Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DD9DDB22E4DF11ED9448C82F5D736454.roa
File: DD9DDB22E4DF11ED9448C82F5D736454.roa (raw, json)
Hash identifier: TO+SGZ9gc9XDKaHV+3SN3Gxb9MjMEQ3KTnzFLa7WfiU=
Subject key identifier: EA:EC:D5:59:1B:CF:BF:67:3F:B5:E1:18:E9:24:23:82:65:3F:09:49
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0B3C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DD9DDB22E4DF11ED9448C82F5D736454.roa
Signing time: Thu 27 Apr 2023 09:42:47 +0000
ROA not before: Thu 27 Apr 2023 09:42:43 +0000
ROA not after: Sat 26 Apr 2025 09:42:43 +0000
asID: 30058
IP address blocks: 102.129.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2876 (0xb3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 27 09:42:43 2023 GMT
Not After : Apr 26 09:42:43 2025 GMT
Subject: CN=644a4396-12dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:64:aa:d3:b9:df:8e:07:cd:cd:17:ac:52:04:
45:47:de:4c:a7:ba:0c:31:e4:ea:13:fa:a0:b7:ac:
97:8a:98:e0:df:25:69:65:9f:48:14:9c:87:59:21:
ea:42:7e:e9:5d:6a:57:e5:e1:3e:18:ee:f6:7b:2b:
f1:57:09:8b:64:97:b6:c7:16:d8:d7:07:5e:cb:42:
e9:f9:38:27:58:63:be:bd:9e:79:7b:67:19:fd:c0:
b2:ed:36:9f:3f:ec:0c:37:20:4e:82:af:b7:8a:5f:
95:a2:9a:7e:f1:da:8b:4d:f8:be:fb:4b:64:9d:e9:
c9:be:c5:b4:57:6a:b1:79:29:1e:a6:0f:63:22:a6:
16:d4:d1:9e:33:90:b7:66:0c:62:fd:64:16:37:41:
6d:51:5a:c9:fe:77:d0:a2:6d:db:f6:bc:29:60:91:
01:2f:15:4c:b4:7b:09:f5:ab:e5:f9:f2:da:53:9b:
f5:14:e6:cb:67:70:51:a7:71:22:13:f7:37:2b:57:
11:d0:57:25:03:2d:af:11:d0:60:04:58:47:83:2d:
a6:1f:c7:8e:48:2b:82:86:9a:92:8e:dc:9e:5a:6c:
06:8a:74:62:5f:0e:88:5d:80:d9:c8:a4:ee:d7:c8:
38:33:72:07:84:71:a0:80:96:c4:d8:ec:8e:fa:df:
68:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EC:D5:59:1B:CF:BF:67:3F:B5:E1:18:E9:24:23:82:65:3F:09:49
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DD9DDB22E4DF11ED9448C82F5D736454.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.165.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:b7:16:c0:16:93:63:06:ea:e9:50:97:46:2e:7e:77:3a:66:
18:af:04:fe:9d:c7:b8:13:e9:33:97:4d:dd:b5:15:06:60:ba:
e9:06:de:cb:91:81:a4:02:58:8e:d7:58:b0:26:d0:f3:d6:9d:
d5:29:9c:2e:e9:cf:aa:09:d0:63:ab:f4:81:bb:ff:2f:dd:f0:
aa:cf:1c:f0:97:dc:f9:94:ba:e1:b6:b2:ec:10:78:25:03:9e:
2c:32:66:72:73:ad:8c:c1:6d:29:e4:49:90:5f:a0:6b:cd:d6:
96:c7:33:25:2f:35:8e:d2:b0:db:db:01:b4:78:83:59:7d:52:
c5:8e:73:ee:3e:4a:52:38:39:4f:f0:5b:d9:32:3b:ef:43:9f:
6e:52:ab:6c:18:77:78:70:fa:fd:ad:90:34:74:e4:eb:09:b6:
9b:f2:e7:34:fa:24:b1:6f:93:06:ee:87:8a:76:01:a5:5e:8e:
98:cc:99:53:c9:5f:06:bd:1a:4b:a1:60:38:40:79:5b:e4:88:
8d:49:f7:79:a4:5c:b1:f5:32:8c:bc:a4:d5:dc:19:f7:d8:a1:
3e:4d:8b:bf:9d:5b:33:88:4f:97:a9:a5:65:74:88:b6:69:68:
ae:18:ed:1a:df:31:06:2b:a8:a0:79:0b:ca:9f:83:55:a8:a7:
31:48:d5:17
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCzwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzA0MjcwOTQyNDNaFw0yNTA0MjYwOTQyNDNaMBgxFjAU
BgNVBAMTDTY0NGE0Mzk2LTEyZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCvZKrTud+OB83NF6xSBEVH3kynugwx5OoT+qC3rJeKmODfJWlln0gUnIdZ
IepCfuldalfl4T4Y7vZ7K/FXCYtkl7bHFtjXB17LQun5OCdYY769nnl7Zxn9wLLt
Np8/7Aw3IE6Cr7eKX5Wimn7x2otN+L77S2Sd6cm+xbRXarF5KR6mD2MiphbU0Z4z
kLdmDGL9ZBY3QW1RWsn+d9Cibdv2vClgkQEvFUy0ewn1q+X58tpTm/UU5stncFGn
cSIT9zcrVxHQVyUDLa8R0GAEWEeDLaYfx45IK4KGmpKO3J5abAaKdGJfDohdgNnI
pO7XyDgzcgeEcaCAlsTY7I7632gjAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU6uzV
WRvPv2c/teEY6SQjgmU/CUkwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0REOUREQjIyRTRERjExRUQ5NDQ4QzgyRjVENzM2NDU0LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgaUwDQYJKoZIhvcNAQEL
BQADggEBAMa3FsAWk2MG6ulQl0Yufnc6ZhivBP6dx7gT6TOXTd21FQZguukG3suR
gaQCWI7XWLAm0PPWndUpnC7pz6oJ0GOr9IG7/y/d8KrPHPCX3PmUuuG2suwQeCUD
niwyZnJzrYzBbSnkSZBfoGvN1pbHMyUvNY7SsNvbAbR4g1l9UsWOc+4+SlI4OU/w
W9kyO+9Dn25Sq2wYd3hw+v2tkDR05OsJtpvy5zT6JLFvkwbuh4p2AaVejpjMmVPJ
Xwa9GkuhYDhAeVvkiI1J93mkXLH1Moy8pNXcGffYoT5Ni7+dWzOIT5eppWV0iLZp
aK4Y7RrfMQYrqKB5C8qfg1WopzFI1Rc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org