Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5D73F3FC271711EFA43D151B7DDC24C2.roa
File: 5D73F3FC271711EFA43D151B7DDC24C2.roa (raw, json)
Hash identifier: /Km4RV5V3ARR5XUcd/LBNBpcMwV8+x7HmS5jS1YnpII=
Subject key identifier: E3:B5:91:19:8B:EF:7E:01:4B:72:3B:B1:FD:56:79:00:2B:92:26:39
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 10BE
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5D73F3FC271711EFA43D151B7DDC24C2.roa
Signing time: Mon 10 Jun 2024 10:51:18 +0000
ROA not before: Mon 10 Jun 2024 10:51:14 +0000
ROA not after: Wed 10 Jun 2026 10:51:14 +0000
asID: 834
IP address blocks: 102.129.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Jun 2024 11:52:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4286 (0x10be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 10 10:51:14 2024 GMT
Not After : Jun 10 10:51:14 2026 GMT
Subject: CN=6666daa6-f793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ce:70:57:75:69:1c:8d:88:63:9b:c6:99:0a:
7c:a1:30:83:2a:f3:cf:b1:f6:77:78:fd:5a:b1:aa:
00:bb:52:ff:ae:2b:12:be:dd:97:a5:74:22:41:5d:
6a:f7:3b:44:52:01:b5:a1:cc:10:94:55:6a:a4:75:
fb:df:02:e8:44:8a:fd:97:98:48:d6:70:d3:eb:79:
68:c2:d2:20:6b:ce:4f:09:c9:04:a3:af:2b:48:65:
9c:52:34:6e:97:63:ae:7b:53:d6:89:d4:dc:82:6c:
5e:0b:e4:50:89:1d:40:ae:1a:32:3b:fa:a6:93:7e:
47:09:ae:09:45:e0:23:bb:22:79:7d:5b:a6:c5:78:
1c:b9:03:bb:05:af:fd:f2:06:49:81:b5:25:17:31:
a8:df:7c:e4:19:09:eb:51:f2:59:53:53:5c:b6:02:
22:6a:27:33:4e:73:34:5b:07:28:f0:97:27:e2:35:
ce:dc:c3:cc:66:6c:50:b5:52:26:7b:4a:94:24:f8:
78:c0:a7:d3:ea:ad:bb:80:e3:ab:68:75:f0:c5:65:
bb:61:92:18:11:e5:0c:74:4b:c2:bf:d2:79:c4:40:
99:59:ba:7e:77:eb:72:6d:b0:ae:4a:dc:c8:7f:24:
81:b9:4f:54:17:a3:ef:55:14:bd:b5:11:2d:fb:cc:
96:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B5:91:19:8B:EF:7E:01:4B:72:3B:B1:FD:56:79:00:2B:92:26:39
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5D73F3FC271711EFA43D151B7DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.140.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:99:6d:6d:cd:a5:dc:f7:2b:b6:72:7b:8d:9f:78:f7:86:a4:
f8:c4:33:12:6f:3a:ce:a8:fd:ef:60:ac:65:5b:e0:03:60:f0:
42:c9:51:2b:9f:a6:8b:dd:75:31:e5:57:70:bf:57:2e:ce:6e:
7c:97:ed:dd:d5:c4:13:27:75:f5:19:c7:e5:63:f0:f2:c4:c3:
c3:c6:2f:43:62:d2:8e:45:07:90:7f:20:8f:db:87:7d:b8:16:
77:0f:df:8e:29:c0:79:0a:73:f9:a9:f0:2f:37:82:18:7c:64:
18:c8:f2:98:0c:8f:9c:89:c5:31:66:2c:33:4f:ff:1c:11:e3:
d8:08:34:c3:4b:91:77:95:8a:2f:12:f8:b1:2d:28:b7:d8:b0:
53:9a:62:9f:97:22:fb:d9:4c:d2:85:8f:f9:a7:e8:25:f3:d6:
78:b4:64:00:f0:ad:f0:d4:aa:2d:51:54:f1:94:4e:3a:65:71:
79:a4:04:2a:4a:d9:98:52:6e:88:16:e3:af:65:d3:77:d0:d3:
e6:70:de:c9:47:53:ef:11:20:af:27:5e:19:85:c1:38:e0:02:
d8:33:60:04:12:54:48:32:bf:45:1d:5c:8f:74:4c:4a:b3:c7:
28:fd:d1:27:06:a0:23:62:5e:fe:7f:a8:52:37:21:96:ab:dd:
0e:67:e9:67
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEL4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNDA2MTAxMDUxMTRaFw0yNjA2MTAxMDUxMTRaMBgxFjAU
BgNVBAMTDTY2NjZkYWE2LWY3OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDnznBXdWkcjYhjm8aZCnyhMIMq88+x9nd4/VqxqgC7Uv+uKxK+3ZeldCJB
XWr3O0RSAbWhzBCUVWqkdfvfAuhEiv2XmEjWcNPreWjC0iBrzk8JyQSjrytIZZxS
NG6XY657U9aJ1NyCbF4L5FCJHUCuGjI7+qaTfkcJrglF4CO7Inl9W6bFeBy5A7sF
r/3yBkmBtSUXMajffOQZCetR8llTU1y2AiJqJzNOczRbByjwlyfiNc7cw8xmbFC1
UiZ7SpQk+HjAp9PqrbuA46todfDFZbthkhgR5Qx0S8K/0nnEQJlZun5363JtsK5K
3Mh/JIG5T1QXo+9VFL21ES37zJaFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU47WR
GYvvfgFLcjux/VZ5ACuSJjkwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzVENzNGM0ZDMjcxNzExRUZBNDNEMTUxQjdEREMyNEMyLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgYwwDQYJKoZIhvcNAQEL
BQADggEBAHyZbW3Npdz3K7Zye42fePeGpPjEMxJvOs6o/e9grGVb4ANg8ELJUSuf
povddTHlV3C/Vy7ObnyX7d3VxBMndfUZx+Vj8PLEw8PGL0Ni0o5FB5B/II/bh324
FncP344pwHkKc/mp8C83ghh8ZBjI8pgMj5yJxTFmLDNP/xwR49gINMNLkXeVii8S
+LEtKLfYsFOaYp+XIvvZTNKFj/mn6CXz1ni0ZADwrfDUqi1RVPGUTjplcXmkBCpK
2ZhSbogW469l03fQ0+Zw3slHU+8RIK8nXhmFwTjgAtgzYAQSVEgyv0UdXI90TEqz
xyj90ScGoCNiXv5/qFI3IZar3Q5n6Wc=
-----END CERTIFICATE-----
Generated at Wed Jun 26 15:26:57 2024 by rpki-client on console-fra.rpki-client.org