Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E147B7C6D9EE11EDBBB95616306D8C1D.roa
File: E147B7C6D9EE11EDBBB95616306D8C1D.roa (raw, json)
Hash identifier: b73FrGNTBIyOfThMvhOcXxY3KTPTrlY2JjiRykkuuNY=
Subject key identifier: 56:6F:3F:63:EB:BB:A9:FD:0F:45:A4:EA:B0:9F:36:20:2A:8F:4E:C4
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0B08
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E147B7C6D9EE11EDBBB95616306D8C1D.roa
Signing time: Thu 13 Apr 2023 11:32:32 +0000
ROA not before: Thu 13 Apr 2023 11:32:28 +0000
ROA not after: Sat 12 Apr 2025 11:32:28 +0000
asID: 834
IP address blocks: 102.129.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2824 (0xb08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 13 11:32:28 2023 GMT
Not After : Apr 12 11:32:28 2025 GMT
Subject: CN=6437e850-5b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:35:4a:d1:d0:dd:8d:a9:3b:e9:17:b1:a5:50:
7d:08:4b:d5:dc:ca:a1:65:98:71:78:d6:01:54:49:
33:67:7e:e7:fd:60:e6:c1:d0:64:d5:66:4e:17:ce:
dc:5f:9d:92:c5:0c:fd:8e:0d:de:71:bb:99:f9:e7:
1f:53:71:3c:d3:8d:09:a2:50:30:ba:a2:63:89:d4:
0d:5f:1d:91:fd:ab:a8:fb:8d:d8:25:c6:f4:fc:5a:
64:7f:a5:48:f5:76:40:17:a9:79:03:44:46:af:34:
ba:ff:bc:1c:b7:b2:02:db:f0:23:13:40:4d:ce:f5:
cf:3c:c6:db:ce:e1:19:7c:b2:f5:d5:01:ea:ba:86:
d6:00:88:c7:e9:d6:1e:ea:4f:d8:06:8b:eb:6b:5b:
09:49:58:b1:af:cf:ea:22:05:24:4a:e7:e3:90:d8:
d9:15:ba:84:c8:6f:65:71:02:0b:67:23:dc:f9:d4:
84:9c:26:ae:8a:33:f6:79:1b:3b:1c:f5:ab:eb:ae:
a6:81:27:6f:be:89:f0:cd:3a:1e:2a:c4:20:71:7d:
c6:85:17:9b:c7:f7:37:9c:ca:bd:9b:4d:f7:b2:53:
ac:19:89:7f:2f:3e:2d:73:9d:53:ba:9e:ad:af:88:
3a:d3:dd:e5:64:29:40:5f:7f:59:d7:38:b6:bb:8e:
30:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6F:3F:63:EB:BB:A9:FD:0F:45:A4:EA:B0:9F:36:20:2A:8F:4E:C4
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E147B7C6D9EE11EDBBB95616306D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.167.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:fe:71:52:ce:96:4f:cf:00:7f:91:e5:d3:e3:30:aa:3b:a4:
26:a6:da:04:6d:bd:22:9f:38:40:cd:24:bf:ea:7a:c6:6b:3d:
5b:7c:a9:05:aa:ac:9e:a5:15:11:cf:7f:cc:e0:07:d9:07:82:
a7:23:a2:2a:91:9f:43:87:da:8e:a1:e1:78:ff:6f:29:71:26:
45:4f:bb:62:d2:95:9b:8e:a5:18:ac:a7:e0:22:8d:a9:eb:fe:
f0:d1:e3:06:45:ae:57:31:80:2d:2a:ea:7a:84:b9:1d:80:01:
24:9c:c8:e8:0b:ca:6c:ad:a7:36:74:80:7b:4c:8f:23:3c:11:
e8:f5:49:87:1f:fb:85:35:2a:0f:d5:9c:f3:c2:c2:be:a1:89:
1f:cb:0e:28:0b:65:96:b9:96:8c:89:c2:ed:8c:3a:92:65:e2:
57:75:f6:81:e6:af:7c:a7:55:44:36:24:1e:1d:13:11:0a:fa:
a7:ca:55:2d:35:bb:ae:99:94:77:25:f4:4a:49:f8:1c:fc:84:
2f:fc:f1:af:59:cf:47:fc:7b:4d:1d:3d:c1:4d:ce:a0:6f:9a:
18:a2:70:02:e0:33:06:cf:60:60:e0:01:26:05:e2:a5:d6:95:
54:0f:50:d3:89:84:ce:cd:76:2e:80:51:7d:80:e7:72:0f:6d:
d4:a2:59:9c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCwgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzA0MTMxMTMyMjhaFw0yNTA0MTIxMTMyMjhaMBgxFjAU
BgNVBAMMDTY0MzdlODUwLTViMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8NUrR0N2NqTvpF7GlUH0IS9XcyqFlmHF41gFUSTNnfuf9YObB0GTVZk4X
ztxfnZLFDP2ODd5xu5n55x9TcTzTjQmiUDC6omOJ1A1fHZH9q6j7jdglxvT8WmR/
pUj1dkAXqXkDREavNLr/vBy3sgLb8CMTQE3O9c88xtvO4Rl8svXVAeq6htYAiMfp
1h7qT9gGi+trWwlJWLGvz+oiBSRK5+OQ2NkVuoTIb2VxAgtnI9z51IScJq6KM/Z5
Gzsc9avrrqaBJ2++ifDNOh4qxCBxfcaFF5vH9zecyr2bTfeyU6wZiX8vPi1znVO6
nq2viDrT3eVkKUBff1nXOLa7jjBZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUVm8/
Y+u7qf0PRaTqsJ82ICqPTsQwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0UxNDdCN0M2RDlFRTExRURCQkI5NTYxNjMwNkQ4QzFELnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgacwDQYJKoZIhvcNAQEL
BQADggEBAG7+cVLOlk/PAH+R5dPjMKo7pCam2gRtvSKfOEDNJL/qesZrPVt8qQWq
rJ6lFRHPf8zgB9kHgqcjoiqRn0OH2o6h4Xj/bylxJkVPu2LSlZuOpRisp+Aijanr
/vDR4wZFrlcxgC0q6nqEuR2AASScyOgLymytpzZ0gHtMjyM8Eej1SYcf+4U1Kg/V
nPPCwr6hiR/LDigLZZa5loyJwu2MOpJl4ld19oHmr3ynVUQ2JB4dExEK+qfKVS01
u66ZlHcl9EpJ+Bz8hC/88a9Zz0f8e00dPcFNzqBvmhiicALgMwbPYGDgASYF4qXW
lVQPUNOJhM7Ndi6AUX2A53IPbdSiWZw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org