Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/996CBA025B9111EF89354A8D762E951A.roa
File: 996CBA025B9111EF89354A8D762E951A.roa (raw, json)
Hash identifier: 2jypGuVGQMEMmRfIsYOtd03HUBPFuiLGo4xxdmcPZhg=
Subject key identifier: 81:02:FF:13:31:9B:A2:BE:D3:97:1C:7C:ED:B9:60:6B:24:38:F4:FC
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 11B9
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/996CBA025B9111EF89354A8D762E951A.roa
Signing time: Fri 16 Aug 2024 05:37:17 +0000
ROA not before: Fri 16 Aug 2024 05:37:14 +0000
ROA not after: Sun 16 Aug 2026 05:37:14 +0000
asID: 834
IP address blocks: 102.129.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 07:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4537 (0x11b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 16 05:37:14 2024 GMT
Not After : Aug 16 05:37:14 2026 GMT
Subject: CN=66bee58d-ea28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ee:37:b1:dc:40:68:a3:c8:8d:e6:ba:19:e5:
25:df:32:2c:43:b5:3b:f6:a6:9d:fa:14:11:ea:a5:
23:7b:8a:7b:4f:fe:5b:50:71:ea:8e:fb:58:2e:2d:
50:90:f6:65:26:ad:14:d5:1b:60:5b:0e:c6:99:58:
34:3b:53:e3:c4:7d:56:99:aa:5c:33:6c:62:7d:2b:
70:92:fa:97:d9:bb:b6:5a:04:0c:b7:8d:d4:cd:c5:
89:8e:c1:6b:d6:d0:bc:28:b3:d5:b6:99:ce:bf:0b:
7e:b0:f1:29:9f:80:8a:0f:80:99:91:aa:d7:db:24:
1f:95:b9:b7:c9:34:b8:78:70:47:30:bf:c3:a9:71:
73:9a:77:35:b6:13:e9:fb:83:92:16:0e:d7:cc:b7:
ec:e1:37:44:f3:89:43:d6:18:3d:e2:be:87:1e:9b:
27:38:22:e6:da:58:64:10:3c:18:09:6a:de:64:83:
24:ec:fe:ed:32:9d:84:b2:ec:a1:c0:78:ab:24:3f:
df:4b:f7:be:b1:7e:c3:ad:95:ae:b1:fa:00:f9:97:
c2:e3:c3:90:90:2b:c5:ec:6b:8a:de:2b:19:2b:a3:
86:4e:84:3c:b6:88:6c:3e:3d:a6:b2:5c:4a:3b:93:
bf:c5:3f:17:6e:e5:22:23:25:98:66:3c:ef:b0:e2:
ec:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:02:FF:13:31:9B:A2:BE:D3:97:1C:7C:ED:B9:60:6B:24:38:F4:FC
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/996CBA025B9111EF89354A8D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.135.0/24
Signature Algorithm: sha256WithRSAEncryption
85:5e:8a:74:97:49:70:13:6a:e1:33:95:bd:dd:d5:55:60:f4:
3b:3f:6e:61:bf:c7:72:67:d1:db:c9:74:a6:ed:83:ba:2f:17:
77:dc:15:8e:f8:d5:a3:c6:89:47:84:18:7a:50:7c:c5:61:ea:
81:b4:1d:3c:9f:56:38:3c:81:55:a1:21:7b:99:df:1a:90:8c:
30:c0:25:47:76:eb:e3:22:e6:68:82:17:87:fb:7f:55:5d:8a:
da:17:c1:2e:45:f3:d3:5e:41:af:41:93:01:b1:48:0d:5e:55:
4b:56:96:5e:8e:ac:e3:cd:5f:27:a7:52:c1:50:a7:c1:4c:31:
68:39:bd:2e:8d:bd:ca:85:34:45:6d:a4:ec:e2:dd:f0:6c:5d:
1b:8f:e8:15:68:98:5d:32:2d:90:2f:7d:6d:09:13:56:ba:36:
12:eb:8c:2a:8e:0d:24:f7:b0:fe:64:e0:d8:b4:dc:06:62:cb:
88:14:3b:61:d0:2d:bc:91:a9:08:76:f1:e0:c9:a6:79:53:9e:
51:ce:f2:12:bb:af:90:44:d1:b7:5f:b3:40:25:5f:46:53:d2:
5d:35:c6:6c:f7:04:75:4c:f3:7b:04:ef:1d:b1:a3:e1:3a:9f:
04:8c:bf:c8:7b:61:bb:06:97:de:73:6a:31:44:62:eb:20:b5:
b4:ad:82:93
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEbkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNDA4MTYwNTM3MTRaFw0yNjA4MTYwNTM3MTRaMBgxFjAU
BgNVBAMTDTY2YmVlNThkLWVhMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCk7jex3EBoo8iN5roZ5SXfMixDtTv2pp36FBHqpSN7intP/ltQceqO+1gu
LVCQ9mUmrRTVG2BbDsaZWDQ7U+PEfVaZqlwzbGJ9K3CS+pfZu7ZaBAy3jdTNxYmO
wWvW0Lwos9W2mc6/C36w8SmfgIoPgJmRqtfbJB+VubfJNLh4cEcwv8OpcXOadzW2
E+n7g5IWDtfMt+zhN0TziUPWGD3ivocemyc4IubaWGQQPBgJat5kgyTs/u0ynYSy
7KHAeKskP99L976xfsOtla6x+gD5l8Ljw5CQK8Xsa4reKxkro4ZOhDy2iGw+Paay
XEo7k7/FPxdu5SIjJZhmPO+w4uznAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUgQL/
EzGbor7Tlxx87blgayQ49PwwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4Lzk5NkNCQTAyNUI5MTExRUY4OTM1NEE4RDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgYcwDQYJKoZIhvcNAQEL
BQADggEBAIVeinSXSXATauEzlb3d1VVg9Ds/bmG/x3Jn0dvJdKbtg7ovF3fcFY74
1aPGiUeEGHpQfMVh6oG0HTyfVjg8gVWhIXuZ3xqQjDDAJUd26+Mi5miCF4f7f1Vd
itoXwS5F89NeQa9BkwGxSA1eVUtWll6OrOPNXyenUsFQp8FMMWg5vS6NvcqFNEVt
pOzi3fBsXRuP6BVomF0yLZAvfW0JE1a6NhLrjCqODST3sP5k4Ni03AZiy4gUO2HQ
LbyRqQh28eDJpnlTnlHO8hK7r5BE0bdfs0AlX0ZT0l01xmz3BHVM83sE7x2xo+E6
nwSMv8h7YbsGl95zajFEYusgtbStgpM=
-----END CERTIFICATE-----
Generated at Thu Nov 21 09:47:20 2024 by rpki-client on console-ams.rpki-client.org