Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D096AFAADA1F11ED8C1FEEA72F6D8C1D.roa
File: D096AFAADA1F11ED8C1FEEA72F6D8C1D.roa (raw, json)
Hash identifier: sH62eqtgjG2DCHJq8Ca0MbIT56s1RiU0Arlhb6syXzA=
Subject key identifier: 52:19:B9:39:26:DA:D9:17:7E:BC:13:46:39:88:05:C0:4E:8A:B8:E2
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0B0A
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D096AFAADA1F11ED8C1FEEA72F6D8C1D.roa
Signing time: Thu 13 Apr 2023 17:22:50 +0000
ROA not before: Thu 13 Apr 2023 17:22:46 +0000
ROA not after: Sat 12 Apr 2025 17:22:46 +0000
asID: 204843
IP address blocks: 102.129.206.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2826 (0xb0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 13 17:22:46 2023 GMT
Not After : Apr 12 17:22:46 2025 GMT
Subject: CN=64383a6a-f3d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e5:88:76:a9:3f:bd:65:77:18:81:e1:25:f4:
9b:e7:49:25:84:88:7b:85:0e:ed:bc:9f:61:af:f8:
91:56:50:16:01:2a:8a:54:82:57:97:99:90:f4:1a:
09:b7:8d:89:1b:69:1e:2e:60:3f:41:92:88:2c:7b:
dd:af:95:b0:37:88:f6:78:50:8e:46:22:77:53:f8:
92:c9:85:26:e6:01:b2:0d:67:d6:ea:6d:0e:73:4c:
80:67:ff:54:d1:33:3c:52:d2:7c:3d:9f:c6:12:95:
bb:6a:ce:2f:ff:c7:8a:62:d5:ff:e8:ac:3b:7f:bb:
ea:13:b9:00:ec:59:d2:1c:86:46:cc:bd:71:1e:05:
7d:56:bd:c2:70:6b:5e:78:20:7f:97:66:da:9b:98:
c4:8d:c8:05:53:69:8d:59:3b:9e:2b:23:90:e9:91:
80:48:8c:14:17:38:ea:c0:f6:bc:06:4a:98:63:f7:
a6:48:28:e0:f9:65:37:62:78:f0:2f:23:4b:52:6e:
55:1d:6b:ca:8e:d9:c4:78:9e:06:61:6f:57:e6:99:
39:71:57:56:c7:0e:74:8e:6c:fb:b3:39:6e:e9:ef:
17:40:cf:42:67:00:b3:bd:5c:88:c1:ad:76:92:ac:
d6:42:c4:28:13:a3:b0:24:9d:8f:25:81:b9:37:94:
b8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:19:B9:39:26:DA:D9:17:7E:BC:13:46:39:88:05:C0:4E:8A:B8:E2
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D096AFAADA1F11ED8C1FEEA72F6D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.206.0/24
Signature Algorithm: sha256WithRSAEncryption
72:64:03:c6:33:05:50:b2:bb:b4:1a:46:b2:7a:52:06:bd:74:
02:6f:37:66:2e:2c:5c:47:40:e3:10:5a:9e:25:0b:aa:d7:52:
c0:2d:9b:5c:3b:d1:02:99:f5:64:28:8c:d1:47:2d:ce:17:ad:
f7:e6:6e:5d:47:34:21:9b:d5:31:ac:69:c2:98:d6:3c:4d:20:
80:ad:2b:7d:f0:9f:8e:1a:9d:c6:a2:c6:a8:6a:be:0d:5c:b6:
2c:da:82:5d:fe:54:8c:8c:32:76:28:6f:d5:df:4b:ad:6d:f5:
23:44:bb:5e:89:7e:2b:cd:47:3e:0b:62:85:22:d7:30:ff:51:
90:80:ac:30:96:74:27:aa:5c:40:f2:37:fa:34:d0:74:a0:29:
13:ca:c6:63:8e:b2:9f:d9:b6:ae:19:4f:2b:d1:63:ab:fb:1a:
0a:00:f8:66:eb:86:7b:36:46:69:5a:51:4f:3a:67:2e:e9:3f:
2c:58:26:56:92:07:7e:90:6f:97:28:6f:d0:17:ef:b8:c5:c3:
8b:80:96:2f:6f:13:1b:71:61:b8:b0:8d:5b:22:b6:4e:bb:b1:
ab:a5:a8:a9:d0:cb:8e:cd:b6:da:94:15:b1:58:8e:48:ff:cb:
c2:d1:42:86:01:52:5c:19:98:e4:78:d7:e4:70:a0:bb:45:50:
e2:30:a5:d0
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCwowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzA0MTMxNzIyNDZaFw0yNTA0MTIxNzIyNDZaMBgxFjAU
BgNVBAMMDTY0MzgzYTZhLWYzZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC25Yh2qT+9ZXcYgeEl9JvnSSWEiHuFDu28n2Gv+JFWUBYBKopUgleXmZD0
Ggm3jYkbaR4uYD9Bkogse92vlbA3iPZ4UI5GIndT+JLJhSbmAbINZ9bqbQ5zTIBn
/1TRMzxS0nw9n8YSlbtqzi//x4pi1f/orDt/u+oTuQDsWdIchkbMvXEeBX1WvcJw
a154IH+XZtqbmMSNyAVTaY1ZO54rI5DpkYBIjBQXOOrA9rwGSphj96ZIKOD5ZTdi
ePAvI0tSblUda8qO2cR4ngZhb1fmmTlxV1bHDnSObPuzOW7p7xdAz0JnALO9XIjB
rXaSrNZCxCgTo7AknY8lgbk3lLg1AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUUhm5
OSba2Rd+vBNGOYgFwE6KuOIwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0QwOTZBRkFBREExRjExRUQ4QzFGRUVBNzJGNkQ4QzFELnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgc4wDQYJKoZIhvcNAQEL
BQADggEBAHJkA8YzBVCyu7QaRrJ6Uga9dAJvN2YuLFxHQOMQWp4lC6rXUsAtm1w7
0QKZ9WQojNFHLc4Xrffmbl1HNCGb1TGsacKY1jxNIICtK33wn44ancaixqhqvg1c
tizagl3+VIyMMnYob9XfS61t9SNEu16JfivNRz4LYoUi1zD/UZCArDCWdCeqXEDy
N/o00HSgKRPKxmOOsp/Ztq4ZTyvRY6v7GgoA+Gbrhns2RmlaUU86Zy7pPyxYJlaS
B36Qb5cob9AX77jFw4uAli9vExtxYbiwjVsitk67saulqKnQy47NttqUFbFYjkj/
y8LRQoYBUlwZmOR41+RwoLtFUOIwpdA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org