Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7BB8D9BA6FE611EE9003300E4AD9E6FC.roa
File: 7BB8D9BA6FE611EE9003300E4AD9E6FC.roa (raw, json)
Hash identifier: YXXlBG7TIO8y6gZoIsAzFfDCorA5Qbi0WU+KXaRU0TI=
Subject key identifier: 31:54:C0:33:4A:02:6A:E9:F7:92:D5:BC:95:E5:03:A4:CF:35:F6:94
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0DFC
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7BB8D9BA6FE611EE9003300E4AD9E6FC.roa
Signing time: Sat 21 Oct 2023 07:50:20 +0000
ROA not before: Sat 21 Oct 2023 07:50:16 +0000
ROA not after: Tue 21 Oct 2025 07:50:16 +0000
asID: 834
IP address blocks: 102.129.136.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3580 (0xdfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 21 07:50:16 2023 GMT
Not After : Oct 21 07:50:16 2025 GMT
Subject: CN=653382bc-7da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c7:5e:8b:14:6a:76:cd:75:6d:93:2e:77:8f:
87:fc:6b:58:44:f6:5b:6f:d0:6f:fe:5d:2f:fe:a3:
21:b1:f8:3a:70:8f:ee:3d:2d:d0:ec:af:74:5c:67:
44:b1:93:08:b9:3e:ac:12:ec:d5:27:aa:2d:c8:ca:
98:8f:f9:5e:96:81:99:c6:dc:19:1e:62:66:ff:63:
a0:50:7a:53:51:28:e9:1e:f6:9a:55:66:29:69:8a:
4b:60:6e:ca:96:63:a7:63:45:16:b7:a9:54:8c:52:
23:77:9d:ce:c6:90:8e:fb:a1:0e:0f:e8:62:4f:6d:
e8:d8:42:87:5e:21:ac:6f:c5:92:95:4a:9e:41:0a:
5c:7d:8c:84:5e:98:a4:ca:f4:af:85:2c:2e:93:fd:
9e:74:b8:d4:fa:15:84:e7:cd:c1:6d:56:65:c3:25:
8a:ec:88:fb:23:39:99:77:5e:72:36:47:60:3c:93:
56:6a:1e:db:7f:8e:48:18:3f:5e:7d:ad:34:db:1d:
da:bb:86:9c:70:56:9e:22:30:c6:bd:99:37:fa:55:
5b:01:8d:49:1d:f1:49:05:92:d5:7f:2a:91:6c:7d:
f3:3b:15:02:9c:0c:10:62:ce:c2:e3:14:76:76:b8:
30:ca:c6:ba:28:71:0c:61:2a:58:d5:0d:84:c8:7b:
e4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:54:C0:33:4A:02:6A:E9:F7:92:D5:BC:95:E5:03:A4:CF:35:F6:94
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7BB8D9BA6FE611EE9003300E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.136.0/24
Signature Algorithm: sha256WithRSAEncryption
62:91:e7:5d:e7:6c:8f:b7:bc:86:d6:0d:ef:af:b3:5d:29:0b:
90:d6:ee:4c:ba:49:6f:08:07:9b:66:c1:3b:00:4b:f7:25:5b:
e8:b0:c4:2e:81:3d:b7:c7:23:b0:c5:0f:a8:58:e1:f6:11:e7:
0b:d5:35:a9:b8:67:0c:24:20:32:88:2b:a5:26:9f:d5:0b:b4:
a8:3f:40:2f:87:01:ec:26:7a:bb:9a:73:02:e0:53:30:b6:f7:
0c:f1:c4:34:3d:9c:2b:5d:c0:b5:af:c6:c5:22:b7:dc:f4:11:
03:f5:ab:8c:8e:60:dc:bd:d6:47:55:77:e4:95:91:66:f8:71:
e6:c9:b2:e9:4a:1b:6d:33:27:9f:05:5a:00:35:4c:8f:bb:70:
20:b4:f0:63:18:d8:73:e1:b9:d9:91:12:b4:73:f0:6b:c1:d6:
13:3d:1d:81:0d:cf:c5:de:5e:b5:88:a3:d7:1d:c6:99:76:49:
73:80:cd:fb:81:5d:c3:b6:3a:4c:cd:c9:41:ad:cd:58:c8:d6:
0d:2c:85:e6:eb:2e:8e:b4:87:5f:e1:0b:31:d8:2c:ae:4d:9f:
7b:bc:26:e3:a8:e0:10:1b:a6:72:76:dd:85:41:17:84:d8:d0:
15:80:da:4a:cd:32:e6:0b:99:34:ad:24:71:4a:68:8e:ab:b0:
ff:5e:b0:fd
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDfwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzEwMjEwNzUwMTZaFw0yNTEwMjEwNzUwMTZaMBgxFjAU
BgNVBAMTDTY1MzM4MmJjLTdkYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCgx16LFGp2zXVtky53j4f8a1hE9ltv0G/+XS/+oyGx+Dpwj+49LdDsr3Rc
Z0Sxkwi5PqwS7NUnqi3IypiP+V6WgZnG3BkeYmb/Y6BQelNRKOke9ppVZilpiktg
bsqWY6djRRa3qVSMUiN3nc7GkI77oQ4P6GJPbejYQodeIaxvxZKVSp5BClx9jIRe
mKTK9K+FLC6T/Z50uNT6FYTnzcFtVmXDJYrsiPsjOZl3XnI2R2A8k1ZqHtt/jkgY
P159rTTbHdq7hpxwVp4iMMa9mTf6VVsBjUkd8UkFktV/KpFsffM7FQKcDBBizsLj
FHZ2uDDKxroocQxhKljVDYTIe+TNAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUMVTA
M0oCaun3ktW8leUDpM819pQwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzdCQjhEOUJBNkZFNjExRUU5MDAzMzAwRTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgYgwDQYJKoZIhvcNAQEL
BQADggEBAGKR513nbI+3vIbWDe+vs10pC5DW7ky6SW8IB5tmwTsAS/clW+iwxC6B
PbfHI7DFD6hY4fYR5wvVNam4ZwwkIDKIK6Umn9ULtKg/QC+HAewmeruacwLgUzC2
9wzxxDQ9nCtdwLWvxsUit9z0EQP1q4yOYNy91kdVd+SVkWb4cebJsulKG20zJ58F
WgA1TI+7cCC08GMY2HPhudmRErRz8GvB1hM9HYENz8XeXrWIo9cdxpl2SXOAzfuB
XcO2OkzNyUGtzVjI1g0shebrLo60h1/hCzHYLK5Nn3u8JuOo4BAbpnJ23YVBF4TY
0BWA2krNMuYLmTStJHFKaI6rsP9esP0=
-----END CERTIFICATE-----
Generated at Sun Oct 22 06:52:06 2023 by rpki-client on console-ams.rpki-client.org