Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D980D19AB16B11EDB186FA96F1222468.roa
File: D980D19AB16B11EDB186FA96F1222468.roa (raw, json)
Hash identifier: sLC+KtQdLUMYZ+AjjgJSaJDoPW8w9L4r9pdHtFHXpaQ=
Subject key identifier: E4:82:46:BA:60:27:CF:C0:E7:96:EA:BB:AF:9F:75:2D:D5:E8:70:AA
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A2E
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D980D19AB16B11EDB186FA96F1222468.roa
Signing time: Mon 20 Feb 2023 22:13:49 +0000
ROA not before: Mon 20 Feb 2023 22:13:45 +0000
ROA not after: Fri 21 Feb 2025 22:13:45 +0000
asID: 64267
IP address blocks: 102.129.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 11:36:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2606 (0xa2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 20 22:13:45 2023 GMT
Not After : Feb 21 22:13:45 2025 GMT
Subject: CN=63f3f09d-b770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:27:87:5f:8a:b1:41:13:af:a2:95:ca:8e:17:
43:48:d1:e0:49:e3:35:e4:62:5b:6b:aa:67:3e:34:
35:e3:05:61:18:2a:58:cb:ff:e2:81:b4:90:09:1b:
bd:c3:d5:e6:40:78:3c:3b:7a:a9:87:00:c2:18:6d:
71:e9:6b:5d:dd:c2:28:04:cd:21:7a:f1:32:1d:cf:
3b:36:03:63:1a:d7:8e:04:12:1f:71:1b:39:54:47:
30:28:06:e0:82:a2:5c:ca:1b:af:c2:a9:7f:7d:fd:
af:81:0d:2b:47:db:f1:4e:ef:79:36:0e:5e:40:16:
31:2d:d9:72:5a:af:7b:b9:58:80:1f:87:1f:31:6b:
97:68:9b:69:ec:41:21:80:f3:4c:de:25:f4:e5:f9:
ed:7a:3b:c6:d3:a0:8d:c9:8b:6e:99:12:61:e7:f2:
1c:2c:fb:ce:a2:1e:e0:cb:d4:a4:32:8f:fc:e0:ca:
a6:53:cb:66:57:89:b3:cc:ac:88:ab:aa:19:ac:3a:
79:31:a1:3e:13:7b:e0:58:dd:66:3f:70:3e:8f:f2:
2a:0a:bc:df:4c:b2:75:c7:09:8d:51:66:5e:db:0f:
ec:59:ac:35:1f:ec:e9:d3:ea:9f:83:cd:07:63:2a:
11:eb:d4:10:5a:43:87:87:49:f3:62:41:b3:cd:48:
47:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:82:46:BA:60:27:CF:C0:E7:96:EA:BB:AF:9F:75:2D:D5:E8:70:AA
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D980D19AB16B11EDB186FA96F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.178.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:3f:f1:a2:ab:35:b9:78:4f:fb:08:89:d3:60:a4:05:90:d4:
59:19:6c:3d:22:31:5a:06:1c:ac:c0:f4:a8:63:85:d4:cb:65:
e5:dd:9a:ad:26:f2:87:f9:a5:66:d3:03:c2:c1:5f:b3:b0:eb:
c4:5d:5e:06:e2:48:42:6e:c3:8e:fb:c1:da:1e:8f:43:c3:f5:
2f:10:7d:27:61:56:01:ff:7b:4e:1b:fa:fc:1d:94:84:77:74:
f2:7d:a9:9b:b6:77:c9:f9:12:a7:c5:fa:92:72:23:db:a6:c7:
cf:1a:a4:ff:d1:51:42:9d:71:e9:2e:ef:a6:66:56:ca:d3:1e:
4c:5e:41:f6:88:16:2f:f6:7c:ce:d0:a1:03:08:58:26:d2:8b:
e2:a1:e7:19:ff:13:36:e5:0e:00:56:38:67:1c:ac:53:c9:16:
ac:4c:f8:11:b6:89:90:0b:90:5c:53:77:29:26:b8:c3:63:9f:
1c:18:1b:84:80:8f:2f:01:f0:17:8e:2e:76:7d:5d:6e:c7:92:
50:99:1c:d5:c8:8d:d5:c1:65:fa:24:14:d7:0d:39:fa:4e:76:
f4:0d:96:9c:e5:4d:f0:eb:45:c3:83:24:53:c9:07:a7:bd:96:
ce:70:06:a4:bc:ef:89:27:13:b6:4d:5c:75:7a:cf:d7:8c:4d:
48:96:ad:a6
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCi4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzAyMjAyMjEzNDVaFw0yNTAyMjEyMjEzNDVaMBgxFjAU
BgNVBAMMDTYzZjNmMDlkLWI3NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2J4dfirFBE6+ilcqOF0NI0eBJ4zXkYltrqmc+NDXjBWEYKljL/+KBtJAJ
G73D1eZAeDw7eqmHAMIYbXHpa13dwigEzSF68TIdzzs2A2Ma144EEh9xGzlURzAo
BuCColzKG6/CqX99/a+BDStH2/FO73k2Dl5AFjEt2XJar3u5WIAfhx8xa5dom2ns
QSGA80zeJfTl+e16O8bToI3Ji26ZEmHn8hws+86iHuDL1KQyj/zgyqZTy2ZXibPM
rIirqhmsOnkxoT4Te+BY3WY/cD6P8ioKvN9MsnXHCY1RZl7bD+xZrDUf7OnT6p+D
zQdjKhHr1BBaQ4eHSfNiQbPNSEdhAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU5IJG
umAnz8Dnluq7r591LdXocKowHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0Q5ODBEMTlBQjE2QjExRURCMTg2RkE5NkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgbIwDQYJKoZIhvcNAQEL
BQADggEBANc/8aKrNbl4T/sIidNgpAWQ1FkZbD0iMVoGHKzA9KhjhdTLZeXdmq0m
8of5pWbTA8LBX7Ow68RdXgbiSEJuw477wdoej0PD9S8QfSdhVgH/e04b+vwdlIR3
dPJ9qZu2d8n5EqfF+pJyI9umx88apP/RUUKdceku76ZmVsrTHkxeQfaIFi/2fM7Q
oQMIWCbSi+Kh5xn/EzblDgBWOGccrFPJFqxM+BG2iZALkFxTdykmuMNjnxwYG4SA
jy8B8BeOLnZ9XW7HklCZHNXIjdXBZfokFNcNOfpOdvQNlpzlTfDrRcODJFPJB6e9
ls5wBqS874knE7ZNXHV6z9eMTUiWraY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:40 2024 by rpki-client on console-ams.rpki-client.org