 Dec 2023 11:39:06 +0000
ROA not before: Tue 19 Dec 2023 11:39:03 +0000
ROA not after: Sat 20 Dec 2025 11:39:03 +0000
asID: 21859
IP address blocks: 102.129.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 06:56:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3741 (0xe9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 19 11:39:03 2023 GMT
Not After : Dec 20 11:39:03 2025 GMT
Subject: CN=658180da-07e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:57:8a:43:f2:f6:b0:96:c9:af:13:19:3c:
0b:82:33:d5:9a:75:c9:0a:22:15:76:75:34:78:01:
5a:10:dd:71:42:93:c2:05:45:41:a9:85:69:a7:e9:
a0:0b:02:a4:17:c1:38:1e:f6:49:84:9d:0a:46:eb:
28:a4:38:6e:01:6e:58:4c:3a:fc:da:07:ba:a1:e5:
cf:c4:b4:67:62:54:22:72:5a:ad:93:e5:87:4d:98:
00:0f:84:53:78:7f:6a:b6:a3:26:87:c8:2c:44:ee:
f0:15:ec:08:05:f1:ac:48:29:80:1c:6c:9b:9f:a3:
e1:d6:03:84:40:75:3b:f0:fd:02:af:ff:87:11:97:
50:0e:cc:20:66:55:32:32:ad:b7:23:33:94:a9:32:
cd:6e:89:80:9c:75:65:f4:00:cf:f6:c4:9f:c2:78:
5b:f6:a4:ac:5a:f9:28:1c:eb:02:60:5c:28:5a:66:
16:87:ea:3c:36:4e:1b:04:fe:82:27:73:01:1c:ad:
b1:49:3f:b8:a3:f9:45:a7:5a:c7:bd:35:ff:b7:b0:
2a:7b:1b:f8:69:31:45:93:ee:cc:c0:38:80:61:ce:
e3:55:57:9f:a5:ec:ae:d9:3d:0b:5d:38:ca:b9:b1:
e3:b5:53:4a:81:74:69:db:8e:9d:90:6d:30:3b:7e:
5c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CB:AA:AA:5B:5E:4C:31:30:2E:B3:F4:2A:41:43:26:25:74:AA:C8
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/373C23049E6311EE983EF735D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.246.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:94:1c:83:44:a0:f9:0b:8f:8d:53:f0:7e:b8:9a:7e:fa:c1:
22:b9:38:a4:70:81:6a:19:05:49:bf:93:94:2d:75:b6:75:f8:
14:a9:24:4e:39:8c:31:92:55:00:48:e0:33:7c:e7:27:1b:8f:
31:73:37:b0:3a:17:af:5e:9d:db:b3:9f:86:e5:e3:51:87:d9:
82:f3:42:a4:e4:3e:2d:a4:94:56:64:af:48:93:36:cf:98:c0:
20:6b:ab:27:f4:27:73:31:65:0f:3f:76:87:1d:17:39:54:aa:
9b:38:53:13:22:7b:83:cc:34:11:51:80:a1:32:af:4e:21:5e:
fe:b6:21:86:e1:d1:1f:0f:5c:34:56:b1:be:ef:75:f9:a0:f5:
fd:d5:d7:50:e1:7d:fb:d1:5c:9d:e2:f3:94:01:68:83:7e:e4:
c1:a1:d6:14:cb:bb:4c:1a:7c:9e:ee:7a:4e:20:ab:bc:9e:34:
bf:be:51:55:eb:de:30:0e:f6:74:f1:9c:7d:8d:b7:98:5c:53:
00:56:4f:44:f3:19:ff:63:2c:83:33:5f:6d:a8:70:99:c2:a5:
0f:74:2c:b1:64:81:2a:86:2a:fe:14:ab:ab:e0:2d:1c:73:63:
5c:71:63:c1:8e:c9:56:04:7d:f7:86:bf:19:77:b2:3f:10:a8:
f2:0b:c3:8d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDp0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzEyMTkxMTM5MDNaFw0yNTEyMjAxMTM5MDNaMBgxFjAU
BgNVBAMTDTY1ODE4MGRhLTA3ZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6XVeKQ/L2sJbJrxMZPAuCM9WadckKIhV2dTR4AVoQ3XFCk8IFRUGphWmn
6aALAqQXwTge9kmEnQpG6yikOG4BblhMOvzaB7qh5c/EtGdiVCJyWq2T5YdNmAAP
hFN4f2q2oyaHyCxE7vAV7AgF8axIKYAcbJufo+HWA4RAdTvw/QKv/4cRl1AOzCBm
VTIyrbcjM5SpMs1uiYCcdWX0AM/2xJ/CeFv2pKxa+Sgc6wJgXChaZhaH6jw2ThsE
/oIncwEcrbFJP7ij+UWnWse9Nf+3sCp7G/hpMUWT7szAOIBhzuNVV5+l7K7ZPQtd
OMq5seO1U0qBdGnbjp2QbTA7flxxAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUlMuq
qlteTDEwLrP0KkFDJiV0qsgwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzM3M0MyMzA0OUU2MzExRUU5ODNFRjczNUQyNUJFNDY1LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgfYwDQYJKoZIhvcNAQEL
BQADggEBAHqUHINEoPkLj41T8H64mn76wSK5OKRwgWoZBUm/k5QtdbZ1+BSpJE45
jDGSVQBI4DN85ycbjzFzN7A6F69enduzn4bl41GH2YLzQqTkPi2klFZkr0iTNs+Y
wCBrqyf0J3MxZQ8/docdFzlUqps4UxMie4PMNBFRgKEyr04hXv62IYbh0R8PXDRW
sb7vdfmg9f3V11DhffvRXJ3i85QBaIN+5MGh1hTLu0wafJ7uek4gq7yeNL++UVXr
3jAO9nTxnH2Nt5hcUwBWT0TzGf9jLIMzX22ocJnCpQ90LLFkgSqGKv4Uq6vgLRxz
Y1xxY8GOyVYEffeGvxl3sj8QqPILw40=
-----END CERTIFICATE-----
Generated at Mon Jan 15 11:45:09 2024 by rpki-client on console-ams.rpki-client.org