Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4AD4C0F65BA111EE85833C654AD9E6FC.roa
File: 4AD4C0F65BA111EE85833C654AD9E6FC.roa (raw, json)
Hash identifier: UfATOGJbdeIGB6uew8L8OeIhITXbSz8apneqJUUcTkQ=
Subject key identifier: B0:44:44:27:48:E8:03:97:02:F8:93:AA:97:9A:ED:60:6D:2C:27:84
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0D81
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4AD4C0F65BA111EE85833C654AD9E6FC.roa
Signing time: Mon 25 Sep 2023 12:44:40 +0000
ROA not before: Mon 25 Sep 2023 12:44:37 +0000
ROA not after: Wed 25 Sep 2024 12:44:37 +0000
asID: 149448
IP address blocks: 102.165.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Oct 2023 05:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3457 (0xd81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 25 12:44:37 2023 GMT
Not After : Sep 25 12:44:37 2024 GMT
Subject: CN=651180b8-ad40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ef:c2:30:2b:88:b2:c3:89:1b:60:02:50:a0:
cd:b2:50:37:40:63:37:16:53:25:32:d0:59:87:3c:
16:02:9d:ab:34:30:91:e7:31:8a:29:8a:0f:36:91:
bd:b5:c5:f6:4f:67:ba:7d:be:f4:ac:bf:ca:15:1a:
43:d2:cc:ba:ab:83:e7:70:35:a1:50:aa:23:e3:f0:
b1:b0:7e:55:78:36:2b:37:b4:07:99:44:d9:2b:0b:
c0:06:44:73:ce:52:74:c8:ef:96:d0:c1:22:37:20:
fa:09:8e:8f:c1:5f:08:9f:f2:ee:9d:cd:16:74:bb:
56:fe:d9:72:b1:89:04:55:1d:7e:d8:27:f2:17:18:
b5:8c:c2:1a:17:9c:0a:13:67:a9:27:a7:ca:65:b5:
e7:19:eb:b8:c1:54:d9:6e:85:c9:7e:dd:88:42:09:
2f:8f:66:2a:49:a6:2d:82:b4:b6:9a:9c:02:05:26:
a2:11:14:a8:43:05:fb:46:1d:78:2d:c4:45:17:97:
73:33:b7:40:7e:74:e6:77:42:59:96:6e:33:63:07:
16:be:e3:70:f6:43:24:e4:d3:22:ec:ec:e3:43:cc:
97:ed:ac:ee:90:2d:c0:51:3b:0e:40:67:0e:15:79:
1b:c7:cb:78:92:f9:22:6b:e4:d2:d8:82:2d:2e:15:
da:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:44:44:27:48:E8:03:97:02:F8:93:AA:97:9A:ED:60:6D:2C:27:84
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4AD4C0F65BA111EE85833C654AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.57.0/24
Signature Algorithm: sha256WithRSAEncryption
af:4b:21:7b:08:43:63:cf:50:47:2f:d2:0d:5b:b7:54:a2:25:
03:40:ca:14:e2:9b:4e:48:bb:4b:8b:09:42:1f:76:9b:df:1b:
c2:20:98:99:0d:01:47:07:f5:8b:f1:bf:40:2a:7c:5d:ca:31:
2c:81:a2:74:8d:6c:37:c8:fb:c9:67:16:82:33:4e:01:b4:1f:
7b:8b:75:b2:55:42:76:e1:e1:86:b3:60:f1:b3:46:c9:b9:7d:
f1:13:bc:05:10:38:ce:01:2c:c4:c8:b7:b6:ef:c0:2f:84:d7:
31:bc:d2:a8:a3:e2:eb:c6:66:54:12:33:37:ed:8a:aa:25:8d:
ee:cd:7a:1e:25:e5:e4:b9:e3:ad:c1:a5:e7:f9:f0:34:ef:b1:
1c:77:55:8f:ff:ee:eb:d1:3b:7b:e6:b6:64:7d:79:e5:ee:17:
db:11:30:c7:0e:99:8f:3b:e1:0d:4f:8a:e0:9e:8d:92:f1:96:
5a:3f:19:5f:c7:b2:79:8b:79:1b:2b:91:d3:85:4c:44:17:d8:
64:62:5a:8e:ef:ce:ba:51:0d:59:26:6f:5c:23:7d:c2:fd:b5:
a0:4c:d5:8c:77:73:5f:80:17:b8:4e:1b:cf:8e:1a:5d:7c:64:
12:d6:ad:b7:8f:b7:ea:a5:fd:11:c3:8d:a9:70:06:75:93:09:
e7:3f:03:57
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDYEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzA5MjUxMjQ0MzdaFw0yNDA5MjUxMjQ0MzdaMBgxFjAU
BgNVBAMTDTY1MTE4MGI4LWFkNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDC78IwK4iyw4kbYAJQoM2yUDdAYzcWUyUy0FmHPBYCnas0MJHnMYopig82
kb21xfZPZ7p9vvSsv8oVGkPSzLqrg+dwNaFQqiPj8LGwflV4Nis3tAeZRNkrC8AG
RHPOUnTI75bQwSI3IPoJjo/BXwif8u6dzRZ0u1b+2XKxiQRVHX7YJ/IXGLWMwhoX
nAoTZ6knp8pltecZ67jBVNluhcl+3YhCCS+PZipJpi2CtLaanAIFJqIRFKhDBftG
HXgtxEUXl3Mzt0B+dOZ3QlmWbjNjBxa+43D2QyTk0yLs7ONDzJftrO6QLcBROw5A
Zw4VeRvHy3iS+SJr5NLYgi0uFdr/AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUsERE
J0joA5cC+JOql5rtYG0sJ4QwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzRBRDRDMEY2NUJBMTExRUU4NTgzM0M2NTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmpTkwDQYJKoZIhvcNAQEL
BQADggEBAK9LIXsIQ2PPUEcv0g1bt1SiJQNAyhTim05Iu0uLCUIfdpvfG8IgmJkN
AUcH9Yvxv0AqfF3KMSyBonSNbDfI+8lnFoIzTgG0H3uLdbJVQnbh4YazYPGzRsm5
ffETvAUQOM4BLMTIt7bvwC+E1zG80qij4uvGZlQSMzftiqolje7Neh4l5eS5463B
pef58DTvsRx3VY//7uvRO3vmtmR9eeXuF9sRMMcOmY874Q1PiuCejZLxllo/GV/H
snmLeRsrkdOFTEQX2GRiWo7vzrpRDVkmb1wjfcL9taBM1Yx3c1+AF7hOG8+OGl18
ZBLWrbePt+ql/RHDjalwBnWTCec/A1c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org