Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9B9C9FAA47EA11EFA9BD0759762E951A.roa
File: 9B9C9FAA47EA11EFA9BD0759762E951A.roa (raw, json)
Hash identifier: caujAIzsE1i7Ip87JO0cX9shzFXlBqYkxnlJcKvPT8w=
Subject key identifier: D2:5C:12:19:92:F4:CD:7C:B1:F3:A1:90:01:9E:33:D9:48:24:4E:1B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 116F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9B9C9FAA47EA11EFA9BD0759762E951A.roa
Signing time: Mon 22 Jul 2024 05:24:03 +0000
ROA not before: Mon 22 Jul 2024 05:24:00 +0000
ROA not after: Sat 25 Jul 2026 05:24:00 +0000
asID: 60117
IP address blocks: 102.129.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Aug 2024 09:14:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4463 (0x116f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 22 05:24:00 2024 GMT
Not After : Jul 25 05:24:00 2026 GMT
Subject: CN=669decf3-2349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:51:d4:1b:49:ff:d3:b8:19:df:b4:99:43:bd:
30:98:49:7c:0d:71:28:fa:b5:fc:f0:f7:e2:2e:ad:
a1:44:97:94:dc:26:eb:27:7f:64:c4:94:79:22:b8:
ba:9a:f9:b5:a0:df:76:bc:21:75:66:f3:0b:9d:3b:
b2:b8:7a:52:49:4e:ee:61:d1:2a:4b:32:79:46:b6:
aa:b5:40:18:5d:97:2b:a9:f7:b5:72:32:9d:fe:56:
35:ca:b6:12:d3:9d:0a:6b:1f:32:48:3c:8c:45:0e:
ee:85:c8:23:18:b1:b3:66:18:7c:50:c4:f6:66:96:
f6:a9:0e:4e:b7:80:a6:e7:c1:47:36:13:d6:30:5e:
13:4e:3a:eb:b5:36:91:8a:da:1d:79:63:df:e9:3d:
50:79:5c:4e:a7:f6:97:3f:31:5e:e3:5e:32:6e:f8:
8d:6b:ea:c6:18:9c:d2:bc:6b:18:91:8e:8b:57:cd:
67:0e:13:2e:16:97:13:58:d3:43:e3:fe:1c:7d:f8:
60:76:27:99:cb:7e:5b:eb:64:e3:e7:4e:12:f9:d2:
05:26:31:ee:f3:50:a1:00:18:8b:f6:08:b6:72:9f:
f9:a9:9b:9d:37:92:8f:bb:30:28:f0:56:c7:8f:1b:
30:f6:72:7a:c5:41:59:6c:ad:43:cb:5b:52:1c:3f:
1c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5C:12:19:92:F4:CD:7C:B1:F3:A1:90:01:9E:33:D9:48:24:4E:1B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9B9C9FAA47EA11EFA9BD0759762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.203.0/24
Signature Algorithm: sha256WithRSAEncryption
24:e1:da:25:22:5f:2e:15:37:7a:fb:43:f7:53:46:b0:b8:02:
1c:e0:7d:76:95:69:a9:da:15:6f:e8:30:97:65:da:24:47:b7:
37:ab:ec:54:b0:0c:ad:19:ef:42:43:40:d7:38:67:8f:83:9b:
b4:5d:4c:d3:25:6e:b9:69:c0:bd:e3:54:40:55:2b:32:51:88:
90:13:c1:02:5b:d9:1e:e0:7b:b1:c6:a3:77:bf:60:77:8f:8d:
4f:5d:a3:e5:38:ee:c7:b4:8e:51:77:87:e9:ee:1e:89:e8:0d:
ed:1e:00:62:34:c2:4f:eb:46:e4:e3:d7:d6:28:0b:04:a1:6c:
38:0a:bc:2c:97:5b:7a:97:4e:0e:2b:d6:3b:68:1f:3e:d7:61:
20:4b:a9:65:f6:b1:96:90:41:ac:35:b3:e8:e4:bb:f2:bb:8e:
c3:02:13:a2:b4:8e:77:56:cb:e1:ce:b0:03:d3:31:37:22:a7:
34:e7:8e:d6:bf:f0:c8:f8:5a:3b:62:29:72:0b:bc:0e:e1:6b:
3f:79:0e:af:9d:87:a1:f5:25:96:f1:41:5c:72:77:02:5e:de:
30:35:20:97:b8:65:f4:3f:b2:03:36:c8:8b:e2:e1:71:97:c7:
ef:1f:8f:39:34:a0:38:84:30:fc:4c:b5:3c:7e:ea:b9:6e:04:
e7:07:2f:60
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEW8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNDA3MjIwNTI0MDBaFw0yNjA3MjUwNTI0MDBaMBgxFjAU
BgNVBAMTDTY2OWRlY2YzLTIzNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8UdQbSf/TuBnftJlDvTCYSXwNcSj6tfzw9+IuraFEl5TcJusnf2TElHki
uLqa+bWg33a8IXVm8wudO7K4elJJTu5h0SpLMnlGtqq1QBhdlyup97VyMp3+VjXK
thLTnQprHzJIPIxFDu6FyCMYsbNmGHxQxPZmlvapDk63gKbnwUc2E9YwXhNOOuu1
NpGK2h15Y9/pPVB5XE6n9pc/MV7jXjJu+I1r6sYYnNK8axiRjotXzWcOEy4WlxNY
00Pj/hx9+GB2J5nLflvrZOPnThL50gUmMe7zUKEAGIv2CLZyn/mpm503ko+7MCjw
VsePGzD2cnrFQVlsrUPLW1IcPxwNAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU0lwS
GZL0zXyx86GQAZ4z2UgkThswHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzlCOUM5RkFBNDdFQTExRUZBOUJEMDc1OTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgcswDQYJKoZIhvcNAQEL
BQADggEBACTh2iUiXy4VN3r7Q/dTRrC4AhzgfXaVaanaFW/oMJdl2iRHtzer7FSw
DK0Z70JDQNc4Z4+Dm7RdTNMlbrlpwL3jVEBVKzJRiJATwQJb2R7ge7HGo3e/YHeP
jU9do+U47se0jlF3h+nuHonoDe0eAGI0wk/rRuTj19YoCwShbDgKvCyXW3qXTg4r
1jtoHz7XYSBLqWX2sZaQQaw1s+jku/K7jsMCE6K0jndWy+HOsAPTMTcipzTnjta/
8Mj4WjtiKXILvA7haz95Dq+dh6H1JZbxQVxydwJe3jA1IJe4ZfQ/sgM2yIvi4XGX
x+8fjzk0oDiEMPxMtTx+6rluBOcHL2A=
-----END CERTIFICATE-----
Generated at Wed Aug 21 13:10:08 2024 by rpki-client on console-ams.rpki-client.org