Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/944ECF2ED61111EA9F6C5F2BF8AEA228.roa
File: 944ECF2ED61111EA9F6C5F2BF8AEA228.roa (raw, json)
Hash identifier: 28PkZA5LqxgrM35iDGHZD2/qUGeg53D+7/Xm3hSos/E=
Subject key identifier: 65:51:08:E3:F8:D3:44:56:BC:E7:99:AB:19:BE:1F:3C:A4:D5:81:8C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0208
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/944ECF2ED61111EA9F6C5F2BF8AEA228.roa
Signing time: Tue 04 Aug 2020 05:15:59 +0000
ROA not before: Tue 04 Aug 2020 05:15:52 +0000
ROA not after: Fri 01 Aug 2025 05:15:52 +0000
asID: 40676
IP address blocks: 102.129.192.0/23 maxlen: 24
102.129.206.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 520 (0x208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 4 05:15:52 2020 GMT
Not After : Aug 1 05:15:52 2025 GMT
Subject: CN=5f28ef0e-1648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a5:d5:14:38:b1:1a:ed:e5:96:c0:a8:fc:f9:
a8:3c:75:f2:e3:4b:c1:f8:c5:03:ab:4b:19:2d:73:
5c:db:e5:46:83:50:95:6f:6e:4f:97:76:57:94:06:
8d:5e:6a:30:fb:ef:2e:3f:e5:09:62:54:62:d0:4f:
92:e4:e2:b7:15:62:a6:c6:e3:cc:d9:76:dd:11:f6:
53:ec:b3:09:2c:cb:af:5d:fa:5c:02:4e:9a:dc:0e:
69:67:a4:ed:29:96:6d:f9:ca:2e:f9:c6:5b:5a:bf:
48:df:20:6f:bf:1e:96:c8:8b:ec:18:6c:da:07:33:
1c:35:74:17:51:0d:6f:1a:48:bb:f9:f4:61:90:c6:
d9:2e:b6:e4:bc:b2:fd:37:ad:a9:b8:49:84:9b:6e:
b2:24:82:22:1a:61:67:73:3a:ec:27:9f:03:7c:bd:
81:0e:bf:02:6f:df:a0:47:4a:78:e7:b6:bc:ab:ed:
99:d9:ae:29:da:cc:91:89:96:02:e4:cd:4c:ee:4b:
0d:de:06:99:1c:84:0b:e1:1b:3d:59:1f:4b:6f:f2:
0c:26:b1:87:d3:8e:d9:38:a8:72:79:6f:16:52:52:
31:a1:c4:ad:45:5e:7d:f0:1e:6d:f4:8e:31:b5:c2:
88:ea:1b:7f:aa:d9:3f:c3:f7:a4:de:26:53:2a:f6:
c4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:51:08:E3:F8:D3:44:56:BC:E7:99:AB:19:BE:1F:3C:A4:D5:81:8C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/944ECF2ED61111EA9F6C5F2BF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.192.0/23
102.129.206.0/23
Signature Algorithm: sha256WithRSAEncryption
75:c0:07:7e:7b:78:ae:c5:9f:6b:23:98:c9:a2:09:88:15:87:
6b:2b:3b:9b:1a:6b:bf:36:c0:f1:79:2a:24:0f:f5:5d:f0:a6:
69:f9:fd:dd:d6:18:9d:9a:67:44:be:1e:9b:39:2d:e7:00:ed:
45:c5:58:a3:59:33:69:78:6a:ec:63:8d:9d:83:c2:97:a0:7a:
ff:be:33:70:8c:01:0d:58:6f:09:d7:2e:91:14:a6:d5:3e:e2:
2d:62:43:9d:7b:85:ad:f1:4c:a1:5f:3f:68:6f:3a:f8:f4:fd:
1e:b8:f2:79:ea:1c:25:5f:26:22:c6:7f:cb:47:15:06:2d:5c:
23:51:57:1e:cf:d2:f4:5e:25:7c:7f:b9:13:40:b4:18:4b:37:
2b:e6:68:88:df:19:25:b2:17:a8:ab:b8:fd:b9:07:44:04:3e:
e3:d9:d5:cf:83:be:5b:16:bf:5e:8a:01:b0:e5:2b:35:64:cf:
61:4b:f7:5b:20:a4:5b:53:46:3d:76:d2:e7:13:45:ee:e2:a8:
f2:7a:da:45:01:f8:56:d8:d3:4c:3b:e0:a5:22:20:2b:55:25:
a7:a9:25:0f:02:83:b5:c2:ed:f8:3e:47:8d:ee:01:54:d3:ac:
f0:ee:ec:c6:30:e8:dc:5c:fe:2b:d9:96:7f:ae:7f:33:ca:71:
f4:4f:62:c3
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgICAggwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMDA4MDQwNTE1NTJaFw0yNTA4MDEwNTE1NTJaMBgxFjAU
BgNVBAMTDTVmMjhlZjBlLTE2NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCtpdUUOLEa7eWWwKj8+ag8dfLjS8H4xQOrSxktc1zb5UaDUJVvbk+XdleU
Bo1eajD77y4/5QliVGLQT5Lk4rcVYqbG48zZdt0R9lPsswksy69d+lwCTprcDmln
pO0plm35yi75xltav0jfIG+/HpbIi+wYbNoHMxw1dBdRDW8aSLv59GGQxtkutuS8
sv03ram4SYSbbrIkgiIaYWdzOuwnnwN8vYEOvwJv36BHSnjntryr7ZnZrinazJGJ
lgLkzUzuSw3eBpkchAvhGz1ZH0tv8gwmsYfTjtk4qHJ5bxZSUjGhxK1FXn3wHm30
jjG1wojqG3+q2T/D96TeJlMq9sSDAgMBAAGjggKrMIICpzAdBgNVHQ4EFgQUZVEI
4/jTRFa855mrGb4fPKTVgYwwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4Lzk0NEVDRjJFRDYxMTExRUE5RjZDNUYyQkY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAFmgcADBAFmgc4wDQYJKoZI
hvcNAQELBQADggEBAHXAB357eK7Fn2sjmMmiCYgVh2srO5saa782wPF5KiQP9V3w
pmn5/d3WGJ2aZ0S+Hps5LecA7UXFWKNZM2l4auxjjZ2Dwpegev++M3CMAQ1YbwnX
LpEUptU+4i1iQ517ha3xTKFfP2hvOvj0/R648nnqHCVfJiLGf8tHFQYtXCNRVx7P
0vReJXx/uRNAtBhLNyvmaIjfGSWyF6iruP25B0QEPuPZ1c+DvlsWv16KAbDlKzVk
z2FL91sgpFtTRj120ucTRe7iqPJ62kUB+FbY00w74KUiICtVJaepJQ8Cg7XC7fg+
R43uAVTTrPDu7MYw6Nxc/ivZln+ufzPKcfRPYsM=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org