Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/876E9D7A2A1011EDA0BC45E8F1222468.roa
File: 876E9D7A2A1011EDA0BC45E8F1222468.roa (raw, json)
Hash identifier: Q0Jz7n6VfIbCLMMiuBXkoKdr7FSOPZQkCvHJz/6oqAI=
Subject key identifier: 97:BF:D4:BD:47:30:0E:B1:A8:04:B7:AD:31:32:06:DD:3F:11:52:AB
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 07CB
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/876E9D7A2A1011EDA0BC45E8F1222468.roa
Signing time: Thu 01 Sep 2022 16:10:00 +0000
ROA not before: Thu 01 Sep 2022 16:09:56 +0000
ROA not after: Thu 05 Sep 2024 16:09:56 +0000
asID: 22773
IP address blocks: 102.129.244.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1995 (0x7cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 1 16:09:56 2022 GMT
Not After : Sep 5 16:09:56 2024 GMT
Subject: CN=6310d958-96d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:79:1c:c7:2b:dc:37:7c:bb:10:d6:22:ed:63:
0a:ce:39:cd:48:91:9e:46:22:75:17:5f:b5:7a:25:
4c:4e:46:48:53:8b:f8:ca:9a:46:89:93:96:40:f6:
c6:03:36:f5:f6:8d:5b:3e:9f:ae:a0:e7:b9:cd:f1:
8b:80:4d:4c:24:c9:5c:de:56:f1:25:8e:29:1e:1b:
0f:31:db:c7:b5:11:ab:fa:6b:82:1c:1a:a8:c4:59:
ae:bb:67:7d:47:3f:16:a9:1a:79:a7:ed:31:f7:7e:
19:76:8c:24:bf:4e:ad:14:b8:4d:0e:10:2b:0e:f5:
26:21:d9:87:1e:86:60:ff:ac:76:6b:89:af:97:6b:
0e:81:66:56:f5:4f:c0:c9:da:d8:0a:3f:0d:60:82:
23:09:74:10:89:f6:8a:0e:07:c1:bf:56:09:96:e5:
84:60:3e:36:a0:e3:75:f5:ee:63:42:8f:0d:93:dd:
8d:bb:b0:16:9f:59:1d:8a:00:87:f9:f1:51:58:b8:
4c:96:c0:57:0c:15:b7:ba:79:d3:88:df:f0:9a:ef:
71:92:00:08:44:49:5c:e8:be:19:11:8d:9d:7e:b1:
c1:8d:f6:45:18:cb:65:fb:4d:45:8b:40:c1:0d:65:
62:f2:1e:ef:1b:ee:74:3a:fc:19:9b:71:80:bd:ba:
74:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BF:D4:BD:47:30:0E:B1:A8:04:B7:AD:31:32:06:DD:3F:11:52:AB
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/876E9D7A2A1011EDA0BC45E8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.244.0/22
Signature Algorithm: sha256WithRSAEncryption
33:71:ae:f8:5c:4c:5d:bd:d1:7c:a8:a0:e5:22:a0:41:2f:1e:
eb:b2:11:36:2e:ae:2f:e5:be:e9:e8:dc:1a:52:f9:bb:5b:b4:
54:8f:cf:4e:b8:23:dc:e1:32:15:5b:3f:37:d2:6a:88:b4:95:
02:f8:09:15:a0:88:fc:06:90:6c:cb:dd:a8:12:fb:32:51:ad:
f8:b3:df:64:fd:94:1d:a7:a2:11:38:79:ae:1b:8a:4d:99:9b:
9f:d9:f7:8a:34:3e:00:a9:9b:a4:3a:e4:59:95:a8:55:15:cc:
92:13:28:c0:71:1e:60:39:0b:da:54:34:89:84:bb:1c:e8:70:
34:f4:b1:38:d5:a7:f6:24:94:1b:21:ae:7a:09:ab:2d:f9:10:
9e:50:f8:b0:6a:ee:1b:1b:12:87:ac:9d:62:26:7b:56:2b:39:
a5:ec:ce:4b:39:e2:fc:52:d7:4d:2e:4f:84:26:3a:71:95:2e:
a1:a4:b3:9c:d9:98:ac:10:73:87:f8:d4:1f:fa:f5:f6:c3:5e:
b7:79:4e:a5:52:9d:d5:a3:d2:5a:13:2b:c2:cf:31:e9:df:4b:
f8:96:2c:57:89:69:e1:0d:7f:ae:6b:d4:b4:0b:45:ea:e5:73:
2f:8e:4a:1e:85:67:b8:f7:89:8b:75:09:63:7a:83:0c:1e:86:
2c:d7:2c:9e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB8swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMjA5MDExNjA5NTZaFw0yNDA5MDUxNjA5NTZaMBgxFjAU
BgNVBAMMDTYzMTBkOTU4LTk2ZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8eRzHK9w3fLsQ1iLtYwrOOc1IkZ5GInUXX7V6JUxORkhTi/jKmkaJk5ZA
9sYDNvX2jVs+n66g57nN8YuATUwkyVzeVvEljikeGw8x28e1Eav6a4IcGqjEWa67
Z31HPxapGnmn7TH3fhl2jCS/Tq0UuE0OECsO9SYh2YcehmD/rHZria+Xaw6BZlb1
T8DJ2tgKPw1ggiMJdBCJ9ooOB8G/VgmW5YRgPjag43X17mNCjw2T3Y27sBafWR2K
AIf58VFYuEyWwFcMFbe6edOI3/Ca73GSAAhESVzovhkRjZ1+scGN9kUYy2X7TUWL
QMENZWLyHu8b7nQ6/BmbcYC9unRlAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUl7/U
vUcwDrGoBLetMTIG3T8RUqswHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4Lzg3NkU5RDdBMkExMDExRURBMEJDNDVFOEYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmgfQwDQYJKoZIhvcNAQEL
BQADggEBADNxrvhcTF290XyooOUioEEvHuuyETYuri/lvuno3BpS+btbtFSPz064
I9zhMhVbPzfSaoi0lQL4CRWgiPwGkGzL3agS+zJRrfiz32T9lB2nohE4ea4bik2Z
m5/Z94o0PgCpm6Q65FmVqFUVzJITKMBxHmA5C9pUNImEuxzocDT0sTjVp/YklBsh
rnoJqy35EJ5Q+LBq7hsbEoesnWIme1YrOaXszks54vxS100uT4QmOnGVLqGks5zZ
mKwQc4f41B/69fbDXrd5TqVSndWj0loTK8LPMenfS/iWLFeJaeENf65r1LQLRerl
cy+OSh6FZ7j3iYt1CWN6gwwehizXLJ4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org