Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C1BF52D2564F11EEB7C9BD6C4AD9E6FC.roa
File: C1BF52D2564F11EEB7C9BD6C4AD9E6FC.roa (raw, json)
Hash identifier: EY5Kbwcfdl3oB8sWzV10NkCcuDPbNv4ooTnBKLuik9s=
Subject key identifier: 01:DC:A7:70:10:D2:9F:A4:5A:0A:25:C6:E8:90:48:EB:77:99:04:B7
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0D6B
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C1BF52D2564F11EEB7C9BD6C4AD9E6FC.roa
Signing time: Mon 18 Sep 2023 18:18:25 +0000
ROA not before: Mon 18 Sep 2023 18:18:21 +0000
ROA not after: Sat 20 Sep 2025 18:18:21 +0000
asID: 49468
IP address blocks: 102.165.43.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3435 (0xd6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 18 18:18:21 2023 GMT
Not After : Sep 20 18:18:21 2025 GMT
Subject: CN=65089471-b4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c3:bf:ae:4e:15:88:30:85:bf:a5:38:d2:40:
ea:56:05:5a:14:32:b7:dc:b4:db:53:c3:be:0f:25:
ba:98:78:2b:fc:40:06:fc:7e:dc:e0:8c:41:15:fd:
91:8c:16:08:9e:0b:e4:7a:b7:1a:eb:db:49:25:4e:
88:ea:04:62:32:81:3e:8c:08:04:be:b4:c9:6f:35:
c8:7d:13:41:86:8b:06:7d:20:89:c2:e3:ef:fe:9c:
3b:60:30:00:a8:0d:0d:02:41:ca:bc:ee:ba:2d:16:
b6:ce:88:d7:63:a2:75:7c:70:c3:14:89:89:c8:20:
e4:34:da:b1:1c:12:c8:c1:99:ef:20:1a:98:73:fe:
a5:fc:b5:51:fb:8b:12:1f:7b:92:72:74:8d:10:cd:
9c:cc:c4:52:e3:03:4c:06:65:7c:4b:94:64:73:7e:
fa:32:5f:9b:2c:bc:1a:0c:a5:d2:bc:ef:fb:92:ed:
c9:7c:9b:32:28:0b:77:97:a2:71:6b:61:62:29:ca:
6f:e2:37:05:b4:8e:cb:5b:57:e0:56:81:65:e3:83:
e5:9d:1e:f0:64:8c:b5:f8:3c:65:28:25:27:63:d2:
29:28:ad:31:26:9e:84:e1:13:b9:e5:95:a9:13:fa:
12:88:30:9f:2b:f7:3b:93:47:33:f0:b8:09:93:f7:
e7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DC:A7:70:10:D2:9F:A4:5A:0A:25:C6:E8:90:48:EB:77:99:04:B7
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C1BF52D2564F11EEB7C9BD6C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.43.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:59:dc:64:be:aa:8e:92:e5:5a:54:6c:78:7e:c2:a9:7a:74:
2e:94:80:7b:aa:c6:80:27:bd:dd:73:45:8a:b8:5f:d3:c3:10:
de:83:dc:83:82:65:1c:21:e3:f2:ee:6b:89:b4:a5:f2:df:b6:
e6:ce:a7:ce:91:1e:64:74:dd:2d:00:35:5e:61:4b:24:42:d9:
3f:2b:89:70:86:cd:10:48:4d:77:74:12:33:40:35:19:f7:07:
03:c2:20:9d:30:e0:ef:96:5e:b8:2a:79:fa:0b:20:e6:0a:4c:
20:33:25:c2:34:54:ca:b8:bb:78:09:4f:38:66:9e:93:57:c8:
af:98:b4:a3:ec:ea:92:f5:5e:35:65:ca:a4:ff:43:dd:3d:ce:
91:e3:1a:43:91:25:f4:9b:0b:6e:ae:b7:80:71:2f:3a:de:ff:
72:45:8a:4c:60:1c:f9:97:bc:73:f2:9b:29:dc:9a:14:fa:af:
7c:ef:9c:df:e5:d3:48:f0:9c:31:d9:57:32:dd:8d:88:24:a2:
0a:e4:af:57:4a:67:2d:d5:65:4b:17:bd:b4:93:8b:71:0f:eb:
5b:7f:57:f5:8c:09:f3:a4:fb:2e:bf:2d:c6:3e:67:0c:46:49:
69:76:02:fb:ed:f0:b8:9a:ae:0a:bb:21:fa:1f:46:a4:c3:72:
cc:11:8d:14
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDWswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzA5MTgxODE4MjFaFw0yNTA5MjAxODE4MjFaMBgxFjAU
BgNVBAMTDTY1MDg5NDcxLWI0ZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGw7+uThWIMIW/pTjSQOpWBVoUMrfctNtTw74PJbqYeCv8QAb8ftzgjEEV
/ZGMFgieC+R6txrr20klTojqBGIygT6MCAS+tMlvNch9E0GGiwZ9IInC4+/+nDtg
MACoDQ0CQcq87rotFrbOiNdjonV8cMMUiYnIIOQ02rEcEsjBme8gGphz/qX8tVH7
ixIfe5JydI0QzZzMxFLjA0wGZXxLlGRzfvoyX5ssvBoMpdK87/uS7cl8mzIoC3eX
onFrYWIpym/iNwW0jstbV+BWgWXjg+WdHvBkjLX4PGUoJSdj0ikorTEmnoThE7nl
lakT+hKIMJ8r9zuTRzPwuAmT9+dxAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUAdyn
cBDSn6RaCiXG6JBI63eZBLcwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0MxQkY1MkQyNTY0RjExRUVCN0M5QkQ2QzRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmpSswDQYJKoZIhvcNAQEL
BQADggEBAB1Z3GS+qo6S5VpUbHh+wql6dC6UgHuqxoAnvd1zRYq4X9PDEN6D3IOC
ZRwh4/Lua4m0pfLftubOp86RHmR03S0ANV5hSyRC2T8riXCGzRBITXd0EjNANRn3
BwPCIJ0w4O+WXrgqefoLIOYKTCAzJcI0VMq4u3gJTzhmnpNXyK+YtKPs6pL1XjVl
yqT/Q909zpHjGkORJfSbC26ut4BxLzre/3JFikxgHPmXvHPymyncmhT6r3zvnN/l
00jwnDHZVzLdjYgkogrkr1dKZy3VZUsXvbSTi3EP61t/V/WMCfOk+y6/LcY+ZwxG
SWl2Avvt8Liargq7IfofRqTDcswRjRQ=
-----END CERTIFICATE-----
Generated at Thu Oct 12 12:10:38 2023 by rpki-client on console-ams.rpki-client.org