Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D704BC9E522C11EE8E01143E4AD9E6FC.roa
File: D704BC9E522C11EE8E01143E4AD9E6FC.roa (raw, json)
Hash identifier: /AlVZzFtk9uHitj+uxBWAVDS7DF/e1k9zCNQF/6GEB4=
Subject key identifier: D4:7B:AF:A3:5E:54:DB:0F:25:E1:BE:17:B3:B7:27:DD:70:3D:B2:7B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0D3F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D704BC9E522C11EE8E01143E4AD9E6FC.roa
Signing time: Wed 13 Sep 2023 11:58:23 +0000
ROA not before: Wed 13 Sep 2023 11:58:20 +0000
ROA not after: Sun 15 Sep 2024 11:58:20 +0000
asID: 62240
IP address blocks: 102.129.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3391 (0xd3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 13 11:58:20 2023 GMT
Not After : Sep 15 11:58:20 2024 GMT
Subject: CN=6501a3df-d159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f7:9c:9f:6c:83:b7:1c:04:32:64:8d:a9:2f:
96:f5:6b:51:b2:5e:86:1a:dd:a3:8e:b2:12:c1:2a:
7c:e0:01:f6:00:4f:09:9b:a9:df:e5:53:c5:7c:15:
50:ae:c0:1f:22:c4:70:2c:3f:cc:3e:6f:63:b2:5a:
d9:23:9f:6e:a4:81:37:a5:46:0b:a1:68:b3:ff:87:
c6:ac:83:27:40:92:65:44:f3:76:9e:e9:f7:6d:ce:
3b:87:07:dc:17:6c:06:37:ae:09:97:4f:d2:f0:fe:
8a:ab:ba:20:df:14:e9:f4:64:ef:ad:0e:90:bf:0a:
ca:0d:58:1c:eb:9c:b7:f4:78:46:ad:6a:74:ef:3c:
2c:71:3d:d6:df:a8:4f:91:c3:9d:e4:cf:9e:3c:9e:
94:82:93:95:44:0b:8c:a5:04:a3:eb:25:f1:69:90:
66:73:e5:e4:58:da:0a:54:d2:d5:6e:09:1f:5b:0d:
05:69:d2:27:d8:f9:73:ab:17:63:b0:26:10:58:8a:
ae:45:0a:5d:b0:9d:a5:55:7a:13:01:df:30:0f:27:
3c:b2:c0:af:3c:95:fd:02:3e:ef:6f:e5:5c:45:e8:
d7:e6:7f:31:36:64:39:ae:c4:41:91:09:a6:50:04:
a0:24:58:bb:eb:04:c0:5c:11:ac:41:ce:dd:8a:73:
eb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7B:AF:A3:5E:54:DB:0F:25:E1:BE:17:B3:B7:27:DD:70:3D:B2:7B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D704BC9E522C11EE8E01143E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.167.0/24
Signature Algorithm: sha256WithRSAEncryption
34:61:3c:99:20:aa:2c:d6:05:b7:c2:db:42:97:b0:8c:5f:91:
53:94:71:95:7a:7b:0c:5a:6b:8d:44:a5:6d:26:2e:d9:89:e4:
32:56:f8:e6:f1:0b:cf:9b:c5:4b:8d:d6:d9:bc:7e:a9:2a:74:
13:63:62:0e:a9:5d:4e:21:d8:47:c5:8e:b6:14:3b:31:7c:4a:
25:02:cf:63:45:a4:4d:cf:64:6f:ba:66:34:ab:73:68:1f:cc:
7c:6e:6f:a7:16:a6:66:b8:88:84:f7:8d:bc:ef:86:fe:d2:ae:
0b:9a:a3:c5:83:72:c5:43:ff:50:6b:ca:dc:34:3a:d9:4f:ea:
79:f4:56:77:64:24:04:dc:ef:2a:7e:18:c8:3f:3d:b8:01:82:
f6:04:21:a7:4d:0c:37:54:35:35:1a:99:6f:23:0f:fe:29:23:
64:13:0a:40:6b:32:52:2a:c6:93:27:f9:bc:7e:61:eb:2b:bb:
70:29:0a:1f:99:7a:c6:9f:cc:31:1e:10:78:61:15:41:1c:9b:
d8:48:fc:b5:aa:bc:12:ad:01:4f:df:ab:80:4c:2a:ab:e1:bc:
65:24:40:99:2d:aa:eb:46:83:de:9f:6b:65:fd:9b:f4:6c:87:
61:32:70:0d:f4:1c:c7:ba:3f:fd:71:f3:8c:f6:d2:73:b0:69:
ab:36:04:5c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDT8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzA5MTMxMTU4MjBaFw0yNDA5MTUxMTU4MjBaMBgxFjAU
BgNVBAMTDTY1MDFhM2RmLWQxNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDD95yfbIO3HAQyZI2pL5b1a1GyXoYa3aOOshLBKnzgAfYATwmbqd/lU8V8
FVCuwB8ixHAsP8w+b2OyWtkjn26kgTelRguhaLP/h8asgydAkmVE83ae6fdtzjuH
B9wXbAY3rgmXT9Lw/oqruiDfFOn0ZO+tDpC/CsoNWBzrnLf0eEatanTvPCxxPdbf
qE+Rw53kz548npSCk5VEC4ylBKPrJfFpkGZz5eRY2gpU0tVuCR9bDQVp0ifY+XOr
F2OwJhBYiq5FCl2wnaVVehMB3zAPJzyywK88lf0CPu9v5VxF6NfmfzE2ZDmuxEGR
CaZQBKAkWLvrBMBcEaxBzt2Kc+tpAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU1Huv
o15U2w8l4b4Xs7cn3XA9snswHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0Q3MDRCQzlFNTIyQzExRUU4RTAxMTQzRTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgacwDQYJKoZIhvcNAQEL
BQADggEBADRhPJkgqizWBbfC20KXsIxfkVOUcZV6ewxaa41EpW0mLtmJ5DJW+Obx
C8+bxUuN1tm8fqkqdBNjYg6pXU4h2EfFjrYUOzF8SiUCz2NFpE3PZG+6ZjSrc2gf
zHxub6cWpma4iIT3jbzvhv7Srguao8WDcsVD/1Brytw0OtlP6nn0VndkJATc7yp+
GMg/PbgBgvYEIadNDDdUNTUamW8jD/4pI2QTCkBrMlIqxpMn+bx+Yesru3ApCh+Z
esafzDEeEHhhFUEcm9hI/LWqvBKtAU/fq4BMKqvhvGUkQJktqutGg96fa2X9m/Rs
h2EycA30HMe6P/1x84z20nOwaas2BFw=
-----END CERTIFICATE-----
Generated at Wed Dec 13 07:48:29 2023 by rpki-client on console-ams.rpki-client.org