Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4BC9B020FB9411EC892B239EF1222468.roa
File: 4BC9B020FB9411EC892B239EF1222468.roa (raw, json)
Hash identifier: E7cNx6doBx4DxqHFOgCrUut4dLIQvtQSTSJzs8Wg2h0=
Subject key identifier: 87:1B:03:6A:C5:3C:0B:B8:3F:77:91:59:7C:0C:3E:93:0E:16:19:42
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 070B
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4BC9B020FB9411EC892B239EF1222468.roa
Signing time: Mon 04 Jul 2022 12:24:49 +0000
ROA not before: Mon 04 Jul 2022 12:24:45 +0000
ROA not after: Thu 04 Jul 2024 12:24:45 +0000
asID: 40676
IP address blocks: 102.129.166.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1803 (0x70b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 4 12:24:45 2022 GMT
Not After : Jul 4 12:24:45 2024 GMT
Subject: CN=62c2dc11-b73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b1:c7:ca:2d:dd:68:80:30:6d:7a:c5:bf:fb:
fa:0a:22:7e:3f:88:4a:6e:f1:9e:67:74:f4:83:89:
07:d9:6f:2f:aa:59:51:f7:49:c8:e5:b2:00:5e:ea:
b8:16:e3:10:9b:13:16:3c:75:ca:22:db:4a:61:e4:
2a:73:83:4d:a6:19:39:b3:b2:be:3a:7f:2d:a2:c6:
46:89:61:69:f8:3b:12:18:2e:cd:a6:09:67:37:ee:
91:ab:fa:9a:7a:48:9c:d8:d1:73:bf:77:b4:b3:b5:
9b:79:7d:2d:22:4f:5b:22:25:dc:72:fe:01:7a:7d:
53:35:41:65:9b:c2:21:43:62:7e:39:05:c2:71:9d:
23:8d:2c:79:2e:ef:e9:d3:61:d2:5a:96:25:ce:6b:
3e:53:ab:49:16:7c:67:bb:b8:77:7c:2c:8b:98:00:
20:8a:f6:5e:f8:aa:65:ee:3f:b3:5a:bf:9f:43:56:
3d:5d:b3:40:1e:9b:d8:3f:c4:8b:8d:77:98:ff:95:
cb:5e:19:ee:1d:93:f2:19:f3:0b:d5:bc:9a:c9:76:
31:4c:02:c6:c4:2a:0f:d0:40:6c:33:07:ac:82:ef:
66:2f:60:25:a7:d7:f6:30:36:06:0a:d4:68:e6:c8:
9d:14:cc:39:eb:5d:a0:0f:a5:0e:17:24:dd:bb:9f:
86:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1B:03:6A:C5:3C:0B:B8:3F:77:91:59:7C:0C:3E:93:0E:16:19:42
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4BC9B020FB9411EC892B239EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.166.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:32:e3:cc:6e:a7:40:63:36:83:3e:11:29:31:67:e1:64:8f:
ed:f2:00:cc:be:a7:6b:61:29:31:89:31:3b:9e:54:b9:2b:52:
32:c4:f2:ac:b3:fb:bc:aa:ab:ac:6e:a1:f1:49:e4:a0:d3:0c:
02:b6:40:6e:a4:99:3c:cb:cf:7c:3b:e3:86:36:df:74:ae:52:
8e:41:94:b0:4d:4a:5e:50:00:76:71:d7:a2:6f:d9:a4:79:04:
50:b7:ac:10:48:be:53:a1:4c:84:d3:a1:26:bf:e9:59:27:2f:
c8:c6:ef:8b:53:26:7f:e3:c5:a3:20:07:a4:9d:d0:53:b3:8e:
f2:70:5a:ef:16:ee:fc:7d:13:eb:64:7c:95:e1:4f:27:77:1d:
aa:bb:06:29:8e:77:ee:33:86:9d:5a:aa:62:69:bc:28:c8:fc:
24:ee:df:47:47:94:58:ff:b5:6d:a1:42:08:b1:ff:30:3b:fa:
f3:04:e0:37:14:af:76:ac:d9:b0:fe:3a:9e:a7:df:86:60:3a:
03:c9:d7:9b:a8:ff:91:73:4a:13:01:1b:25:06:f0:c6:f8:4c:
39:18:cc:74:64:7b:ac:2e:6d:a2:b4:b5:36:e8:98:f8:48:f8:
07:4d:fa:dd:5d:29:d0:12:67:d6:fc:63:0f:8b:0e:18:c3:04:
e0:5e:b2:83
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBwswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMjA3MDQxMjI0NDVaFw0yNDA3MDQxMjI0NDVaMBgxFjAU
BgNVBAMMDTYyYzJkYzExLWI3M2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDnscfKLd1ogDBtesW/+/oKIn4/iEpu8Z5ndPSDiQfZby+qWVH3ScjlsgBe
6rgW4xCbExY8dcoi20ph5Cpzg02mGTmzsr46fy2ixkaJYWn4OxIYLs2mCWc37pGr
+pp6SJzY0XO/d7SztZt5fS0iT1siJdxy/gF6fVM1QWWbwiFDYn45BcJxnSONLHku
7+nTYdJaliXOaz5Tq0kWfGe7uHd8LIuYACCK9l74qmXuP7Nav59DVj1ds0Aem9g/
xIuNd5j/lcteGe4dk/IZ8wvVvJrJdjFMAsbEKg/QQGwzB6yC72YvYCWn1/YwNgYK
1GjmyJ0UzDnrXaAPpQ4XJN27n4Y/AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUhxsD
asU8C7g/d5FZfAw+kw4WGUIwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzRCQzlCMDIwRkI5NDExRUM4OTJCMjM5RUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgaYwDQYJKoZIhvcNAQEL
BQADggEBAKgy48xup0BjNoM+ESkxZ+Fkj+3yAMy+p2thKTGJMTueVLkrUjLE8qyz
+7yqq6xuofFJ5KDTDAK2QG6kmTzLz3w744Y233SuUo5BlLBNSl5QAHZx16Jv2aR5
BFC3rBBIvlOhTITToSa/6VknL8jG74tTJn/jxaMgB6Sd0FOzjvJwWu8W7vx9E+tk
fJXhTyd3Haq7BimOd+4zhp1aqmJpvCjI/CTu30dHlFj/tW2hQgix/zA7+vME4DcU
r3as2bD+Op6n34ZgOgPJ15uo/5FzShMBGyUG8Mb4TDkYzHRke6wubaK0tTbomPhI
+AdN+t1dKdASZ9b8Yw+LDhjDBOBesoM=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org