Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4000C8E8D7D711EEA975A0C5775412E6.roa
File: 4000C8E8D7D711EEA975A0C5775412E6.roa (raw, json)
Hash identifier: JU++wxDwUtnkGXlqKYHs9oFn5h+aLCgXlfRc+idkLT0=
Subject key identifier: C5:E2:EE:BA:E3:D1:84:A2:49:76:02:18:BC:C4:C1:21:CE:17:AC:26
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0F9B
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4000C8E8D7D711EEA975A0C5775412E6.roa
Signing time: Fri 01 Mar 2024 14:23:19 +0000
ROA not before: Fri 01 Mar 2024 14:23:15 +0000
ROA not after: Mon 02 Mar 2026 14:23:15 +0000
asID: 834
IP address blocks: 102.129.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Mar 2024 06:37:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3995 (0xf9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 1 14:23:15 2024 GMT
Not After : Mar 2 14:23:15 2026 GMT
Subject: CN=65e1e4d7-ab1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:61:19:57:36:49:b2:52:b6:30:d2:6f:1b:99:
48:f0:57:79:69:8c:90:5d:6b:e9:59:a6:0c:de:2d:
d9:3f:a5:38:92:b8:e6:da:77:46:60:16:0c:75:06:
1d:43:1f:86:92:0a:c7:39:d1:74:93:50:fe:0d:6b:
47:3b:be:05:3d:64:19:eb:88:4b:94:a6:b5:0f:62:
2a:e1:85:f3:a1:60:aa:65:6c:86:86:ec:9d:27:2e:
d2:bd:7d:3d:d6:d3:db:53:ce:49:a7:d8:6a:51:d7:
b1:13:95:37:a4:a9:00:76:99:3e:95:b5:ec:b4:b0:
5e:96:91:a1:60:67:94:af:c2:a4:a3:19:c8:4f:68:
dc:e1:87:0a:3d:65:f8:17:1e:1a:97:4f:18:42:fe:
88:2d:4d:2f:0c:e7:16:dd:50:6f:18:cb:26:02:85:
e7:98:72:dd:93:9f:3c:b3:67:4f:5e:c6:1d:f1:92:
ea:6c:3f:46:3c:d3:9e:41:6b:69:65:24:14:86:9e:
3b:9a:67:bd:f8:cd:5c:4f:66:9b:3a:67:29:5b:ed:
95:9a:08:cd:5e:fb:f5:eb:41:fd:cc:f2:7a:98:93:
bd:83:16:dd:08:24:04:6b:ac:23:9d:d8:7f:ae:59:
b6:08:f6:7c:b6:ce:3d:0f:07:83:df:72:7f:da:8a:
1c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E2:EE:BA:E3:D1:84:A2:49:76:02:18:BC:C4:C1:21:CE:17:AC:26
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4000C8E8D7D711EEA975A0C5775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.210.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:f7:24:91:6f:64:c7:3b:92:9e:b2:dc:4c:5c:f3:d7:00:ca:
0b:83:61:e3:fb:78:24:27:5e:7d:fc:22:bf:b8:81:9c:fc:04:
c3:d5:0a:bd:f4:ff:30:29:ec:0d:be:16:de:51:b1:28:5e:ed:
34:0e:f2:92:4a:ba:25:fc:34:24:fc:a3:ca:a8:66:34:30:52:
87:cd:45:d6:0f:6c:f1:77:26:e6:6f:6c:fc:6e:55:61:00:e8:
18:c3:fb:c7:b8:21:67:57:5b:38:4b:b8:ce:68:e4:1c:d8:c6:
f2:83:ba:13:11:81:cd:dd:2d:31:62:93:ba:99:32:81:22:db:
66:51:93:c2:b4:8c:f7:22:34:6a:c4:a8:95:a5:f6:9f:e4:16:
c3:2e:68:5d:31:8c:a1:95:14:51:3a:b4:32:14:02:db:dd:5a:
e5:54:20:9c:61:35:06:29:cb:19:7f:9f:3e:40:7f:9e:49:48:
ed:bb:fe:f3:04:2a:86:84:b8:90:82:b2:f2:66:b6:54:f4:5f:
71:bc:77:19:6b:16:04:ee:b6:26:12:80:44:94:93:05:6a:4b:
94:3e:b4:dd:5b:14:2b:3c:44:0a:45:76:4a:dc:31:41:67:fa:
8e:eb:0b:7a:7f:53:4d:dc:9d:78:f7:b7:0a:99:5f:e9:9c:6d:
a3:0e:d3:5d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICD5swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNDAzMDExNDIzMTVaFw0yNjAzMDIxNDIzMTVaMBgxFjAU
BgNVBAMTDTY1ZTFlNGQ3LWFiMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrYRlXNkmyUrYw0m8bmUjwV3lpjJBda+lZpgzeLdk/pTiSuObad0ZgFgx1
Bh1DH4aSCsc50XSTUP4Na0c7vgU9ZBnriEuUprUPYirhhfOhYKplbIaG7J0nLtK9
fT3W09tTzkmn2GpR17ETlTekqQB2mT6Vtey0sF6WkaFgZ5SvwqSjGchPaNzhhwo9
ZfgXHhqXTxhC/ogtTS8M5xbdUG8YyyYCheeYct2TnzyzZ09exh3xkupsP0Y8055B
a2llJBSGnjuaZ734zVxPZps6Zylb7ZWaCM1e+/XrQf3M8nqYk72DFt0IJARrrCOd
2H+uWbYI9ny2zj0PB4Pfcn/aihyzAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUxeLu
uuPRhKJJdgIYvMTBIc4XrCYwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzQwMDBDOEU4RDdENzExRUVBOTc1QTBDNTc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgdIwDQYJKoZIhvcNAQEL
BQADggEBAHz3JJFvZMc7kp6y3Exc89cAyguDYeP7eCQnXn38Ir+4gZz8BMPVCr30
/zAp7A2+Ft5RsShe7TQO8pJKuiX8NCT8o8qoZjQwUofNRdYPbPF3JuZvbPxuVWEA
6BjD+8e4IWdXWzhLuM5o5BzYxvKDuhMRgc3dLTFik7qZMoEi22ZRk8K0jPciNGrE
qJWl9p/kFsMuaF0xjKGVFFE6tDIUAtvdWuVUIJxhNQYpyxl/nz5Af55JSO27/vME
KoaEuJCCsvJmtlT0X3G8dxlrFgTutiYSgESUkwVqS5Q+tN1bFCs8RApFdkrcMUFn
+o7rC3p/U03cnXj3twqZX+mcbaMO010=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org