Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/721E4AD0CFE411EEA864B3AA775412E6.roa
File: 721E4AD0CFE411EEA864B3AA775412E6.roa (raw, json)
Hash identifier: dfM83Vmfvj54pFfIDBxQGVsw9AcBmTyTfQqxFqgImDg=
Subject key identifier: 5D:33:0F:4B:F6:8C:D4:98:35:66:B6:BF:31:83:F8:62:C0:7C:DC:50
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0F5C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/721E4AD0CFE411EEA864B3AA775412E6.roa
Signing time: Tue 20 Feb 2024 11:37:37 +0000
ROA not before: Tue 20 Feb 2024 11:37:32 +0000
ROA not after: Fri 20 Feb 2026 11:37:32 +0000
asID: 834
IP address blocks: 102.129.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Feb 2024 15:06:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3932 (0xf5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 20 11:37:32 2024 GMT
Not After : Feb 20 11:37:32 2026 GMT
Subject: CN=65d48f01-e6e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c7:ee:1e:74:a2:09:82:15:8f:97:cf:54:7a:
56:a7:68:bf:c0:3e:10:fe:95:c3:44:e3:b9:d3:e6:
23:cf:53:18:4b:da:6e:1e:ed:e4:38:bf:7a:87:e3:
34:76:ce:1d:fa:3d:84:7d:38:6f:03:40:fa:25:3a:
4f:b7:39:49:41:fd:d9:ca:d3:8a:aa:1e:b5:44:da:
8b:e1:2d:77:e1:33:49:22:b2:55:61:73:d8:c6:d3:
94:98:56:29:87:87:84:9c:d3:75:16:6e:0e:87:4f:
94:d4:aa:2b:af:1c:6d:d2:f1:ca:db:a6:64:b4:54:
50:9d:f5:6f:7d:f5:a0:fb:f9:c5:6d:d9:65:77:37:
de:a7:62:8a:53:9f:e8:e3:ec:63:97:72:bd:c3:d9:
d8:22:3d:7b:72:01:35:65:cc:bc:b2:9a:03:3b:0b:
6c:74:4f:de:b0:8b:60:cc:e3:a9:fe:59:e4:4d:b8:
5c:c8:f7:24:bc:97:1d:92:b9:f7:a4:a1:fa:c5:78:
2e:78:49:1d:9b:ec:d7:ba:7f:7d:57:49:e2:59:8a:
5c:08:ec:14:25:2f:71:fe:6d:5f:7e:10:7b:ae:d9:
34:19:3e:c8:d8:ef:98:2f:1f:e5:2a:46:6e:6d:1d:
29:ff:e6:15:37:ef:71:97:5a:7d:d0:55:bb:6c:5d:
7f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:33:0F:4B:F6:8C:D4:98:35:66:B6:BF:31:83:F8:62:C0:7C:DC:50
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/721E4AD0CFE411EEA864B3AA775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.178.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:d6:8e:7f:c3:d0:1f:33:6b:05:ce:d0:65:59:91:b0:86:9c:
ea:9b:ff:e1:47:a5:6d:b7:c3:1f:21:f4:da:65:24:8d:a2:14:
fa:d1:c4:b1:47:7c:a9:a7:e8:ff:96:82:c2:5e:67:d6:4d:e0:
e1:80:d3:79:ba:a1:4f:dc:3a:31:e0:4d:eb:7f:da:ee:09:e8:
2e:99:cd:1e:74:09:b8:52:ee:9b:75:b9:ae:70:de:a6:e6:37:
85:85:33:b7:e5:08:65:f1:25:f8:32:4a:dd:27:8a:89:0c:cf:
fa:9f:5d:41:04:ee:2e:a4:4b:bb:65:45:80:d9:a3:7f:21:50:
02:01:b9:ef:31:a6:ba:e3:ae:57:2b:df:c6:2e:0d:64:af:f4:
16:97:6f:b7:8c:96:0f:7d:8b:93:87:13:72:20:22:53:c5:67:
56:a7:01:25:ef:16:9d:f7:be:53:24:24:e9:cb:aa:f8:06:eb:
06:b9:bd:f1:e2:ab:c1:ba:ea:ab:5c:5f:c5:19:56:d2:f4:88:
7d:54:1f:15:be:37:6e:ce:77:a5:10:ab:16:4c:c3:78:0d:ec:
73:13:64:ce:64:ac:81:33:79:d5:3d:2c:66:4f:36:92:e1:53:
3b:c6:cc:cc:1b:95:f8:35:4c:19:40:80:12:90:41:d2:02:38:
38:8e:e0:9a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICD1wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNDAyMjAxMTM3MzJaFw0yNjAyMjAxMTM3MzJaMBgxFjAU
BgNVBAMTDTY1ZDQ4ZjAxLWU2ZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAx+4edKIJghWPl89UelanaL/APhD+lcNE47nT5iPPUxhL2m4e7eQ4v3qH
4zR2zh36PYR9OG8DQPolOk+3OUlB/dnK04qqHrVE2ovhLXfhM0kislVhc9jG05SY
VimHh4Sc03UWbg6HT5TUqiuvHG3S8crbpmS0VFCd9W999aD7+cVt2WV3N96nYopT
n+jj7GOXcr3D2dgiPXtyATVlzLyymgM7C2x0T96wi2DM46n+WeRNuFzI9yS8lx2S
ufekofrFeC54SR2b7Ne6f31XSeJZilwI7BQlL3H+bV9+EHuu2TQZPsjY75gvH+Uq
Rm5tHSn/5hU373GXWn3QVbtsXX9xAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUXTMP
S/aM1Jg1Zra/MYP4YsB83FAwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzcyMUU0QUQwQ0ZFNDExRUVBODY0QjNBQTc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgbIwDQYJKoZIhvcNAQEL
BQADggEBAIzWjn/D0B8zawXO0GVZkbCGnOqb/+FHpW23wx8h9NplJI2iFPrRxLFH
fKmn6P+WgsJeZ9ZN4OGA03m6oU/cOjHgTet/2u4J6C6ZzR50CbhS7pt1ua5w3qbm
N4WFM7flCGXxJfgySt0niokMz/qfXUEE7i6kS7tlRYDZo38hUAIBue8xprrjrlcr
38YuDWSv9BaXb7eMlg99i5OHE3IgIlPFZ1anASXvFp33vlMkJOnLqvgG6wa5vfHi
q8G66qtcX8UZVtL0iH1UHxW+N27Od6UQqxZMw3gN7HMTZM5krIEzedU9LGZPNpLh
UzvGzMwblfg1TBlAgBKQQdICODiO4Jo=
-----END CERTIFICATE-----
Generated at Wed Feb 21 19:42:55 2024 by rpki-client on console-fra.rpki-client.org