Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DFBEF8866FD311EDB1D871EFF1222468.roa
File: DFBEF8866FD311EDB1D871EFF1222468.roa (raw, json)
Hash identifier: iZavlUFAM23zD7XH+AClCF72+Iy3bk7jMYiqasRIGVw=
Subject key identifier: 67:98:AF:5E:CF:A9:FD:1D:A0:B7:CE:13:84:A5:74:2E:3A:D2:6B:04
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 091B
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DFBEF8866FD311EDB1D871EFF1222468.roa
Signing time: Tue 29 Nov 2022 10:52:10 +0000
ROA not before: Tue 29 Nov 2022 10:52:07 +0000
ROA not after: Sat 30 Nov 2024 10:52:07 +0000
asID: 40676
IP address blocks: 102.129.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Dec 2022 04:32:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2331 (0x91b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 29 10:52:07 2022 GMT
Not After : Nov 30 10:52:07 2024 GMT
Subject: CN=6385e45a-8623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5f:c0:8b:7d:f6:dd:f3:08:0a:67:c0:eb:55:
b2:df:f1:2f:e3:6f:e3:00:fa:af:6d:af:14:0f:bc:
22:ce:c2:3c:c7:56:3d:1c:e3:32:80:3a:79:73:61:
22:a8:fd:6b:a4:ed:51:7e:0f:fa:38:8a:9d:78:ad:
39:23:a8:4a:4c:54:d4:78:53:18:e1:72:09:9f:56:
5e:61:02:b0:b9:ff:cb:bb:24:96:3d:03:83:29:f3:
77:66:02:44:b7:be:13:46:74:08:e5:28:f6:1b:ba:
fd:e9:62:4c:e2:77:bd:e3:51:0d:90:8a:05:75:f0:
cd:a3:78:a7:58:65:30:4f:36:b9:96:34:ed:a7:13:
05:55:59:72:a6:35:17:5a:11:fd:96:c4:30:bd:59:
d3:76:3f:1c:f6:bb:72:86:a9:8e:a2:dd:eb:dc:27:
28:63:8b:49:4f:17:30:8f:63:76:63:d9:ca:cb:f7:
08:01:d7:ce:e5:6c:31:47:87:fa:bb:b4:7a:3a:f0:
85:0c:22:c2:86:11:9c:0d:e5:1d:36:f8:e2:6f:a5:
e3:f2:af:5b:16:25:fc:da:ba:2e:67:97:6a:c8:18:
07:72:1f:dd:9e:56:27:94:f2:a3:c7:a5:7e:b2:21:
94:a8:b3:48:14:5f:84:b2:79:23:db:ee:a0:7f:cd:
c3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:98:AF:5E:CF:A9:FD:1D:A0:B7:CE:13:84:A5:74:2E:3A:D2:6B:04
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DFBEF8866FD311EDB1D871EFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.226.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:a9:4a:7c:30:b4:04:b3:17:d0:cd:b9:8a:21:a9:fc:13:87:
65:d5:46:bd:ec:5f:c4:76:f1:30:30:02:ac:19:1a:f4:65:d8:
71:38:1a:fe:a8:8f:48:fd:54:bc:93:8a:c2:19:23:07:ce:c6:
bc:55:f4:fb:0a:02:11:26:42:dd:27:95:25:d1:2d:25:ae:a2:
89:e6:ff:86:16:10:9e:ba:fb:72:88:24:b5:47:dc:33:b2:7c:
ac:96:95:e3:7e:5d:f2:18:f7:10:6a:a8:66:8c:34:bf:7a:e7:
1b:9a:72:de:b7:ef:ff:f0:0c:9e:ea:0e:4d:8f:96:8e:4a:3a:
cc:b1:31:4f:7b:8a:20:df:87:8c:17:b3:99:df:9b:5d:e3:3d:
44:6d:4b:a9:81:09:94:e6:b6:0d:a2:e1:ca:ba:fe:d2:fa:66:
3c:10:1b:86:1d:d5:53:a4:b2:3b:42:b1:4b:1c:33:28:a2:88:
c7:06:a8:f7:96:b1:7f:d0:92:c8:a9:af:b4:17:e6:2e:7d:62:
fb:b2:f0:30:66:c2:2a:ca:d0:ef:03:b6:80:d0:e4:7b:21:19:
ea:63:38:8b:29:f5:f7:c3:22:24:6d:75:2f:88:fe:7f:59:c3:
80:81:3a:54:71:77:0b:de:01:31:30:50:d8:f3:24:5f:1a:ce:
45:f7:27:00
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCRswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMjExMjkxMDUyMDdaFw0yNDExMzAxMDUyMDdaMBgxFjAU
BgNVBAMMDTYzODVlNDVhLTg2MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8X8CLffbd8wgKZ8DrVbLf8S/jb+MA+q9trxQPvCLOwjzHVj0c4zKAOnlz
YSKo/Wuk7VF+D/o4ip14rTkjqEpMVNR4UxjhcgmfVl5hArC5/8u7JJY9A4Mp83dm
AkS3vhNGdAjlKPYbuv3pYkzid73jUQ2QigV18M2jeKdYZTBPNrmWNO2nEwVVWXKm
NRdaEf2WxDC9WdN2Pxz2u3KGqY6i3evcJyhji0lPFzCPY3Zj2crL9wgB187lbDFH
h/q7tHo68IUMIsKGEZwN5R02+OJvpePyr1sWJfzaui5nl2rIGAdyH92eVieU8qPH
pX6yIZSos0gUX4SyeSPb7qB/zcMHAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUZ5iv
Xs+p/R2gt84ThKV0LjrSawQwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0RGQkVGODg2NkZEMzExRURCMUQ4NzFFRkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgeIwDQYJKoZIhvcNAQEL
BQADggEBAG6pSnwwtASzF9DNuYohqfwTh2XVRr3sX8R28TAwAqwZGvRl2HE4Gv6o
j0j9VLyTisIZIwfOxrxV9PsKAhEmQt0nlSXRLSWuoonm/4YWEJ66+3KIJLVH3DOy
fKyWleN+XfIY9xBqqGaMNL965xuact637//wDJ7qDk2Plo5KOsyxMU97iiDfh4wX
s5nfm13jPURtS6mBCZTmtg2i4cq6/tL6ZjwQG4Yd1VOksjtCsUscMyiiiMcGqPeW
sX/Qksipr7QX5i59Yvuy8DBmwirK0O8DtoDQ5HshGepjOIsp9ffDIiRtdS+I/n9Z
w4CBOlRxdwveATEwUNjzJF8azkX3JwA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:40 2024 by rpki-client on console-ams.rpki-client.org