Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9F2152980C2111EEA80CAA4E4AD9E6FC.roa
File: 9F2152980C2111EEA80CAA4E4AD9E6FC.roa (raw, json)
Hash identifier: pPvLo8M9mu6livPr4bjvuIf1VZsAZfXXZonDGjWXnlA=
Subject key identifier: 8B:C5:31:C2:1E:72:78:77:A1:9A:1A:90:B0:D1:0C:95:69:13:E1:FF
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0C0E
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9F2152980C2111EEA80CAA4E4AD9E6FC.roa
Signing time: Fri 16 Jun 2023 08:41:44 +0000
ROA not before: Fri 16 Jun 2023 08:41:38 +0000
ROA not after: Sun 15 Jun 2025 08:41:38 +0000
asID: 7018
IP address blocks: 102.165.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3086 (0xc0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 16 08:41:38 2023 GMT
Not After : Jun 15 08:41:38 2025 GMT
Subject: CN=648c2048-c30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:56:0a:01:b2:08:ed:5e:4d:f0:b5:de:73:af:
35:8b:4c:f2:b5:8a:6f:ab:d8:46:6d:83:07:b7:2e:
3d:6e:79:b9:ff:ba:35:d8:c0:47:37:d0:bd:49:31:
36:0a:c3:17:70:76:1d:c5:2b:a2:5a:da:bb:ec:4c:
56:ea:f7:55:47:22:b9:8d:13:17:36:23:43:ac:ae:
89:ab:0a:fa:eb:8a:2f:58:41:e8:86:b4:67:d0:27:
4b:07:4b:ce:81:d6:eb:c1:2e:a4:f8:14:ca:4c:a1:
c8:77:49:9d:6c:c8:96:96:f2:9e:4f:74:ae:f8:4c:
98:19:d9:14:39:b0:81:51:98:1d:4b:c1:2e:34:d5:
a6:29:5e:04:f8:a7:31:ff:4c:80:53:f0:63:e7:d7:
94:45:2d:c0:59:eb:eb:b3:31:dd:a1:44:6b:f1:cd:
f8:e1:28:69:ab:36:cd:97:ee:50:83:7c:a8:e9:1e:
59:7c:40:3e:a7:22:25:53:0a:8a:82:1e:2e:3f:06:
00:4e:b1:0e:83:7c:44:37:76:15:0c:a3:60:c0:42:
67:dc:b6:b6:0b:6e:d2:fb:ed:0f:49:2c:f7:93:7e:
b9:bd:cd:cf:6a:a4:b3:72:1b:8c:68:6c:ab:c9:42:
b6:c6:d9:8f:c8:85:38:64:f0:f1:44:bd:91:8c:c1:
a8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C5:31:C2:1E:72:78:77:A1:9A:1A:90:B0:D1:0C:95:69:13:E1:FF
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9F2152980C2111EEA80CAA4E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.59.0/24
Signature Algorithm: sha256WithRSAEncryption
77:7b:aa:8d:4f:d7:17:2a:84:48:b4:87:93:0d:78:cf:f2:51:
09:a7:a8:b2:0b:24:d2:e3:77:09:52:3b:c3:b8:da:de:7d:ae:
8f:d1:a7:80:33:9d:a4:22:5e:2b:e5:82:c5:db:9f:9e:b2:23:
8f:80:5a:f7:22:b3:45:5d:06:c5:b8:30:d6:3d:9e:eb:bb:8d:
ee:d0:23:a5:03:96:23:25:7b:56:56:21:bc:39:01:70:c3:08:
e6:b8:0a:b0:da:17:55:e3:ba:08:1f:f6:8a:30:2d:34:d1:f0:
c6:84:e4:7d:76:e9:36:7a:e2:7a:6b:f3:93:d3:95:1f:e5:d4:
47:16:db:71:cb:95:c8:c5:94:20:01:7d:f7:a5:8f:ad:79:6f:
92:c7:42:79:c6:cd:6a:d7:56:eb:0f:8c:a1:d3:da:84:b0:8e:
d9:fd:04:97:c4:84:f2:f2:42:f1:80:7e:ee:cb:34:61:5b:52:
a6:ae:2b:a4:52:ae:66:5b:d4:c4:eb:69:8d:9e:43:f3:cd:90:
3e:53:5d:3c:2c:3d:27:af:3f:7b:35:d7:05:b4:bf:76:70:1b:
6b:9a:57:ae:1a:ce:10:ed:10:2f:6e:0d:40:f1:1b:1f:0d:63:
1f:1f:ca:0a:67:94:2f:e0:7d:fe:47:72:4d:cd:39:2f:28:b1:
0b:be:57:f2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDA4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzA2MTYwODQxMzhaFw0yNTA2MTUwODQxMzhaMBgxFjAU
BgNVBAMTDTY0OGMyMDQ4LWMzMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDZVgoBsgjtXk3wtd5zrzWLTPK1im+r2EZtgwe3Lj1uebn/ujXYwEc30L1J
MTYKwxdwdh3FK6Ja2rvsTFbq91VHIrmNExc2I0OsromrCvrrii9YQeiGtGfQJ0sH
S86B1uvBLqT4FMpMoch3SZ1syJaW8p5PdK74TJgZ2RQ5sIFRmB1LwS401aYpXgT4
pzH/TIBT8GPn15RFLcBZ6+uzMd2hRGvxzfjhKGmrNs2X7lCDfKjpHll8QD6nIiVT
CoqCHi4/BgBOsQ6DfEQ3dhUMo2DAQmfctrYLbtL77Q9JLPeTfrm9zc9qpLNyG4xo
bKvJQrbG2Y/IhThk8PFEvZGMwagdAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUi8Ux
wh5yeHehmhqQsNEMlWkT4f8wHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzlGMjE1Mjk4MEMyMTExRUVBODBDQUE0RTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmpTswDQYJKoZIhvcNAQEL
BQADggEBAHd7qo1P1xcqhEi0h5MNeM/yUQmnqLILJNLjdwlSO8O42t59ro/Rp4Az
naQiXivlgsXbn56yI4+AWvcis0VdBsW4MNY9nuu7je7QI6UDliMle1ZWIbw5AXDD
COa4CrDaF1Xjuggf9oowLTTR8MaE5H126TZ64npr85PTlR/l1EcW23HLlcjFlCAB
ffelj615b5LHQnnGzWrXVusPjKHT2oSwjtn9BJfEhPLyQvGAfu7LNGFbUqauK6RS
rmZb1MTraY2eQ/PNkD5TXTwsPSevP3s11wW0v3ZwG2uaV64azhDtEC9uDUDxGx8N
Yx8fygpnlC/gff5Hck3NOS8osQu+V/I=
-----END CERTIFICATE-----
Generated at Sat Sep 16 09:49:05 2023 by rpki-client on console-ams.rpki-client.org