Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BEBACECAFB9411ECA311A89FF1222468.roa
File: BEBACECAFB9411ECA311A89FF1222468.roa (raw, json)
Hash identifier: 2aYlr1Q6Ljchp1JC1MkjaZqsLGfSatU5pNNrL6fnFKw=
Subject key identifier: C0:64:F4:EF:5D:66:DD:8F:57:5C:21:20:9B:4F:30:46:5F:1A:F5:27
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0719
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BEBACECAFB9411ECA311A89FF1222468.roa
Signing time: Mon 04 Jul 2022 12:28:02 +0000
ROA not before: Mon 04 Jul 2022 12:27:58 +0000
ROA not after: Thu 04 Jul 2024 12:27:58 +0000
asID: 40676
IP address blocks: 102.129.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1817 (0x719)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 4 12:27:58 2022 GMT
Not After : Jul 4 12:27:58 2024 GMT
Subject: CN=62c2dcd1-7ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ad:3e:26:1a:cd:23:c4:9c:41:da:19:10:c8:
3f:21:27:8f:ce:3d:c3:c3:81:23:60:bc:ec:71:38:
3c:b7:ba:b5:04:78:d3:0b:8e:e2:99:54:fd:2a:c8:
5d:42:82:d3:84:64:aa:e6:e5:bf:72:83:85:41:72:
1c:9b:b0:76:87:65:77:e0:a9:4e:d1:00:92:b9:55:
da:1f:8e:3f:bf:5e:ad:02:5a:aa:44:66:f2:e7:94:
04:ab:1f:45:d6:e9:b6:2c:5f:49:32:b2:01:2a:e9:
d2:79:8e:fc:e8:1c:25:1d:3d:e8:e4:e2:c3:64:49:
61:cb:50:76:0d:d7:d0:25:b3:2f:09:89:f8:bc:0a:
20:71:f0:cb:19:a4:c5:c7:9f:b6:f0:ee:a9:23:c4:
08:3e:ed:84:fe:7c:3e:75:65:49:4f:a0:93:18:91:
8e:d1:8a:0f:b6:0d:f9:d0:36:66:3b:5d:5c:c0:76:
12:c1:a2:3f:8c:d1:e8:9a:3f:b7:75:c4:c5:2e:39:
a6:cb:47:90:51:02:9d:45:3a:a5:df:0f:0a:78:4a:
47:40:50:58:45:81:d6:b2:9b:25:3a:56:b2:be:b6:
dc:f1:63:8f:a8:84:f5:7a:4c:1b:8c:ae:95:c2:c8:
59:2e:47:82:58:f6:ee:22:d4:fa:f5:6b:b7:34:78:
a5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:64:F4:EF:5D:66:DD:8F:57:5C:21:20:9B:4F:30:46:5F:1A:F5:27
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BEBACECAFB9411ECA311A89FF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.180.0/24
Signature Algorithm: sha256WithRSAEncryption
47:d3:54:f7:2c:ca:51:76:c4:1a:86:fd:53:76:31:1a:3d:bb:
a6:59:52:54:d6:31:08:0d:b6:11:7d:dc:7f:4a:c3:08:43:de:
e5:85:f4:d9:75:63:11:27:26:5c:d1:ae:61:1b:ed:1b:3a:2a:
67:b2:1b:26:a5:8b:a7:15:cc:81:b4:f2:b5:69:ea:15:63:1b:
60:ed:14:cb:c2:42:99:a6:16:46:78:cb:da:f3:2f:bf:ed:22:
fe:0b:ec:3c:41:3e:9b:a7:cb:05:f8:2c:95:86:83:fc:84:4d:
49:71:91:3a:ed:e9:c5:62:1d:66:59:03:32:9f:92:fe:03:20:
13:de:53:53:c9:8c:cc:d6:5c:97:1e:5d:24:20:8b:d8:c5:71:
4e:e1:02:2a:35:05:c1:00:3b:d6:36:1e:d3:f1:9e:70:e9:f8:
7a:74:07:1d:33:79:c7:6b:df:f8:19:2a:ff:6c:1f:74:6f:b8:
cc:6a:d5:95:da:37:53:9d:44:8c:93:be:42:29:40:f5:9e:5f:
81:5a:16:c6:3b:1f:e2:cc:8b:cf:ce:4c:f5:fb:19:f3:e0:d8:
84:ba:7a:d9:e4:c3:c2:07:56:47:13:e1:94:b2:e5:fa:3d:08:
45:49:4d:6f:76:85:5f:93:02:1e:a9:8c:1d:a7:d6:12:fd:ea:
0e:19:02:27
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBxkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMjA3MDQxMjI3NThaFw0yNDA3MDQxMjI3NThaMBgxFjAU
BgNVBAMMDTYyYzJkY2QxLTdhYzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJrT4mGs0jxJxB2hkQyD8hJ4/OPcPDgSNgvOxxODy3urUEeNMLjuKZVP0q
yF1CgtOEZKrm5b9yg4VBchybsHaHZXfgqU7RAJK5Vdofjj+/Xq0CWqpEZvLnlASr
H0XW6bYsX0kysgEq6dJ5jvzoHCUdPejk4sNkSWHLUHYN19Alsy8Jifi8CiBx8MsZ
pMXHn7bw7qkjxAg+7YT+fD51ZUlPoJMYkY7Rig+2DfnQNmY7XVzAdhLBoj+M0eia
P7d1xMUuOabLR5BRAp1FOqXfDwp4SkdAUFhFgdaymyU6VrK+ttzxY4+ohPV6TBuM
rpXCyFkuR4JY9u4i1Pr1a7c0eKX1AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUwGT0
711m3Y9XXCEgm08wRl8a9ScwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0JFQkFDRUNBRkI5NDExRUNBMzExQTg5RkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgbQwDQYJKoZIhvcNAQEL
BQADggEBAEfTVPcsylF2xBqG/VN2MRo9u6ZZUlTWMQgNthF93H9KwwhD3uWF9Nl1
YxEnJlzRrmEb7Rs6KmeyGyali6cVzIG08rVp6hVjG2DtFMvCQpmmFkZ4y9rzL7/t
Iv4L7DxBPpunywX4LJWGg/yETUlxkTrt6cViHWZZAzKfkv4DIBPeU1PJjMzWXJce
XSQgi9jFcU7hAio1BcEAO9Y2HtPxnnDp+Hp0Bx0zecdr3/gZKv9sH3RvuMxq1ZXa
N1OdRIyTvkIpQPWeX4FaFsY7H+LMi8/OTPX7GfPg2IS6etnkw8IHVkcT4ZSy5fo9
CEVJTW92hV+TAh6pjB2n1hL96g4ZAic=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org