Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/849F735C241B11EEAADCB7194AD9E6FC.roa
File: 849F735C241B11EEAADCB7194AD9E6FC.roa (raw, json)
Hash identifier: Jg48AvC+Rj0KuEMw4/RqWW08qdl0D7RTETbFvB0wuhg=
Subject key identifier: 3A:7E:B4:8D:3D:5D:D8:C0:29:3A:15:C7:86:EF:81:9B:14:DB:32:EB
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0C7D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/849F735C241B11EEAADCB7194AD9E6FC.roa
Signing time: Sun 16 Jul 2023 20:58:30 +0000
ROA not before: Sun 16 Jul 2023 20:58:27 +0000
ROA not after: Tue 15 Jul 2025 20:58:27 +0000
asID: 834
IP address blocks: 102.129.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3197 (0xc7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 16 20:58:27 2023 GMT
Not After : Jul 15 20:58:27 2025 GMT
Subject: CN=64b459f6-3b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:59:92:7f:99:01:af:00:7a:03:96:9c:b2:12:
10:7a:20:b9:6b:18:a2:16:bd:2d:ad:22:c5:ba:f9:
cb:a1:f7:fb:09:02:79:97:30:61:96:27:bc:6f:44:
93:c7:fe:8d:6d:ad:37:1a:d4:4f:37:ff:ad:e1:63:
f3:0b:5a:95:42:de:8b:c2:b2:b5:64:f3:6f:48:50:
2a:be:ac:e6:79:4f:91:40:03:c1:60:23:ac:a8:ed:
4e:63:c3:83:fe:2f:ef:8d:db:34:f1:b0:66:83:12:
62:85:97:b3:6d:2d:81:a3:12:8c:c7:b5:ae:ce:84:
fb:58:fb:26:5a:a6:5b:84:5d:00:16:3b:c6:e2:b0:
f7:0a:7a:df:8a:9e:18:6f:2c:54:64:fa:9a:ad:22:
8a:a4:11:17:9d:95:e7:19:d0:8c:db:65:66:e8:7c:
d2:68:bf:27:02:5f:b3:32:bf:74:ea:b9:49:73:4a:
f9:be:e4:82:19:fb:1a:3d:da:6f:13:e2:e0:71:f1:
91:63:3d:69:01:84:61:ff:eb:68:45:b5:e1:f9:e7:
b6:be:9c:24:cb:f4:de:9c:8e:21:57:b2:57:da:37:
aa:bd:ce:35:03:12:d8:36:d0:ab:66:78:db:28:8d:
f9:d3:85:b1:f7:0f:1b:75:ef:15:a0:68:15:17:94:
bb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7E:B4:8D:3D:5D:D8:C0:29:3A:15:C7:86:EF:81:9B:14:DB:32:EB
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/849F735C241B11EEAADCB7194AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.226.0/24
Signature Algorithm: sha256WithRSAEncryption
91:1f:07:c5:6a:33:1e:fd:b3:eb:34:55:5a:54:64:c2:7f:02:
01:e3:c5:df:e7:2f:88:6e:06:24:dd:d1:32:50:0a:ab:4e:d8:
5b:ef:bc:e6:88:0b:5e:14:59:e0:f2:33:d1:b9:cb:57:6e:f9:
f2:c2:65:eb:e2:17:42:37:21:0d:e6:8c:06:75:f8:05:59:5d:
d6:64:5c:bc:30:06:20:18:00:10:f3:22:6a:00:5e:8d:ec:d2:
dd:f9:6f:d2:7a:89:b6:12:a6:b9:46:7a:cf:71:04:d7:f9:8f:
44:54:8e:cb:1d:3e:6c:4a:90:2b:e2:6e:cd:2e:0d:14:82:5b:
ea:f2:38:82:35:bd:d2:d5:de:dd:0a:ba:85:dd:1b:e6:18:5d:
63:00:7a:2c:35:4f:2f:07:88:80:42:f3:b6:90:92:85:06:c5:
f2:d5:a9:97:ec:58:1a:f2:29:d3:2e:58:44:0b:8c:34:b7:62:
21:4d:0b:86:61:a7:a7:19:5e:83:19:60:8c:c2:2a:02:b9:ca:
e7:6d:ce:f4:2a:57:72:0d:a4:19:43:78:e3:f9:f2:01:8d:34:
ad:f7:d1:ab:54:30:2a:bd:26:2b:7a:29:19:fe:60:c7:90:5c:
0f:36:47:8c:ae:df:88:3f:bd:97:3a:d3:5b:21:9f:bc:71:3a:
95:17:b5:89
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDH0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzA3MTYyMDU4MjdaFw0yNTA3MTUyMDU4MjdaMBgxFjAU
BgNVBAMTDTY0YjQ1OWY2LTNiMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCUWZJ/mQGvAHoDlpyyEhB6ILlrGKIWvS2tIsW6+cuh9/sJAnmXMGGWJ7xv
RJPH/o1trTca1E83/63hY/MLWpVC3ovCsrVk829IUCq+rOZ5T5FAA8FgI6yo7U5j
w4P+L++N2zTxsGaDEmKFl7NtLYGjEozHta7OhPtY+yZapluEXQAWO8bisPcKet+K
nhhvLFRk+pqtIoqkERedlecZ0IzbZWbofNJovycCX7Myv3TquUlzSvm+5IIZ+xo9
2m8T4uBx8ZFjPWkBhGH/62hFteH557a+nCTL9N6cjiFXslfaN6q9zjUDEtg20Ktm
eNsojfnThbH3Dxt17xWgaBUXlLtVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUOn60
jT1d2MApOhXHhu+BmxTbMuswHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4Lzg0OUY3MzVDMjQxQjExRUVBQURDQjcxOTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgeIwDQYJKoZIhvcNAQEL
BQADggEBAJEfB8VqMx79s+s0VVpUZMJ/AgHjxd/nL4huBiTd0TJQCqtO2FvvvOaI
C14UWeDyM9G5y1du+fLCZeviF0I3IQ3mjAZ1+AVZXdZkXLwwBiAYABDzImoAXo3s
0t35b9J6ibYSprlGes9xBNf5j0RUjssdPmxKkCvibs0uDRSCW+ryOII1vdLV3t0K
uoXdG+YYXWMAeiw1Ty8HiIBC87aQkoUGxfLVqZfsWBryKdMuWEQLjDS3YiFNC4Zh
p6cZXoMZYIzCKgK5yudtzvQqV3INpBlDeOP58gGNNK330atUMCq9Jit6KRn+YMeQ
XA82R4yu34g/vZc601shn7xxOpUXtYk=
-----END CERTIFICATE-----
Generated at Wed Sep 13 12:36:28 2023 by rpki-client on console-fra.rpki-client.org