Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EA39CFE65D8611EF995FA4A1762E951A.roa
File: EA39CFE65D8611EF995FA4A1762E951A.roa (raw, json)
Hash identifier: gcv63KW4OpzRJnkV1Hm2PKF5IjvxQP2PuyJv25i7cTs=
Subject key identifier: 2B:8A:83:D7:5F:CF:D0:84:C1:81:1B:7E:12:3F:AF:25:02:B9:50:0F
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 11BE
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EA39CFE65D8611EF995FA4A1762E951A.roa
Signing time: Sun 18 Aug 2024 17:25:51 +0000
ROA not before: Sun 18 Aug 2024 17:25:46 +0000
ROA not after: Tue 18 Aug 2026 17:25:46 +0000
asID: 834
IP address blocks: 102.129.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 09:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4542 (0x11be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 18 17:25:46 2024 GMT
Not After : Aug 18 17:25:46 2026 GMT
Subject: CN=66c22e9f-f330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:07:ff:fe:d8:39:bd:4f:26:51:9e:55:78:35:
fa:d3:11:e3:88:32:f1:c0:37:e1:81:1f:63:1e:f7:
bc:c9:aa:2a:ea:ba:dc:83:b8:51:3c:b1:60:11:2a:
f3:b5:55:ef:1c:07:42:8b:10:2e:65:1e:12:23:1e:
99:d1:ae:35:a8:1d:34:43:72:fc:f6:28:19:5b:f2:
24:8d:27:65:33:20:86:24:6e:8e:92:6c:6d:34:19:
cd:38:bb:99:50:47:97:43:a3:a2:aa:61:0d:c7:1c:
b5:b3:6b:94:da:cb:0c:52:48:c2:19:e3:9e:43:af:
9c:a1:36:f5:72:61:a7:65:1f:a9:b5:8d:84:0f:41:
c0:2e:32:e2:bf:eb:c3:4e:f0:1a:63:a5:ef:72:e3:
0e:ae:19:39:67:12:a3:f0:81:e1:3f:27:62:3b:9b:
00:9a:1c:de:f6:13:a9:c9:30:bd:df:2c:82:bd:04:
cb:f4:ed:df:fe:86:78:87:d6:ea:17:e4:54:fc:c7:
e6:c0:02:28:14:84:e1:dc:e6:84:cb:6c:2b:81:65:
2f:78:6c:5f:54:0f:ed:f9:b9:84:b8:6b:f0:2a:84:
fd:70:fc:de:2c:39:5e:01:a0:9c:b6:0e:5e:8f:ef:
3c:6c:31:7e:99:e7:b7:97:75:3f:a2:1f:46:ab:c5:
3b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8A:83:D7:5F:CF:D0:84:C1:81:1B:7E:12:3F:AF:25:02:B9:50:0F
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EA39CFE65D8611EF995FA4A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.241.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:16:dc:f7:b1:75:c5:f2:dd:ed:1e:01:69:db:e2:d0:8e:48:
dc:5c:1a:75:d0:9b:8f:5c:19:73:4c:c2:0b:57:7d:02:22:91:
b3:14:fa:58:f0:04:35:e3:b1:4c:88:f5:c5:05:57:64:6a:6a:
68:16:48:f4:a3:22:31:ce:78:0f:38:ef:89:a1:6b:c7:d0:bb:
70:1e:0a:b3:71:15:bf:91:33:6b:86:13:54:f7:7c:e6:9f:4c:
34:84:2d:f4:e8:cf:b3:63:98:64:a4:cf:ca:a3:18:94:2f:07:
2b:1a:42:40:cc:58:0d:46:f9:64:aa:ba:50:67:6d:68:a6:a3:
2f:a3:0a:2c:c9:aa:83:5d:15:32:c1:da:b0:9f:64:4d:1c:58:
66:45:ff:82:e4:bb:df:c6:de:5c:2b:0e:2c:dc:90:08:e0:cd:
08:c3:ed:f6:52:a0:cb:d7:a3:72:b3:1e:df:7d:e5:14:64:d2:
ab:3f:68:90:d0:c4:46:fb:a4:14:80:f8:d4:ba:e8:42:1b:95:
e4:95:11:08:93:36:6e:6b:3a:35:36:01:13:24:96:b4:bf:bb:
6f:a9:63:67:8d:9b:7e:a2:26:8f:55:41:22:b4:c8:c5:71:b1:
fa:ce:2b:ee:ac:75:3f:9a:c6:04:fe:0d:7e:2d:94:5e:ae:51:
4d:75:04:13
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEb4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNDA4MTgxNzI1NDZaFw0yNjA4MTgxNzI1NDZaMBgxFjAU
BgNVBAMTDTY2YzIyZTlmLWYzMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDiB//+2Dm9TyZRnlV4NfrTEeOIMvHAN+GBH2Me97zJqirqutyDuFE8sWAR
KvO1Ve8cB0KLEC5lHhIjHpnRrjWoHTRDcvz2KBlb8iSNJ2UzIIYkbo6SbG00Gc04
u5lQR5dDo6KqYQ3HHLWza5TaywxSSMIZ455Dr5yhNvVyYadlH6m1jYQPQcAuMuK/
68NO8Bpjpe9y4w6uGTlnEqPwgeE/J2I7mwCaHN72E6nJML3fLIK9BMv07d/+hniH
1uoX5FT8x+bAAigUhOHc5oTLbCuBZS94bF9UD+35uYS4a/AqhP1w/N4sOV4BoJy2
Dl6P7zxsMX6Z57eXdT+iH0arxTsxAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUK4qD
11/P0ITBgRt+Ej+vJQK5UA8wHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0VBMzlDRkU2NUQ4NjExRUY5OTVGQTRBMTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgfEwDQYJKoZIhvcNAQEL
BQADggEBAM4W3PexdcXy3e0eAWnb4tCOSNxcGnXQm49cGXNMwgtXfQIikbMU+ljw
BDXjsUyI9cUFV2RqamgWSPSjIjHOeA8474mha8fQu3AeCrNxFb+RM2uGE1T3fOaf
TDSELfToz7NjmGSkz8qjGJQvBysaQkDMWA1G+WSqulBnbWimoy+jCizJqoNdFTLB
2rCfZE0cWGZF/4Lku9/G3lwrDizckAjgzQjD7fZSoMvXo3KzHt995RRk0qs/aJDQ
xEb7pBSA+NS66EIbleSVEQiTNm5rOjU2ARMklrS/u2+pY2eNm36iJo9VQSK0yMVx
sfrOK+6sdT+axgT+DX4tlF6uUU11BBM=
-----END CERTIFICATE-----
Generated at Thu Nov 21 12:09:59 2024 by rpki-client on console-fra.rpki-client.org