Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C5022D56B42F11EDBC0D5C82F1222468.roa
File: C5022D56B42F11EDBC0D5C82F1222468.roa (raw, json)
Hash identifier: 7NxoWUsHHwKY/N+CNz9vEuiHkF+SRKDPvwUXKw2mRR4=
Subject key identifier: 15:EE:58:3E:36:B8:F3:14:78:DA:8C:5A:EC:B0:1D:45:F0:67:2F:18
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A90
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C5022D56B42F11EDBC0D5C82F1222468.roa
Signing time: Fri 24 Feb 2023 10:41:18 +0000
ROA not before: Fri 24 Feb 2023 10:41:14 +0000
ROA not after: Sat 22 Feb 2025 10:41:14 +0000
asID: 61317
IP address blocks: 102.129.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Jun 2024 09:28:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2704 (0xa90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 24 10:41:14 2023 GMT
Not After : Feb 22 10:41:14 2025 GMT
Subject: CN=63f8944e-4491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6d:6a:4c:c3:02:42:5b:0d:dd:72:b3:0c:53:
35:d7:c7:bb:bf:bf:10:87:f9:78:67:bd:c4:9e:91:
3f:f0:b9:a7:0d:77:75:7e:f9:ce:5d:61:74:74:cd:
ef:81:96:0a:44:af:78:64:1c:82:66:b2:31:86:77:
1b:7d:69:03:62:15:74:9e:8b:b5:d7:77:c9:bc:3f:
d0:01:76:66:2c:45:a3:3f:20:bc:ef:03:78:ee:77:
14:3d:92:e3:aa:3b:a6:9e:86:ae:83:95:1c:75:c3:
a2:12:a6:3c:30:bd:c2:ef:38:cd:c1:36:ee:ed:e3:
7a:2f:48:0f:1c:7a:af:25:2d:3d:f7:fa:24:e4:b4:
c8:96:7c:4b:70:36:16:35:0d:99:35:44:c9:27:04:
e6:a2:3c:08:ae:b1:b7:9f:5b:e7:e9:c7:64:26:7d:
fc:e2:08:fe:50:00:e5:a8:57:cc:be:9c:c6:59:4d:
a1:e6:12:43:35:62:4a:d9:7a:f9:01:69:40:e9:b4:
66:e7:e5:a0:89:29:f0:9a:3e:16:3e:ea:bd:cb:e5:
f7:22:e3:b8:53:72:57:5b:d3:c0:c5:0d:51:58:b3:
25:e8:26:a1:eb:5e:24:1c:17:73:44:f2:e9:e2:20:
17:cb:a8:e7:51:fc:37:37:a8:98:22:c9:c5:f9:1f:
fb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EE:58:3E:36:B8:F3:14:78:DA:8C:5A:EC:B0:1D:45:F0:67:2F:18
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C5022D56B42F11EDBC0D5C82F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.242.0/24
Signature Algorithm: sha256WithRSAEncryption
92:79:f9:54:2b:f2:88:b1:a0:3c:25:01:20:f5:9c:1f:bc:0f:
42:82:ff:6b:1c:3a:5b:3b:fd:88:4a:2e:57:65:63:53:9d:c6:
08:34:8e:e9:db:63:b0:c4:9c:f0:65:20:cd:3c:e7:32:a6:bd:
34:f4:18:96:cb:fc:92:27:ec:72:f8:21:7a:22:cc:9a:7e:14:
d2:e4:be:33:81:9d:28:9f:3e:3f:bc:5e:c5:83:93:c8:95:d5:
6a:af:1e:ed:bc:92:f4:c7:2a:13:f3:56:d5:35:3c:58:6a:74:
f5:60:8e:a4:e9:ae:48:23:06:79:54:6f:4b:37:15:32:1f:82:
95:50:cd:92:c9:32:dc:6c:cd:2e:83:b0:34:5e:1c:e3:f7:3e:
ff:43:a2:fa:16:23:b0:79:e8:ef:b8:62:bf:ea:fc:47:59:a2:
c7:d2:cc:c3:9b:31:1d:33:55:4c:5e:92:a4:1c:44:80:60:ca:
f0:76:ba:52:c5:4b:58:39:fc:15:3a:a7:6c:3b:af:09:a4:d6:
7e:6d:5c:36:bc:b8:98:6c:07:15:c3:e6:e6:fa:48:c0:ee:bb:
f7:83:a9:5b:55:7b:37:84:97:82:bd:17:ce:be:88:20:2e:45:
46:b5:39:4d:e1:48:aa:87:2c:42:b4:9e:a9:10:07:87:21:ac:
d7:59:69:90
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCpAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzAyMjQxMDQxMTRaFw0yNTAyMjIxMDQxMTRaMBgxFjAU
BgNVBAMMDTYzZjg5NDRlLTQ0OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCebWpMwwJCWw3dcrMMUzXXx7u/vxCH+XhnvcSekT/wuacNd3V++c5dYXR0
ze+BlgpEr3hkHIJmsjGGdxt9aQNiFXSei7XXd8m8P9ABdmYsRaM/ILzvA3judxQ9
kuOqO6aehq6DlRx1w6ISpjwwvcLvOM3BNu7t43ovSA8ceq8lLT33+iTktMiWfEtw
NhY1DZk1RMknBOaiPAiusbefW+fpx2QmffziCP5QAOWoV8y+nMZZTaHmEkM1YkrZ
evkBaUDptGbn5aCJKfCaPhY+6r3L5fci47hTcldb08DFDVFYsyXoJqHrXiQcF3NE
8uniIBfLqOdR/Dc3qJgiycX5H/vJAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUFe5Y
Pja48xR42oxa7LAdRfBnLxgwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0M1MDIyRDU2QjQyRjExRURCQzBENUM4MkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgfIwDQYJKoZIhvcNAQEL
BQADggEBAJJ5+VQr8oixoDwlASD1nB+8D0KC/2scOls7/YhKLldlY1Odxgg0junb
Y7DEnPBlIM085zKmvTT0GJbL/JIn7HL4IXoizJp+FNLkvjOBnSifPj+8XsWDk8iV
1WqvHu28kvTHKhPzVtU1PFhqdPVgjqTprkgjBnlUb0s3FTIfgpVQzZLJMtxszS6D
sDReHOP3Pv9DovoWI7B56O+4Yr/q/EdZosfSzMObMR0zVUxekqQcRIBgyvB2ulLF
S1g5/BU6p2w7rwmk1n5tXDa8uJhsBxXD5ub6SMDuu/eDqVtVezeEl4K9F86+iCAu
RUa1OU3hSKqHLEK0nqkQB4chrNdZaZA=
-----END CERTIFICATE-----
Generated at Fri Jun 7 14:48:46 2024 by rpki-client on console-ams.rpki-client.org