Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5ED8D1B66BEE11EE882E32534AD9E6FC.roa
File: 5ED8D1B66BEE11EE882E32534AD9E6FC.roa (raw, json)
Hash identifier: Cl6ntGOtOLdxNuQUNeNrZmazzUlQSW4z9rbE4rk2mSg=
Subject key identifier: 2B:4A:DE:2E:C5:E5:8D:40:D2:FE:47:88:7C:D4:76:F0:EE:F1:B7:47
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0DE2
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5ED8D1B66BEE11EE882E32534AD9E6FC.roa
Signing time: Mon 16 Oct 2023 06:36:43 +0000
ROA not before: Mon 16 Oct 2023 06:36:40 +0000
ROA not after: Wed 16 Oct 2024 06:36:40 +0000
asID: 62240
IP address blocks: 102.129.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Dec 2023 12:22:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3554 (0xde2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 16 06:36:40 2023 GMT
Not After : Oct 16 06:36:40 2024 GMT
Subject: CN=652cd9fb-9b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a2:2b:9c:7b:22:0b:6c:b1:81:78:1e:dc:97:
88:eb:a4:c2:36:41:e4:10:2d:8d:b6:6e:84:95:6f:
aa:62:a9:d0:28:04:b3:26:8f:bc:0a:5b:96:44:41:
7e:0a:67:af:5e:15:63:83:92:f5:92:7b:24:66:00:
e8:a9:c0:64:7e:42:d3:1d:75:1c:de:9f:04:e8:e1:
e6:1b:69:b9:c7:1d:b9:e7:8d:42:c6:aa:d5:2f:92:
da:7f:fc:49:7f:34:fe:b8:c3:47:87:2a:7f:96:45:
42:da:47:76:a7:d6:28:ba:87:55:dc:2b:d2:f4:b9:
15:ac:0c:22:33:c9:06:dd:8d:1e:b1:cf:32:2e:45:
5a:c7:13:ca:da:02:78:98:21:bd:36:e5:4c:72:c6:
ed:80:a2:76:3b:82:b2:e3:64:01:04:91:7a:00:1d:
0f:a7:0a:0b:73:2e:87:3c:0e:9a:66:a5:fa:3c:02:
74:6c:b4:e6:67:31:c3:61:10:eb:6b:dc:7a:dd:6b:
d6:8b:a8:a9:bf:08:aa:fa:e6:7b:62:66:a2:7f:5d:
35:ca:a4:66:d3:fc:28:25:27:05:8b:d6:4d:c4:86:
0d:33:04:8e:e4:40:99:81:6d:23:8b:39:6f:9e:8f:
b4:b6:48:9d:56:44:a7:2f:54:84:1f:c1:27:3c:fe:
2c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4A:DE:2E:C5:E5:8D:40:D2:FE:47:88:7C:D4:76:F0:EE:F1:B7:47
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5ED8D1B66BEE11EE882E32534AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.216.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:23:9f:a9:db:0b:0c:4a:86:3d:09:3d:2f:28:41:29:27:92:
6e:70:7f:ef:50:95:94:a0:ba:8b:cf:bd:05:4c:a2:31:03:27:
5b:c1:2e:94:c1:0e:ce:5f:3d:8d:94:93:08:1f:2f:ab:fc:41:
79:99:d5:97:cb:b5:9b:b1:f6:29:0e:7a:80:1c:42:b2:1b:f3:
04:f7:7d:14:80:c2:72:1b:dc:05:f5:84:24:ba:72:fa:ed:95:
f7:71:9d:75:24:11:ba:bd:99:9a:5d:e8:01:d0:eb:10:17:96:
a1:e7:72:27:96:bc:d0:1b:12:da:ff:55:0a:1e:6f:14:62:f1:
3a:25:7b:71:59:1f:63:2b:48:c7:fc:7f:a4:26:a8:a5:d0:5c:
6d:ec:de:26:ee:da:d5:c8:5d:d7:75:d3:fb:bd:8a:50:b4:22:
88:be:e6:a7:93:94:bb:76:31:4e:45:30:f6:bf:26:cd:95:a2:
9a:d2:bf:88:69:0a:17:ac:e9:6c:6a:9c:33:25:cc:52:d7:77:
41:a9:a3:9a:f9:30:cb:bd:8b:cd:f8:9b:e4:53:88:75:9f:68:
f4:98:30:fc:45:fa:06:26:91:33:9b:40:2b:81:e5:36:35:90:
cc:1c:bd:3e:a1:fb:6c:1b:b5:a9:30:3d:72:f3:da:b9:47:ef:
05:36:52:fb
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDeIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzEwMTYwNjM2NDBaFw0yNDEwMTYwNjM2NDBaMBgxFjAU
BgNVBAMTDTY1MmNkOWZiLTliMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCtoiuceyILbLGBeB7cl4jrpMI2QeQQLY22boSVb6piqdAoBLMmj7wKW5ZE
QX4KZ69eFWODkvWSeyRmAOipwGR+QtMddRzenwTo4eYbabnHHbnnjULGqtUvktp/
/El/NP64w0eHKn+WRULaR3an1ii6h1XcK9L0uRWsDCIzyQbdjR6xzzIuRVrHE8ra
AniYIb025Uxyxu2AonY7grLjZAEEkXoAHQ+nCgtzLoc8Dppmpfo8AnRstOZnMcNh
EOtr3Hrda9aLqKm/CKr65ntiZqJ/XTXKpGbT/CglJwWL1k3Ehg0zBI7kQJmBbSOL
OW+ej7S2SJ1WRKcvVIQfwSc8/iwbAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUK0re
LsXljUDS/keIfNR28O7xt0cwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzVFRDhEMUI2NkJFRTExRUU4ODJFMzI1MzRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgdgwDQYJKoZIhvcNAQEL
BQADggEBAAsjn6nbCwxKhj0JPS8oQSknkm5wf+9QlZSguovPvQVMojEDJ1vBLpTB
Ds5fPY2UkwgfL6v8QXmZ1ZfLtZux9ikOeoAcQrIb8wT3fRSAwnIb3AX1hCS6cvrt
lfdxnXUkEbq9mZpd6AHQ6xAXlqHncieWvNAbEtr/VQoebxRi8Tole3FZH2MrSMf8
f6QmqKXQXG3s3ibu2tXIXdd10/u9ilC0Ioi+5qeTlLt2MU5FMPa/Js2VoprSv4hp
Ches6WxqnDMlzFLXd0Gpo5r5MMu9i834m+RTiHWfaPSYMPxF+gYmkTObQCuB5TY1
kMwcvT6h+2wbtakwPXLz2rlH7wU2Uvs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-ams.rpki-client.org