Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8666724272F611EEA4159B5C4AD9E6FC.roa
File: 8666724272F611EEA4159B5C4AD9E6FC.roa (raw, json)
Hash identifier: aAXFmtXW56HMwKvGNUKyYRyI0eeyKjMFFY9SIOxS84M=
Subject key identifier: C9:75:BC:53:04:24:A8:46:50:A9:12:B3:41:EF:F6:69:F3:F6:71:7B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0E09
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8666724272F611EEA4159B5C4AD9E6FC.roa
Signing time: Wed 25 Oct 2023 05:22:44 +0000
ROA not before: Wed 25 Oct 2023 05:22:40 +0000
ROA not after: Sat 25 Oct 2025 05:22:40 +0000
asID: 834
IP address blocks: 102.165.57.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3593 (0xe09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 25 05:22:40 2023 GMT
Not After : Oct 25 05:22:40 2025 GMT
Subject: CN=6538a624-f5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3b:bb:5a:81:ed:8c:5a:fd:c2:51:78:5f:00:
93:9a:4d:49:4a:af:4e:18:84:93:eb:1b:78:34:32:
e5:ad:f4:f6:3e:97:e9:3f:60:0b:1b:ca:13:ef:3d:
d6:75:de:77:02:d1:0a:2e:3b:81:77:20:a5:4d:64:
56:43:58:5d:83:af:f0:27:bc:8c:7b:8e:43:2e:a6:
4d:8d:60:49:c7:ee:51:e1:56:cd:e8:9a:0e:de:bf:
27:d6:bb:1d:b2:ff:ff:69:1f:72:4d:61:e8:e8:1a:
9d:7f:c3:0e:0d:ff:eb:e9:35:cf:79:f0:87:46:0c:
d7:3f:1c:cd:37:c7:6e:62:78:a9:10:4f:5d:68:93:
4c:46:a8:70:19:20:c4:73:7e:2e:af:07:26:a0:e9:
7c:d9:de:7a:c5:3c:8f:d6:83:4d:87:41:a4:6b:b4:
9a:85:04:f9:04:3e:67:7a:36:b6:8e:e0:1b:42:f1:
3f:e5:37:53:05:ce:d0:24:5c:6a:3d:1e:5d:ef:f9:
ff:72:4c:a7:40:60:ec:13:85:ca:66:c5:4b:6c:d1:
f0:66:ef:3e:02:f6:73:bc:fe:8b:b0:f9:fe:e5:18:
e3:4f:cd:77:d9:e6:4a:47:f8:9f:e5:7a:3b:f4:92:
be:bf:d5:d7:88:06:c2:cf:59:46:31:2a:f2:70:0b:
5b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:75:BC:53:04:24:A8:46:50:A9:12:B3:41:EF:F6:69:F3:F6:71:7B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8666724272F611EEA4159B5C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.57.0/24
Signature Algorithm: sha256WithRSAEncryption
57:53:13:79:ce:96:ad:84:cb:81:94:15:de:8e:e9:1b:f1:39:
86:37:99:36:76:45:a6:58:a1:4e:6d:5b:bc:48:fe:df:b6:67:
3a:91:73:59:1d:e9:78:94:e2:e1:cd:e4:00:2e:b9:69:70:82:
80:e9:9f:a0:c2:e8:ae:a1:94:cc:d3:4e:d3:f1:47:46:14:a0:
00:54:29:1e:81:dd:3a:76:f8:75:cd:0b:3f:ad:3f:a2:61:33:
d8:8c:8c:78:69:ab:c3:2d:b3:d6:bd:64:85:77:40:c0:32:50:
03:c9:63:4f:7d:13:f2:1f:21:ad:f1:f3:93:75:71:62:c6:8a:
38:97:ad:31:4c:d4:35:b7:8d:71:6c:29:0c:5b:c5:d5:f8:df:
74:6a:c7:a1:b9:46:52:b2:1e:b1:a6:ba:2a:17:92:2a:47:60:
76:01:4b:c2:80:f8:bc:d5:87:8b:31:47:f7:c0:3e:8b:0b:d2:
7b:79:a0:1f:bf:5e:b8:bd:8c:07:fe:05:47:73:53:6f:f0:ad:
e7:a2:bf:35:b9:09:28:1f:0b:89:79:9c:a7:4e:72:d6:cf:e1:
77:db:fc:1f:5b:25:8a:fd:f5:33:27:ea:de:a8:8d:9e:5c:23:
6d:f4:cb:f5:20:94:7c:00:ae:63:21:1b:04:2f:6a:40:2f:b2:
7d:dc:af:b1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDgkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzEwMjUwNTIyNDBaFw0yNTEwMjUwNTIyNDBaMBgxFjAU
BgNVBAMTDTY1MzhhNjI0LWY1YjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCuO7tage2MWv3CUXhfAJOaTUlKr04YhJPrG3g0MuWt9PY+l+k/YAsbyhPv
PdZ13ncC0QouO4F3IKVNZFZDWF2Dr/AnvIx7jkMupk2NYEnH7lHhVs3omg7evyfW
ux2y//9pH3JNYejoGp1/ww4N/+vpNc958IdGDNc/HM03x25ieKkQT11ok0xGqHAZ
IMRzfi6vByag6XzZ3nrFPI/Wg02HQaRrtJqFBPkEPmd6NraO4BtC8T/lN1MFztAk
XGo9Hl3v+f9yTKdAYOwThcpmxUts0fBm7z4C9nO8/ouw+f7lGONPzXfZ5kpH+J/l
ejv0kr6/1deIBsLPWUYxKvJwC1vRAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUyXW8
UwQkqEZQqRKzQe/2afP2cXswHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4Lzg2NjY3MjQyNzJGNjExRUVBNDE1OUI1QzRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmpTkwDQYJKoZIhvcNAQEL
BQADggEBAFdTE3nOlq2Ey4GUFd6O6RvxOYY3mTZ2RaZYoU5tW7xI/t+2ZzqRc1kd
6XiU4uHN5AAuuWlwgoDpn6DC6K6hlMzTTtPxR0YUoABUKR6B3Tp2+HXNCz+tP6Jh
M9iMjHhpq8Mts9a9ZIV3QMAyUAPJY099E/IfIa3x85N1cWLGijiXrTFM1DW3jXFs
KQxbxdX433Rqx6G5RlKyHrGmuioXkipHYHYBS8KA+LzVh4sxR/fAPosL0nt5oB+/
Xri9jAf+BUdzU2/wreeivzW5CSgfC4l5nKdOctbP4Xfb/B9bJYr99TMn6t6ojZ5c
I230y/UglHwArmMhGwQvakAvsn3cr7E=
-----END CERTIFICATE-----
Generated at Thu Oct 26 12:54:05 2023 by rpki-client on console-ams.rpki-client.org