Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EA2545CCD60411ED894BDF94F1222468.roa
File: EA2545CCD60411ED894BDF94F1222468.roa (raw, json)
Hash identifier: ZXFUatZHb3MsYVkeJpa3N5bZ8eVSkFW+2goQEvlg0Gs=
Subject key identifier: 8B:A6:BF:75:A9:D0:FC:22:C9:94:03:F6:DE:AC:F6:87:23:22:A8:62
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0AFF
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EA2545CCD60411ED894BDF94F1222468.roa
Signing time: Sat 08 Apr 2023 12:00:11 +0000
ROA not before: Sat 08 Apr 2023 12:00:07 +0000
ROA not after: Wed 09 Apr 2025 12:00:07 +0000
asID: 200017
IP address blocks: 102.165.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jul 2023 13:41:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2815 (0xaff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 8 12:00:07 2023 GMT
Not After : Apr 9 12:00:07 2025 GMT
Subject: CN=6431574b-8e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ad:06:f8:8b:fb:55:46:76:47:3a:30:34:5a:
9e:e6:43:d1:69:06:83:4f:79:5d:cc:e6:41:db:fa:
3d:54:53:af:21:ec:5d:24:b9:f7:4b:27:9f:56:64:
21:da:f4:45:e9:6d:42:53:8b:8b:73:0f:af:49:ab:
36:ce:95:81:08:ee:6f:c7:d0:4b:56:57:e8:76:75:
67:a3:b2:11:18:91:a4:23:d2:55:b0:9d:18:15:b5:
d7:98:78:64:11:91:75:63:82:f4:eb:a3:7d:22:5b:
c0:d6:b1:4e:39:34:a3:aa:2c:74:a8:6e:47:49:8b:
ab:e9:9c:d2:49:b4:6d:62:ac:5d:f5:1b:b1:e2:c5:
0e:38:d2:6d:ca:4d:80:f3:d9:a9:35:ca:74:e8:cd:
31:e0:36:8a:06:5f:1b:31:55:27:47:98:47:ef:d1:
fd:25:23:59:5c:10:0c:60:f7:c3:30:5f:61:f7:61:
36:5e:35:65:f7:2b:81:d6:b4:f5:6c:af:fc:80:2b:
b9:d9:70:57:d9:a9:d7:59:bf:58:66:c9:95:8d:10:
58:cd:89:42:be:39:66:e4:35:1e:79:f5:71:b6:db:
80:5a:67:ec:d9:76:f2:2d:c3:62:df:07:7f:d9:5b:
e7:21:25:ea:74:92:03:0b:78:05:be:8a:98:28:79:
39:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A6:BF:75:A9:D0:FC:22:C9:94:03:F6:DE:AC:F6:87:23:22:A8:62
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EA2545CCD60411ED894BDF94F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.12.0/24
Signature Algorithm: sha256WithRSAEncryption
16:a7:d8:32:26:ca:ef:05:25:fd:57:56:df:77:5a:a2:6a:0b:
30:ba:84:2a:35:d8:ad:b3:03:ef:02:d5:3e:b2:a0:94:01:50:
64:d4:d8:27:b6:62:3d:0c:df:c3:c5:37:4a:e9:27:9e:c8:40:
b1:1f:ef:da:d9:5d:5e:fb:dc:83:35:65:02:4f:89:90:85:31:
c4:c7:ca:56:6a:75:b4:a0:64:b2:bc:27:de:e5:7a:3a:4c:f0:
ac:98:86:ef:af:ec:c3:58:b6:95:1d:da:3a:87:fc:4c:f1:53:
e5:ba:90:fc:1f:29:92:a0:34:e5:b5:0e:fc:a5:2d:49:b4:0b:
fe:79:6d:7c:2c:ce:3a:19:0a:02:08:5f:26:c0:2d:42:51:2e:
20:e4:bd:13:60:1b:7c:1e:d5:da:62:58:52:4e:4d:fe:08:e9:
b4:7b:41:ef:83:04:92:00:0e:c2:7a:73:6d:bb:47:77:2d:a2:
23:bd:4e:48:7a:50:00:49:4f:65:98:bd:51:ac:c1:2f:f7:73:
0c:39:41:d3:1f:f1:01:4e:7e:7e:21:99:3b:7a:be:25:15:6e:
43:43:6d:a7:d8:cc:1c:8d:b4:6f:94:1c:65:89:d6:bd:44:f0:
61:cf:2a:9a:5e:4f:75:b7:ed:fa:48:e6:9e:11:39:0c:58:a6:
71:1e:69:c1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCv8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzA0MDgxMjAwMDdaFw0yNTA0MDkxMjAwMDdaMBgxFjAU
BgNVBAMMDTY0MzE1NzRiLThlNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6rQb4i/tVRnZHOjA0Wp7mQ9FpBoNPeV3M5kHb+j1UU68h7F0kufdLJ59W
ZCHa9EXpbUJTi4tzD69JqzbOlYEI7m/H0EtWV+h2dWejshEYkaQj0lWwnRgVtdeY
eGQRkXVjgvTro30iW8DWsU45NKOqLHSobkdJi6vpnNJJtG1irF31G7HixQ440m3K
TYDz2ak1ynTozTHgNooGXxsxVSdHmEfv0f0lI1lcEAxg98MwX2H3YTZeNWX3K4HW
tPVsr/yAK7nZcFfZqddZv1hmyZWNEFjNiUK+OWbkNR559XG224BaZ+zZdvItw2Lf
B3/ZW+chJep0kgMLeAW+ipgoeTk1AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUi6a/
danQ/CLJlAP23qz2hyMiqGIwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0VBMjU0NUNDRDYwNDExRUQ4OTRCREY5NEYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmpQwwDQYJKoZIhvcNAQEL
BQADggEBABan2DImyu8FJf1XVt93WqJqCzC6hCo12K2zA+8C1T6yoJQBUGTU2Ce2
Yj0M38PFN0rpJ57IQLEf79rZXV773IM1ZQJPiZCFMcTHylZqdbSgZLK8J97lejpM
8KyYhu+v7MNYtpUd2jqH/EzxU+W6kPwfKZKgNOW1DvylLUm0C/55bXwszjoZCgII
XybALUJRLiDkvRNgG3we1dpiWFJOTf4I6bR7Qe+DBJIADsJ6c227R3ctoiO9Tkh6
UABJT2WYvVGswS/3cww5QdMf8QFOfn4hmTt6viUVbkNDbafYzByNtG+UHGWJ1r1E
8GHPKppeT3W37fpI5p4ROQxYpnEeacE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:40 2024 by rpki-client on console-ams.rpki-client.org