Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/61DD83FEEE3D11ED97780F764AD9E6FC.roa
File: 61DD83FEEE3D11ED97780F764AD9E6FC.roa (raw, json)
Hash identifier: U6CxidRtqz5TBR8Uh174oWxEvB8P2U8DrT3MeUHd/44=
Subject key identifier: DA:1C:9C:A7:74:0E:0E:99:98:62:8C:EE:05:61:B3:75:00:42:34:C6
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0B5E
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/61DD83FEEE3D11ED97780F764AD9E6FC.roa
Signing time: Tue 09 May 2023 07:44:52 +0000
ROA not before: Tue 09 May 2023 07:44:48 +0000
ROA not after: Thu 08 May 2025 07:44:48 +0000
asID: 834
IP address blocks: 102.165.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2910 (0xb5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 9 07:44:48 2023 GMT
Not After : May 8 07:44:48 2025 GMT
Subject: CN=6459f9f4-0a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c3:5e:08:0b:56:9d:d5:5b:44:e3:35:1d:b1:
be:c5:5d:db:d8:4e:bf:20:73:5d:ce:a8:54:c0:47:
60:35:d2:14:4e:23:b9:f6:6a:ef:76:4f:0e:a2:f5:
2d:96:42:ed:18:a6:9f:e9:10:07:3a:cf:d0:5d:ef:
2b:16:cd:45:a2:4b:c2:38:2c:ed:8f:fd:bc:52:00:
a4:0e:a7:75:52:33:80:6d:73:8b:bb:9e:47:93:bb:
66:bf:69:0a:80:71:48:f5:18:59:3e:f3:be:16:ca:
ba:a2:66:5a:23:78:77:6f:1e:a1:96:34:94:b0:74:
b2:ac:6e:88:3f:99:41:82:65:0f:76:bb:a9:e3:fe:
84:7f:6f:19:61:f4:a8:1d:38:ff:22:d3:f8:e1:b6:
5b:cc:d0:d8:d4:de:b7:30:7d:62:78:99:23:4c:52:
f0:62:52:0d:52:9d:ad:6b:48:4e:45:9d:1e:d1:16:
e7:6b:27:89:e1:e3:d5:f5:dc:87:ef:e7:9d:06:09:
5d:94:36:41:b6:b0:aa:ed:4c:0c:56:35:4a:62:18:
e3:57:fb:d1:48:ca:d5:4b:a5:6e:64:52:0f:b8:91:
6b:73:5c:d5:bf:3a:e1:24:e2:8e:85:18:da:cd:2a:
bf:ac:28:7e:57:bb:90:bd:b5:4b:d9:3c:1d:ea:14:
bd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1C:9C:A7:74:0E:0E:99:98:62:8C:EE:05:61:B3:75:00:42:34:C6
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/61DD83FEEE3D11ED97780F764AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.59.0/24
Signature Algorithm: sha256WithRSAEncryption
39:6e:05:d9:52:5b:a4:57:94:2f:9a:b0:8d:04:33:0d:af:b8:
5a:a0:46:ed:f6:15:f3:2c:4f:22:d8:50:b4:6a:1e:c8:6c:1e:
86:04:b4:60:ee:d5:37:9e:2f:af:72:1a:c6:0d:fe:2c:1a:6b:
26:95:45:e7:5f:33:6c:31:53:74:39:0e:8a:7c:c9:d6:ac:7a:
06:ec:21:ae:14:bc:e6:00:72:61:e1:d8:6e:dc:b1:25:63:97:
ec:bc:97:bf:20:f0:2d:62:ad:ab:e4:21:0c:1d:a9:6c:e0:c6:
e6:29:35:a2:eb:01:32:38:89:c2:2f:e9:37:11:ab:36:dc:6d:
e8:43:84:7f:3d:34:45:da:c7:4d:ad:30:be:83:93:73:07:d0:
b4:28:96:66:a3:25:84:d9:b7:6d:00:72:f5:e5:16:36:80:54:
77:0a:84:6a:ba:bd:c3:14:b8:ae:fa:93:b4:90:1d:27:c6:59:
9d:14:af:8c:06:31:c1:4f:17:a3:c2:18:c9:2e:b3:b3:92:87:
c4:41:7e:aa:22:f0:17:93:1a:27:46:65:78:59:55:97:8b:cb:
c1:db:3c:ee:3f:92:79:06:f5:e5:cc:c9:6b:44:bd:38:a7:95:
5d:10:e0:0c:20:64:42:a4:a8:f2:cb:73:51:a7:d5:8b:bd:09:
d9:cf:bb:e4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICC14wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzA1MDkwNzQ0NDhaFw0yNTA1MDgwNzQ0NDhaMBgxFjAU
BgNVBAMTDTY0NTlmOWY0LTBhOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCuw14IC1ad1VtE4zUdsb7FXdvYTr8gc13OqFTAR2A10hROI7n2au92Tw6i
9S2WQu0Ypp/pEAc6z9Bd7ysWzUWiS8I4LO2P/bxSAKQOp3VSM4Btc4u7nkeTu2a/
aQqAcUj1GFk+874WyrqiZlojeHdvHqGWNJSwdLKsbog/mUGCZQ92u6nj/oR/bxlh
9KgdOP8i0/jhtlvM0NjU3rcwfWJ4mSNMUvBiUg1Sna1rSE5FnR7RFudrJ4nh49X1
3Ifv550GCV2UNkG2sKrtTAxWNUpiGONX+9FIytVLpW5kUg+4kWtzXNW/OuEk4o6F
GNrNKr+sKH5Xu5C9tUvZPB3qFL3PAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU2hyc
p3QODpmYYozuBWGzdQBCNMYwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzYxREQ4M0ZFRUUzRDExRUQ5Nzc4MEY3NjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmpTswDQYJKoZIhvcNAQEL
BQADggEBADluBdlSW6RXlC+asI0EMw2vuFqgRu32FfMsTyLYULRqHshsHoYEtGDu
1TeeL69yGsYN/iwaayaVRedfM2wxU3Q5Dop8ydasegbsIa4UvOYAcmHh2G7csSVj
l+y8l78g8C1iravkIQwdqWzgxuYpNaLrATI4icIv6TcRqzbcbehDhH89NEXax02t
ML6Dk3MH0LQolmajJYTZt20AcvXlFjaAVHcKhGq6vcMUuK76k7SQHSfGWZ0Ur4wG
McFPF6PCGMkus7OSh8RBfqoi8BeTGidGZXhZVZeLy8HbPO4/knkG9eXMyWtEvTin
lV0Q4AwgZEKkqPLLc1Gn1Yu9CdnPu+Q=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org