Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A5A50EFA09B211EEA602A3694AD9E6FC.roa
File: A5A50EFA09B211EEA602A3694AD9E6FC.roa (raw, json)
Hash identifier: yFu40gkr2k5+KD3lht5ecGrc6YBeFOcI+noDLetmRwA=
Subject key identifier: 85:6C:31:A6:3B:B3:C0:D8:6C:7A:52:E1:16:42:B8:3D:2D:54:F4:7E
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0BF7
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A5A50EFA09B211EEA602A3694AD9E6FC.roa
Signing time: Tue 13 Jun 2023 06:22:18 +0000
ROA not before: Tue 13 Jun 2023 06:22:15 +0000
ROA not after: Thu 12 Jun 2025 06:22:15 +0000
asID: 6939
IP address blocks: 102.129.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3063 (0xbf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 13 06:22:15 2023 GMT
Not After : Jun 12 06:22:15 2025 GMT
Subject: CN=64880b1a-6abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:93:fa:2a:39:c2:39:87:29:62:67:5e:2b:45:
e1:11:48:d5:b1:d1:f1:04:c7:9f:ed:ea:f7:7d:ba:
e5:50:d4:49:75:e1:cd:d0:ca:f8:98:18:72:6d:fa:
36:8d:cc:72:21:30:4d:1b:f1:b5:3b:10:4b:4c:9c:
d1:94:ac:d3:da:70:2b:cf:26:26:9c:1e:ad:62:c9:
54:fd:f9:ff:0a:71:e0:a4:9e:49:e7:ce:8a:cb:05:
7d:1b:bc:b8:33:6a:4e:23:9a:df:f9:43:12:6a:67:
58:34:b9:29:b6:e3:40:c8:f3:1e:22:4e:48:bf:5b:
cc:d7:d0:46:5a:2c:dd:ec:74:1e:19:f0:46:94:8b:
d8:08:2c:78:7b:2e:01:9c:5c:83:2d:4b:6e:5c:e9:
11:f0:56:58:ca:81:0c:aa:fd:b9:4d:ab:07:ce:79:
87:6d:89:7d:c9:cb:1a:0a:25:91:bc:28:18:a7:9a:
bc:da:b7:b1:84:1f:32:07:88:40:8a:02:16:df:de:
f6:71:96:fa:58:6d:2b:05:fd:33:2a:69:29:91:ad:
85:94:62:97:5d:0c:01:9a:16:77:88:6f:d7:d5:86:
ac:47:b2:94:4f:d4:5e:89:82:2a:01:62:65:9b:d8:
3e:93:4d:aa:ee:3b:45:50:34:78:6e:ea:47:50:25:
91:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6C:31:A6:3B:B3:C0:D8:6C:7A:52:E1:16:42:B8:3D:2D:54:F4:7E
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A5A50EFA09B211EEA602A3694AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.208.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:82:6c:9b:d2:7f:48:9c:32:22:26:8c:db:b8:9a:c7:1e:82:
bf:0c:3c:75:36:1d:d0:b5:be:36:89:8c:7b:04:25:68:c1:23:
77:f9:a1:89:17:5d:eb:8d:ba:37:7e:51:c9:a4:87:6d:68:b3:
63:63:2e:52:fc:8a:2a:5d:71:ab:fb:c7:53:82:db:ea:ad:ae:
59:f1:50:e8:58:b5:8e:23:a9:6a:77:02:cb:d6:fe:8b:77:83:
93:71:db:ae:a1:f5:c1:08:15:fb:87:6e:21:1a:b1:87:aa:e3:
c4:e1:e8:7b:99:54:b5:35:4a:39:66:f2:7a:60:31:0f:85:41:
b3:e0:f4:9f:52:97:43:29:93:20:da:58:9f:a2:fe:f4:ec:42:
50:ff:dc:a6:9f:3a:35:91:bd:f0:92:a8:a6:23:cb:b3:11:3d:
b9:ad:35:f8:2f:9c:fc:49:ba:13:86:2f:95:5b:0e:6d:62:f7:
ff:49:24:2e:e7:8e:1e:15:8f:eb:31:ba:ac:0c:5e:10:87:2d:
52:65:b4:24:12:80:19:50:69:41:f0:27:f3:1c:4c:45:41:6e:
bc:22:54:52:a1:3c:00:b9:18:33:cd:3e:1f:f2:2b:f1:f8:0f:
68:25:ba:87:91:03:db:40:58:85:8c:ed:af:b0:c3:b7:01:08:
1a:45:9b:86
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICC/cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzA2MTMwNjIyMTVaFw0yNTA2MTIwNjIyMTVaMBgxFjAU
BgNVBAMTDTY0ODgwYjFhLTZhYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEk/oqOcI5hyliZ14rReERSNWx0fEEx5/t6vd9uuVQ1El14c3QyviYGHJt
+jaNzHIhME0b8bU7EEtMnNGUrNPacCvPJiacHq1iyVT9+f8KceCknknnzorLBX0b
vLgzak4jmt/5QxJqZ1g0uSm240DI8x4iTki/W8zX0EZaLN3sdB4Z8EaUi9gILHh7
LgGcXIMtS25c6RHwVljKgQyq/blNqwfOeYdtiX3JyxoKJZG8KBinmrzat7GEHzIH
iECKAhbf3vZxlvpYbSsF/TMqaSmRrYWUYpddDAGaFneIb9fVhqxHspRP1F6JgioB
YmWb2D6TTaruO0VQNHhu6kdQJZELAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUhWwx
pjuzwNhselLhFkK4PS1U9H4wHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0E1QTUwRUZBMDlCMjExRUVBNjAyQTM2OTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgdAwDQYJKoZIhvcNAQEL
BQADggEBAM6CbJvSf0icMiImjNu4mscegr8MPHU2HdC1vjaJjHsEJWjBI3f5oYkX
XeuNujd+Ucmkh21os2NjLlL8iipdcav7x1OC2+qtrlnxUOhYtY4jqWp3AsvW/ot3
g5Nx266h9cEIFfuHbiEasYeq48Th6HuZVLU1Sjlm8npgMQ+FQbPg9J9Sl0MpkyDa
WJ+i/vTsQlD/3KafOjWRvfCSqKYjy7MRPbmtNfgvnPxJuhOGL5VbDm1i9/9JJC7n
jh4Vj+sxuqwMXhCHLVJltCQSgBlQaUHwJ/McTEVBbrwiVFKhPAC5GDPNPh/yK/H4
D2gluoeRA9tAWIWM7a+ww7cBCBpFm4Y=
-----END CERTIFICATE-----
Generated at Sat Aug 12 08:52:16 2023 by rpki-client on console-fra.rpki-client.org