Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E0C57B14034011EE9C32FB7B4AD9E6FC.roa
File: E0C57B14034011EE9C32FB7B4AD9E6FC.roa (raw, json)
Hash identifier: pEkEDgUCBNCP/7aDC0s/rlgANzphCHe+atgZY928x2I=
Subject key identifier: 5E:E5:A8:33:F8:43:F5:00:0B:90:FE:41:20:A4:95:44:94:78:55:4B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0BC4
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E0C57B14034011EE9C32FB7B4AD9E6FC.roa
Signing time: Mon 05 Jun 2023 01:32:48 +0000
ROA not before: Mon 05 Jun 2023 01:32:44 +0000
ROA not after: Sat 07 Jun 2025 01:32:44 +0000
asID: 209181
IP address blocks: 102.129.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3012 (0xbc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 5 01:32:44 2023 GMT
Not After : Jun 7 01:32:44 2025 GMT
Subject: CN=647d3b40-a3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d3:9b:65:8e:e7:1a:ff:95:41:89:0e:fd:b4:
46:06:b6:ab:e5:eb:bc:d0:45:a7:5e:7b:d8:02:89:
b1:07:af:02:56:cd:65:c8:a8:39:57:ed:6d:fa:0b:
bf:69:57:6c:d8:33:df:6a:b7:78:53:07:dd:62:81:
e5:b8:5c:d9:9e:26:2e:d7:95:e2:8e:b2:1b:0c:4c:
bd:7c:10:f2:81:de:1a:e2:b8:82:c1:47:bd:c8:99:
32:d6:54:d0:74:6b:d1:87:ed:d1:19:7d:50:a6:b1:
7d:58:06:dd:c6:39:ad:e7:03:03:1c:e7:12:66:37:
17:87:8c:a5:1d:1e:a4:e3:68:60:d6:1e:47:d3:2f:
9c:39:55:2d:e9:20:25:fa:2d:b4:0e:83:1b:78:a4:
36:04:0e:1b:3c:41:cc:0f:43:d2:3a:6f:4b:35:d0:
e0:f3:08:04:d1:44:6b:4d:bf:c7:3f:30:4c:3b:5b:
8e:74:53:4b:e4:f1:6c:d6:bd:03:cd:6e:c9:e1:3f:
52:47:3f:4b:80:32:dd:b3:4b:24:d0:28:00:47:b1:
c8:71:f6:cc:05:d8:42:29:ce:02:45:fe:f0:92:f7:
f0:98:a3:a5:f7:41:f0:69:52:6b:ef:5a:52:38:b0:
cb:2a:13:55:fa:4f:63:36:ec:3e:67:c9:5e:e8:61:
9a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E5:A8:33:F8:43:F5:00:0B:90:FE:41:20:A4:95:44:94:78:55:4B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E0C57B14034011EE9C32FB7B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.190.0/24
Signature Algorithm: sha256WithRSAEncryption
91:8c:85:58:c7:5e:53:4f:91:c9:9a:83:54:a2:ab:fe:35:d6:
e4:19:de:a7:84:d1:3b:09:4c:9a:5f:12:cb:3c:36:8f:78:11:
d4:90:26:97:ce:62:4b:38:74:2d:91:c8:af:00:29:68:1d:df:
c0:b0:1f:ef:e8:f7:ed:b2:1a:54:92:5b:6a:51:c1:07:60:3b:
f0:f9:73:51:51:78:2e:dc:a4:4e:7f:5c:7f:e9:53:78:70:d8:
69:56:26:2a:77:84:68:f0:c6:a6:cb:f5:6b:f8:66:33:7b:a2:
39:da:1f:54:9d:c5:76:9e:66:03:7d:51:91:ae:28:62:5d:6b:
63:c5:90:33:04:fa:9c:05:ed:e3:76:94:42:a7:83:52:27:61:
ec:e7:50:6b:f8:3d:02:e7:2b:71:94:e2:e9:e3:83:8b:26:d1:
0a:e2:3e:da:c8:4f:d7:4a:8d:45:5c:8b:2d:4e:8d:e2:d7:69:
99:b4:31:9d:5b:e2:bf:3c:86:6d:c4:f9:c9:2f:3c:6c:fa:24:
38:78:bb:43:d5:74:2a:cd:85:db:82:cf:8b:d1:15:85:07:1e:
8d:82:01:3a:fd:c2:5e:14:74:ec:e5:96:34:1f:d9:60:c6:2e:
bb:a8:9f:c6:fd:16:23:83:13:b4:49:cc:35:06:7e:ec:c6:d7:
9d:0c:6d:32
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICC8QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzA2MDUwMTMyNDRaFw0yNTA2MDcwMTMyNDRaMBgxFjAU
BgNVBAMTDTY0N2QzYjQwLWEzYjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDe05tljuca/5VBiQ79tEYGtqvl67zQRadee9gCibEHrwJWzWXIqDlX7W36
C79pV2zYM99qt3hTB91igeW4XNmeJi7XleKOshsMTL18EPKB3hriuILBR73ImTLW
VNB0a9GH7dEZfVCmsX1YBt3GOa3nAwMc5xJmNxeHjKUdHqTjaGDWHkfTL5w5VS3p
ICX6LbQOgxt4pDYEDhs8QcwPQ9I6b0s10ODzCATRRGtNv8c/MEw7W450U0vk8WzW
vQPNbsnhP1JHP0uAMt2zSyTQKABHschx9swF2EIpzgJF/vCS9/CYo6X3QfBpUmvv
WlI4sMsqE1X6T2M27D5nyV7oYZrFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUXuWo
M/hD9QALkP5BIKSVRJR4VUswHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0UwQzU3QjE0MDM0MDExRUU5QzMyRkI3QjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgb4wDQYJKoZIhvcNAQEL
BQADggEBAJGMhVjHXlNPkcmag1Siq/411uQZ3qeE0TsJTJpfEss8No94EdSQJpfO
Yks4dC2RyK8AKWgd38CwH+/o9+2yGlSSW2pRwQdgO/D5c1FReC7cpE5/XH/pU3hw
2GlWJip3hGjwxqbL9Wv4ZjN7ojnaH1SdxXaeZgN9UZGuKGJda2PFkDME+pwF7eN2
lEKng1InYeznUGv4PQLnK3GU4unjg4sm0QriPtrIT9dKjUVciy1OjeLXaZm0MZ1b
4r88hm3E+ckvPGz6JDh4u0PVdCrNhduCz4vRFYUHHo2CATr9wl4UdOzlljQf2WDG
Lruon8b9FiODE7RJzDUGfuzG150MbTI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org