Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ADD94392518E11EEA2CDA8424AD9E6FC.roa
File: ADD94392518E11EEA2CDA8424AD9E6FC.roa (raw, json)
Hash identifier: 0sybtLtfRIvHNHPoPAxHkB5ronShX5uCt7Nb7qNfwIA=
Subject key identifier: 5F:80:92:D9:C9:AA:98:B1:36:E8:D4:8B:9B:D9:E0:11:2F:82:EA:BD
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0D36
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ADD94392518E11EEA2CDA8424AD9E6FC.roa
Signing time: Tue 12 Sep 2023 17:06:14 +0000
ROA not before: Tue 12 Sep 2023 17:06:10 +0000
ROA not after: Fri 13 Sep 2024 17:06:10 +0000
asID: 399073
IP address blocks: 102.129.216.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3382 (0xd36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 12 17:06:10 2023 GMT
Not After : Sep 13 17:06:10 2024 GMT
Subject: CN=65009a86-c6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cd:6a:e9:c6:6b:03:9e:75:fe:93:7b:09:56:
ac:1c:67:e0:94:ab:f8:7e:58:c2:79:6e:a4:2e:00:
d8:75:16:d4:29:0c:2a:13:49:b9:eb:94:06:42:23:
93:6c:ad:4d:bd:6a:fa:19:72:b4:cd:d5:43:1b:62:
30:35:e8:78:3c:4a:e2:31:b3:2d:f8:56:2a:9f:23:
97:6c:c9:f4:27:23:e0:0e:f4:4a:d8:8e:07:cb:f4:
ed:1d:19:39:1c:24:76:84:a5:25:6d:ab:46:9a:c4:
ad:2e:2c:d3:64:99:70:f9:3a:fe:72:55:02:c2:1d:
fe:63:b2:59:1d:57:11:95:63:cc:74:c7:74:4e:4b:
d1:df:e0:c6:4a:ca:a6:5d:74:b2:37:c7:88:df:27:
87:12:09:bb:63:e4:75:01:94:ab:58:bf:b8:3c:07:
a8:0b:81:cd:80:df:b0:e3:92:3c:fe:0a:37:20:0f:
f3:5b:00:68:ed:00:aa:7a:b8:14:41:f2:c5:6c:db:
ea:4f:65:00:9a:f2:5d:d6:ca:05:90:5b:7f:de:95:
5a:bf:a5:c1:30:55:4a:36:1d:af:86:90:5b:37:53:
fa:61:6d:27:f7:e2:a7:40:8f:5d:fc:89:29:f4:e2:
9f:9f:ca:6f:d9:24:c8:12:5d:d2:28:4a:be:96:b4:
47:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:80:92:D9:C9:AA:98:B1:36:E8:D4:8B:9B:D9:E0:11:2F:82:EA:BD
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ADD94392518E11EEA2CDA8424AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.216.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:a9:db:c0:3b:de:43:d0:c7:0c:93:d9:82:90:b7:f0:56:83:
ac:23:1a:06:7f:96:07:89:d7:93:96:2c:37:59:25:0f:6d:c9:
db:81:04:b8:c5:af:a4:17:25:e1:7b:89:57:3b:7a:2d:d8:7e:
e8:40:19:88:a1:39:a7:01:aa:0e:71:0b:ea:98:f4:92:5b:d2:
11:6e:57:0c:cb:6d:2b:9d:9a:a9:01:ae:bc:82:1b:ed:5a:eb:
be:fd:45:a1:7e:85:3d:82:ff:db:e2:70:b9:9b:43:a9:49:34:
79:fd:52:d0:0f:b6:0c:a9:d2:a0:68:72:7d:73:66:05:74:cc:
d4:02:99:86:36:68:d4:13:76:f1:94:62:a8:4e:d8:f3:e9:1b:
d6:b5:c4:45:01:01:e9:42:4c:f8:39:88:02:be:09:75:c9:7a:
6f:5e:a5:30:f6:52:c7:d2:3b:f6:47:75:af:4c:b1:e6:47:0c:
ef:91:7c:d1:2a:d6:3d:f6:b1:00:2e:e7:f5:4a:bb:d5:23:ba:
81:2c:73:e9:6d:df:f7:12:40:00:a4:85:7c:7d:41:95:49:ac:
76:10:81:5b:1a:70:b8:88:89:80:e5:a1:c2:e6:2e:6a:03:d3:
b9:48:7e:2d:d4:68:88:e0:36:42:97:47:0a:04:e4:c2:7a:e7:
fb:9b:93:bb
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDTYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzA5MTIxNzA2MTBaFw0yNDA5MTMxNzA2MTBaMBgxFjAU
BgNVBAMTDTY1MDA5YTg2LWM2Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCuzWrpxmsDnnX+k3sJVqwcZ+CUq/h+WMJ5bqQuANh1FtQpDCoTSbnrlAZC
I5NsrU29avoZcrTN1UMbYjA16Hg8SuIxsy34ViqfI5dsyfQnI+AO9ErYjgfL9O0d
GTkcJHaEpSVtq0aaxK0uLNNkmXD5Ov5yVQLCHf5jslkdVxGVY8x0x3ROS9Hf4MZK
yqZddLI3x4jfJ4cSCbtj5HUBlKtYv7g8B6gLgc2A37Djkjz+CjcgD/NbAGjtAKp6
uBRB8sVs2+pPZQCa8l3WygWQW3/elVq/pcEwVUo2Ha+GkFs3U/phbSf34qdAj138
iSn04p+fym/ZJMgSXdIoSr6WtEdFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUX4CS
2cmqmLE26NSLm9ngES+C6r0wHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0FERDk0MzkyNTE4RTExRUVBMkNEQTg0MjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFmgdgwDQYJKoZIhvcNAQEL
BQADggEBAKGp28A73kPQxwyT2YKQt/BWg6wjGgZ/lgeJ15OWLDdZJQ9tyduBBLjF
r6QXJeF7iVc7ei3YfuhAGYihOacBqg5xC+qY9JJb0hFuVwzLbSudmqkBrryCG+1a
6779RaF+hT2C/9vicLmbQ6lJNHn9UtAPtgyp0qBocn1zZgV0zNQCmYY2aNQTdvGU
YqhO2PPpG9a1xEUBAelCTPg5iAK+CXXJem9epTD2UsfSO/ZHda9MseZHDO+RfNEq
1j32sQAu5/VKu9UjuoEsc+lt3/cSQACkhXx9QZVJrHYQgVsacLiIiYDlocLmLmoD
07lIfi3UaIjgNkKXRwoE5MJ65/ubk7s=
-----END CERTIFICATE-----
Generated at Thu Oct 12 07:36:52 2023 by rpki-client on console-ams.rpki-client.org