Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DA26E230935411EE81543E32D25BE465.roa
File: DA26E230935411EE81543E32D25BE465.roa (raw, json)
Hash identifier: TGw3e3Q4JIxsMik9tcc0XM5RSYSNtn5Muh7KJx59P7U=
Subject key identifier: DF:11:88:65:A9:45:8D:CA:74:26:84:AA:D0:C7:DA:04:6C:F4:14:D1
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0E6C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DA26E230935411EE81543E32D25BE465.roa
Signing time: Tue 05 Dec 2023 09:58:34 +0000
ROA not before: Tue 05 Dec 2023 09:58:31 +0000
ROA not after: Tue 31 Dec 2024 09:58:31 +0000
asID: 834
IP address blocks: 102.129.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Dec 2023 15:16:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3692 (0xe6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 5 09:58:31 2023 GMT
Not After : Dec 31 09:58:31 2024 GMT
Subject: CN=656ef44a-3ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:56:9b:8b:74:86:46:61:ee:a6:9d:a6:41:69:
9b:57:6f:76:24:8f:0f:80:6a:10:84:b3:d4:8e:f4:
1d:10:b4:99:65:fa:46:7d:13:9c:04:5d:f9:7c:01:
0a:d7:39:46:e6:ba:64:61:cc:16:b1:68:ea:04:25:
5f:5b:bd:e9:02:d4:0d:a6:a2:7b:64:44:62:7b:e8:
66:da:ed:96:fd:e3:56:3d:fa:f5:d2:91:52:e9:b0:
b6:63:c5:5d:e1:f7:3a:10:4c:5f:64:7e:c5:76:61:
64:cd:e9:6b:c7:42:ed:5c:1a:dd:b6:bf:f1:06:65:
d5:03:c0:41:0f:07:80:84:d4:f8:81:ff:bd:54:a0:
e5:0a:a5:a3:8f:cb:b4:38:53:a3:f0:f8:d5:ae:de:
8b:10:b2:3d:0b:1a:b2:8c:38:76:68:bf:f3:f2:2b:
26:b0:bb:5f:3e:6f:b0:c7:8d:8e:07:02:50:63:60:
6f:66:27:bc:ad:dd:f8:69:85:a7:4f:5a:1d:f0:66:
b0:41:5f:61:0c:32:f5:f8:25:03:7c:c5:63:30:f9:
23:62:09:20:91:99:28:fa:e6:9e:53:32:19:d8:0b:
1c:ad:2e:14:aa:35:72:5f:6f:e7:28:0c:be:c8:68:
67:36:3e:d3:4e:06:d5:c9:9d:6c:c3:96:fc:53:da:
15:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:11:88:65:A9:45:8D:CA:74:26:84:AA:D0:C7:DA:04:6C:F4:14:D1
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DA26E230935411EE81543E32D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.206.0/24
Signature Algorithm: sha256WithRSAEncryption
82:dc:1d:4e:53:c0:b1:32:b9:5e:57:85:4c:82:09:e2:d9:33:
3a:ec:3b:cd:82:a9:b2:3e:44:d0:b6:9c:80:4f:8b:86:a5:21:
91:d0:7f:1b:39:fc:c6:68:c4:2d:45:1a:ee:dc:1e:79:e0:ac:
0a:d9:9b:6e:f7:91:58:3c:1a:c1:a5:c3:69:7c:6d:7c:91:99:
d4:2f:73:bc:68:b2:ee:7b:56:ec:2f:1f:71:fd:3a:90:4b:ee:
32:36:7a:2c:af:f1:6b:f9:7a:62:a5:28:74:37:53:29:87:8b:
94:54:f8:c3:fa:5c:e6:ca:21:b3:3b:7d:6c:69:83:f2:47:21:
a6:29:26:2a:db:4b:67:7b:7c:d6:9a:a6:00:6b:06:6b:10:7f:
42:fd:a2:5e:3d:5f:1d:03:9c:7f:d2:fe:f1:c9:4d:9a:ae:25:
64:bb:e2:a8:2d:16:5c:f3:c8:23:cd:77:09:ca:6a:c0:06:b8:
a3:85:0d:70:a4:0a:52:ec:0b:00:27:89:49:13:56:84:64:43:
e2:f9:29:88:f6:9a:7a:c7:fb:82:97:33:8e:05:11:cd:16:28:
82:00:ad:6a:ed:07:cc:95:68:96:5b:0b:30:1f:05:6d:22:1f:
9e:7d:e2:85:89:d5:0a:40:34:6e:bc:75:a1:0c:97:08:67:78:
c3:cf:65:74
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDmwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzEyMDUwOTU4MzFaFw0yNDEyMzEwOTU4MzFaMBgxFjAU
BgNVBAMTDTY1NmVmNDRhLTNhYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDYVpuLdIZGYe6mnaZBaZtXb3Ykjw+AahCEs9SO9B0QtJll+kZ9E5wEXfl8
AQrXOUbmumRhzBaxaOoEJV9bvekC1A2montkRGJ76Gba7Zb941Y9+vXSkVLpsLZj
xV3h9zoQTF9kfsV2YWTN6WvHQu1cGt22v/EGZdUDwEEPB4CE1PiB/71UoOUKpaOP
y7Q4U6Pw+NWu3osQsj0LGrKMOHZov/PyKyawu18+b7DHjY4HAlBjYG9mJ7yt3fhp
hadPWh3wZrBBX2EMMvX4JQN8xWMw+SNiCSCRmSj65p5TMhnYCxytLhSqNXJfb+co
DL7IaGc2PtNOBtXJnWzDlvxT2hXVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU3xGI
ZalFjcp0JoSq0MfaBGz0FNEwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0RBMjZFMjMwOTM1NDExRUU4MTU0M0UzMkQyNUJFNDY1LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgc4wDQYJKoZIhvcNAQEL
BQADggEBAILcHU5TwLEyuV5XhUyCCeLZMzrsO82CqbI+RNC2nIBPi4alIZHQfxs5
/MZoxC1FGu7cHnngrArZm273kVg8GsGlw2l8bXyRmdQvc7xosu57VuwvH3H9OpBL
7jI2eiyv8Wv5emKlKHQ3UymHi5RU+MP6XObKIbM7fWxpg/JHIaYpJirbS2d7fNaa
pgBrBmsQf0L9ol49Xx0DnH/S/vHJTZquJWS74qgtFlzzyCPNdwnKasAGuKOFDXCk
ClLsCwAniUkTVoRkQ+L5KYj2mnrH+4KXM44FEc0WKIIArWrtB8yVaJZbCzAfBW0i
H5594oWJ1QpANG68daEMlwhneMPPZXQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org