Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/97CE5E1812EA11ED801D4CC8F1222468.roa
File: 97CE5E1812EA11ED801D4CC8F1222468.roa (raw, json)
Hash identifier: lrLrct6LFbI+2h9i2EOCqzpcFNMfSNfX2O5i/WB0VOk=
Subject key identifier: D8:E3:78:D8:87:2C:2A:2F:E8:2E:57:2B:8F:19:15:A0:BF:DF:B0:14
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 075F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/97CE5E1812EA11ED801D4CC8F1222468.roa
Signing time: Wed 03 Aug 2022 05:10:30 +0000
ROA not before: Wed 03 Aug 2022 05:10:24 +0000
ROA not after: Sat 03 Aug 2024 05:10:24 +0000
asID: 207459
IP address blocks: 102.129.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jan 2023 15:05:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1887 (0x75f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 3 05:10:24 2022 GMT
Not After : Aug 3 05:10:24 2024 GMT
Subject: CN=62ea0346-ae38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:2a:bf:78:ce:d8:f5:4f:87:c1:ca:94:90:
7f:9e:8a:13:cc:7d:46:b0:ed:d4:c0:d2:06:b5:1c:
ec:b0:c9:1e:e9:eb:98:e2:e6:28:ad:d7:df:57:a3:
5a:32:bc:1b:a7:60:e6:25:67:3b:48:a1:dd:e1:d5:
2f:5d:98:1d:ad:21:39:29:22:89:54:b6:24:02:43:
0a:4e:cd:9e:3b:1f:92:a5:0a:f4:6d:e5:64:8f:e3:
23:83:70:92:73:ac:11:2c:c3:39:9c:a1:7d:67:d9:
c9:ab:0b:f3:83:f3:c6:8e:72:66:39:89:04:ba:d8:
cc:ed:76:d9:c6:df:03:4a:b9:42:bf:41:6a:82:00:
a7:26:97:7f:08:9e:9a:e4:6c:8b:8d:8a:64:55:6c:
b6:d9:5a:b4:53:57:6e:55:12:50:b6:a6:5e:9b:63:
b0:5f:ee:c1:ae:7c:59:1b:e2:59:64:26:8e:16:dd:
0f:d8:68:be:82:d2:5f:f9:f3:13:b3:35:b0:b5:02:
41:e4:58:3d:9f:61:9a:c7:9b:01:52:f1:8a:70:4e:
20:23:17:f6:79:8e:21:0b:1c:8f:9c:f0:a7:ad:67:
9a:d7:d3:4a:6b:63:b4:6a:a5:9d:f4:31:56:99:da:
2b:ae:14:37:3f:ab:11:8b:1f:84:d1:e0:ee:1e:f3:
fa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E3:78:D8:87:2C:2A:2F:E8:2E:57:2B:8F:19:15:A0:BF:DF:B0:14
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/97CE5E1812EA11ED801D4CC8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.225.0/24
Signature Algorithm: sha256WithRSAEncryption
56:d3:a0:3b:d3:40:90:5b:5c:53:bf:88:40:0d:58:c0:ef:f3:
64:9b:bc:18:4b:cd:cd:e1:cd:ca:97:b5:70:a1:af:94:ff:95:
c2:18:06:d7:75:f7:bf:d4:d8:9d:d0:be:aa:76:af:8c:fe:1b:
85:eb:a4:a0:30:cf:27:76:1c:fd:c2:0a:5d:e4:75:dd:68:28:
0c:62:ba:a3:f8:4d:cd:73:de:a2:bc:db:b3:7f:4e:54:fa:42:
ee:bd:0e:9a:50:a1:9c:e7:50:25:58:b6:ac:f5:ce:bd:90:1a:
da:3d:9f:5e:11:9c:64:14:b2:e0:d2:57:2e:b2:d1:ab:2a:18:
b7:3d:fd:bc:ab:84:cb:92:44:e7:8c:04:dc:3d:59:dc:ea:67:
32:d1:49:ca:16:15:58:26:85:30:db:7e:b9:b1:89:9d:cc:98:
0f:96:56:ed:55:60:e5:95:3a:b5:cc:a9:40:d2:a2:f2:41:73:
92:34:09:3e:6e:45:c6:40:5a:cc:6a:0c:bf:92:16:a2:59:36:
9d:49:9c:ef:0a:9b:88:23:72:10:ca:18:41:09:b3:7a:e8:98:
38:f9:0d:47:b3:ed:ce:24:e7:6d:23:a7:5e:88:6d:b0:4d:4f:
d2:c7:12:b6:d3:24:5e:6b:94:a2:07:47:c4:ef:a7:a0:be:81:
d5:b8:a0:f6
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB18wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMjA4MDMwNTEwMjRaFw0yNDA4MDMwNTEwMjRaMBgxFjAU
BgNVBAMMDTYyZWEwMzQ2LWFlMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0Hiq/eM7Y9U+HwcqUkH+eihPMfUaw7dTA0ga1HOywyR7p65ji5iit199X
o1oyvBunYOYlZztIod3h1S9dmB2tITkpIolUtiQCQwpOzZ47H5KlCvRt5WSP4yOD
cJJzrBEswzmcoX1n2cmrC/OD88aOcmY5iQS62MztdtnG3wNKuUK/QWqCAKcml38I
nprkbIuNimRVbLbZWrRTV25VElC2pl6bY7Bf7sGufFkb4llkJo4W3Q/YaL6C0l/5
8xOzNbC1AkHkWD2fYZrHmwFS8YpwTiAjF/Z5jiELHI+c8KetZ5rX00prY7RqpZ30
MVaZ2iuuFDc/qxGLH4TR4O4e8/oRAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU2ON4
2IcsKi/oLlcrjxkVoL/fsBQwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4Lzk3Q0U1RTE4MTJFQTExRUQ4MDFENENDOEYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgeEwDQYJKoZIhvcNAQEL
BQADggEBAFbToDvTQJBbXFO/iEANWMDv82SbvBhLzc3hzcqXtXChr5T/lcIYBtd1
97/U2J3Qvqp2r4z+G4XrpKAwzyd2HP3CCl3kdd1oKAxiuqP4Tc1z3qK827N/TlT6
Qu69DppQoZznUCVYtqz1zr2QGto9n14RnGQUsuDSVy6y0asqGLc9/byrhMuSROeM
BNw9WdzqZzLRScoWFVgmhTDbfrmxiZ3MmA+WVu1VYOWVOrXMqUDSovJBc5I0CT5u
RcZAWsxqDL+SFqJZNp1JnO8Km4gjchDKGEEJs3romDj5DUez7c4k520jp16IbbBN
T9LHErbTJF5rlKIHR8Tvp6C+gdW4oPY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-ams.rpki-client.org