Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/80E49F46B3E611EB8F05A913F8AEA228.roa
File: 80E49F46B3E611EB8F05A913F8AEA228.roa (raw, json)
Hash identifier: u0/YUg4AanLBhiDeCtzjwZXlrVUVfsn9S6eAGgTW1DE=
Subject key identifier: DB:CF:07:AF:67:8C:67:0A:02:71:80:6F:00:3B:7C:2B:49:E0:33:DE
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 03F1
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/80E49F46B3E611EB8F05A913F8AEA228.roa
Signing time: Thu 13 May 2021 12:26:56 +0000
ROA not before: Thu 13 May 2021 12:26:48 +0000
ROA not after: Sat 13 May 2028 12:26:48 +0000
asID: 3356
IP address blocks: 102.165.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Oct 2022 12:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1009 (0x3f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 13 12:26:48 2021 GMT
Not After : May 13 12:26:48 2028 GMT
Subject: CN=609d1b10-d8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:58:84:7e:83:30:7d:09:18:71:ec:0b:7e:70:
de:53:4b:a5:29:03:a2:04:05:d7:bf:76:c6:1b:68:
cc:b6:94:c9:7f:9e:e7:55:67:cd:07:0f:7a:da:47:
fd:94:da:8b:b9:43:97:a7:87:0e:07:3c:7d:12:b8:
0f:ab:0d:65:8c:ab:ff:32:7c:bc:53:6f:c4:f1:93:
ec:cb:d8:bd:b2:e0:7c:7e:62:ba:9a:26:04:b8:4a:
45:a4:e5:0d:5a:4c:7c:4f:80:27:f8:9b:fa:ef:7a:
ad:da:90:5a:cd:e8:b7:fb:75:77:e9:6b:05:3a:2f:
76:68:c7:59:ad:ad:0c:f9:25:56:33:cb:d0:73:3a:
c9:75:de:d5:9f:0a:1a:50:2f:ac:46:40:37:2c:f7:
ee:2e:33:f8:63:31:27:df:16:46:f5:ae:b4:2b:6a:
51:40:0a:87:f5:62:62:4b:13:0a:db:34:0e:c6:cb:
22:dd:6b:79:cc:d0:57:94:99:23:11:c8:8c:3d:af:
06:41:0c:2f:c5:15:db:ca:ba:1d:c6:7b:ee:8a:d9:
8f:02:91:27:7b:09:af:a3:86:78:a3:45:c4:7b:46:
bf:a1:30:36:77:08:9d:c8:15:18:7a:51:65:4f:ce:
68:5a:d9:ee:6a:20:81:90:7a:2f:bd:3f:dd:b3:62:
22:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CF:07:AF:67:8C:67:0A:02:71:80:6F:00:3B:7C:2B:49:E0:33:DE
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/80E49F46B3E611EB8F05A913F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.26.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:f4:f9:0d:74:27:e1:24:8e:c1:02:10:90:be:5c:a9:99:d2:
40:f5:50:fd:a5:b9:ef:cc:13:a1:3e:7e:ea:22:6e:df:8b:1e:
4c:e2:52:b9:63:b5:77:6a:ae:6b:c3:74:d9:46:86:a1:15:e1:
9e:3e:0f:d9:fe:1c:1b:29:e8:6e:51:a3:59:4a:fb:66:e7:59:
be:1f:e0:cb:e4:ea:22:3e:f0:cb:aa:b4:21:a7:5d:32:dd:7f:
68:df:aa:ad:7e:3c:56:b6:93:87:cd:a6:cc:53:2f:d6:fe:c5:
47:93:96:06:ac:7f:e2:1e:67:d8:02:ba:1d:49:ce:aa:50:c0:
ee:db:11:10:b5:d7:f4:ef:5c:2f:f4:2c:37:cf:eb:a2:11:93:
6a:76:86:00:25:42:a0:de:74:ab:3d:11:f2:dd:44:a8:d5:90:
71:16:01:04:86:60:60:40:3f:fb:8e:c7:36:03:f0:0f:9d:a7:
17:61:1e:53:d0:67:24:36:7f:b1:07:34:21:e0:b2:76:7c:cf:
72:78:07:55:8c:40:26:6a:07:a7:c4:3c:0a:d3:ab:96:40:da:
7f:c5:0e:bf:16:16:69:b5:f2:2f:93:11:d5:cc:1e:b6:11:2f:
f3:9c:90:12:c2:20:dc:aa:ee:5c:fa:0d:d6:8e:12:1d:71:a8:
7c:3b:58:ad
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICA/EwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMTA1MTMxMjI2NDhaFw0yODA1MTMxMjI2NDhaMBgxFjAU
BgNVBAMTDTYwOWQxYjEwLWQ4YmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGWIR+gzB9CRhx7At+cN5TS6UpA6IEBde/dsYbaMy2lMl/nudVZ80HD3ra
R/2U2ou5Q5enhw4HPH0SuA+rDWWMq/8yfLxTb8Txk+zL2L2y4Hx+YrqaJgS4SkWk
5Q1aTHxPgCf4m/rveq3akFrN6Lf7dXfpawU6L3Zox1mtrQz5JVYzy9BzOsl13tWf
ChpQL6xGQDcs9+4uM/hjMSffFkb1rrQralFACof1YmJLEwrbNA7GyyLda3nM0FeU
mSMRyIw9rwZBDC/FFdvKuh3Ge+6K2Y8CkSd7Ca+jhnijRcR7Rr+hMDZ3CJ3IFRh6
UWVPzmha2e5qIIGQei+9P92zYiLpAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU288H
r2eMZwoCcYBvADt8K0ngM94wHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzgwRTQ5RjQ2QjNFNjExRUI4RjA1QTkxM0Y4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmpRowDQYJKoZIhvcNAQEL
BQADggEBALz0+Q10J+EkjsECEJC+XKmZ0kD1UP2lue/ME6E+fuoibt+LHkziUrlj
tXdqrmvDdNlGhqEV4Z4+D9n+HBsp6G5Ro1lK+2bnWb4f4Mvk6iI+8MuqtCGnXTLd
f2jfqq1+PFa2k4fNpsxTL9b+xUeTlgasf+IeZ9gCuh1JzqpQwO7bERC11/TvXC/0
LDfP66IRk2p2hgAlQqDedKs9EfLdRKjVkHEWAQSGYGBAP/uOxzYD8A+dpxdhHlPQ
ZyQ2f7EHNCHgsnZ8z3J4B1WMQCZqB6fEPArTq5ZA2n/FDr8WFmm18i+TEdXMHrYR
L/OckBLCINyq7lz6DdaOEh1xqHw7WK0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-ams.rpki-client.org