Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F2C1236A059611EE96BE310E4AD9E6FC.roa
File: F2C1236A059611EE96BE310E4AD9E6FC.roa (raw, json)
Hash identifier: iAxqyt15PPkkKybcknQ0Cz0iU7XFCH/rQJPf2tzurHk=
Subject key identifier: 96:B5:55:29:0E:02:1E:42:A7:31:5B:36:D9:71:51:5D:1A:B2:53:C8
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0BE4
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F2C1236A059611EE96BE310E4AD9E6FC.roa
Signing time: Thu 08 Jun 2023 00:53:57 +0000
ROA not before: Thu 08 Jun 2023 00:00:53 +0000
ROA not after: Sat 07 Jun 2025 00:00:53 +0000
asID: 834
IP address blocks: 102.129.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Jun 2023 16:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3044 (0xbe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 8 00:00:53 2023 GMT
Not After : Jun 7 00:00:53 2025 GMT
Subject: CN=648126a5-b5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:89:4d:e3:e3:31:ca:1e:72:21:d5:f2:41:3e:
9c:be:72:2f:82:6c:90:bc:df:85:3e:30:58:c9:ee:
3e:cc:1b:98:8a:c8:b1:4d:25:84:95:36:3d:ec:83:
d2:fa:b1:0c:0c:b1:a7:2b:47:af:d6:77:eb:b9:89:
5b:29:f9:c0:2e:7a:4a:4d:b8:5f:50:eb:b4:4f:69:
8b:d8:56:b9:5d:a6:5c:db:3a:72:83:da:bc:59:8c:
20:9b:77:cf:4d:c3:18:a6:22:f6:87:59:32:fd:3a:
84:58:8a:05:e4:47:8b:7d:12:f1:4b:5a:22:32:f1:
eb:9d:84:80:55:59:04:c7:15:41:93:de:94:16:d8:
3c:4e:69:99:83:cf:7b:53:b6:b4:3e:41:fb:e0:ce:
9c:16:41:ee:dd:f6:e7:8c:73:71:27:ae:50:72:19:
1a:bd:09:db:0b:dd:8d:cc:29:6d:e7:6a:d6:23:09:
96:bc:0c:a3:1d:f2:9b:51:d2:02:31:1e:36:57:18:
55:73:44:2e:0f:02:f7:01:dc:fa:c6:05:1c:f7:cc:
d0:79:0a:81:23:38:33:eb:98:be:ea:30:01:af:4f:
6f:e1:f7:a0:2b:7c:c2:b8:3e:68:57:53:3b:52:80:
ea:3f:fd:5e:0e:c3:1f:82:1d:3b:4f:b0:45:95:06:
1c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B5:55:29:0E:02:1E:42:A7:31:5B:36:D9:71:51:5D:1A:B2:53:C8
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F2C1236A059611EE96BE310E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.246.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:98:a5:07:c0:55:41:45:52:84:f9:cf:b9:39:41:d3:17:1b:
1b:3c:2f:c3:64:c9:f9:d9:ed:90:9b:39:04:54:36:49:1b:07:
f6:ec:d8:0f:05:41:99:65:67:d4:ae:87:a8:e2:2b:4e:47:40:
ce:83:94:c8:f4:f8:6f:22:88:54:d0:f7:50:6e:fd:de:82:35:
e1:8d:44:90:85:eb:7a:38:6d:b2:46:2c:7d:a9:c6:68:0a:c3:
d9:be:b2:84:81:71:cc:c7:b2:f1:f5:56:01:dd:4c:42:46:a1:
4f:3b:40:1a:9a:bb:65:d1:ac:49:30:55:8d:95:f9:a5:9c:89:
02:a6:fa:86:d9:0a:4e:a6:df:55:2c:d5:42:3f:59:ed:62:82:
c3:7b:68:da:5d:31:21:a2:89:40:9a:db:5a:26:db:3a:98:85:
4e:ef:c5:9b:c2:46:cd:11:c9:1e:85:bc:43:04:71:9a:2e:09:
a6:7d:a7:98:4c:01:ec:13:e1:89:e7:8b:32:f9:8b:9b:7c:93:
63:eb:ea:bb:f4:b9:1e:1d:b8:5d:be:51:59:4d:2e:18:6e:86:
29:d3:1a:78:8a:79:14:da:3a:e8:a3:83:a6:cc:a5:66:e3:1d:
20:d2:4d:3c:88:c1:0b:15:d2:b7:05:bc:bf:ac:73:8a:1a:d2:
f0:ac:ff:10
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICC+QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzA2MDgwMDAwNTNaFw0yNTA2MDcwMDAwNTNaMBgxFjAU
BgNVBAMTDTY0ODEyNmE1LWI1ZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDViU3j4zHKHnIh1fJBPpy+ci+CbJC834U+MFjJ7j7MG5iKyLFNJYSVNj3s
g9L6sQwMsacrR6/Wd+u5iVsp+cAuekpNuF9Q67RPaYvYVrldplzbOnKD2rxZjCCb
d89NwximIvaHWTL9OoRYigXkR4t9EvFLWiIy8eudhIBVWQTHFUGT3pQW2DxOaZmD
z3tTtrQ+QfvgzpwWQe7d9ueMc3EnrlByGRq9CdsL3Y3MKW3natYjCZa8DKMd8ptR
0gIxHjZXGFVzRC4PAvcB3PrGBRz3zNB5CoEjODPrmL7qMAGvT2/h96ArfMK4PmhX
UztSgOo//V4Owx+CHTtPsEWVBhzlAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUlrVV
KQ4CHkKnMVs22XFRXRqyU8gwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0YyQzEyMzZBMDU5NjExRUU5NkJFMzEwRTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgfYwDQYJKoZIhvcNAQEL
BQADggEBAB6YpQfAVUFFUoT5z7k5QdMXGxs8L8NkyfnZ7ZCbOQRUNkkbB/bs2A8F
QZllZ9Suh6jiK05HQM6DlMj0+G8iiFTQ91Bu/d6CNeGNRJCF63o4bbJGLH2pxmgK
w9m+soSBcczHsvH1VgHdTEJGoU87QBqau2XRrEkwVY2V+aWciQKm+obZCk6m31Us
1UI/We1igsN7aNpdMSGiiUCa21om2zqYhU7vxZvCRs0RyR6FvEMEcZouCaZ9p5hM
AewT4YnnizL5i5t8k2Pr6rv0uR4duF2+UVlNLhhuhinTGniKeRTaOuijg6bMpWbj
HSDSTTyIwQsV0rcFvL+sc4oa0vCs/xA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:40 2024 by rpki-client on console-ams.rpki-client.org