Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FD32FE923E8911ED9BF37AE0F1222468.roa
File: FD32FE923E8911ED9BF37AE0F1222468.roa (raw, json)
Hash identifier: G8o/BRVrl4BuC94W2YMXZ08eScetpjv4DA3UL3uUNPo=
Subject key identifier: BF:D8:ED:59:98:0C:B2:C1:F3:33:26:CD:D7:82:C0:AA:9F:9B:97:AA
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 080D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FD32FE923E8911ED9BF37AE0F1222468.roa
Signing time: Tue 27 Sep 2022 17:29:50 +0000
ROA not before: Tue 27 Sep 2022 17:29:46 +0000
ROA not after: Mon 30 Sep 2024 17:29:46 +0000
asID: 212238
IP address blocks: 102.129.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Sep 2024 08:14:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2061 (0x80d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 27 17:29:46 2022 GMT
Not After : Sep 30 17:29:46 2024 GMT
Subject: CN=6333330e-8bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:7d:52:60:68:fc:3c:da:0a:df:88:10:4f:
7d:2e:ea:d5:d4:08:bb:f7:ec:8a:38:26:f1:f8:87:
08:90:73:f5:1b:67:a8:fc:02:a1:ad:db:0b:db:1b:
15:a5:fb:e7:38:b6:b0:0a:1d:48:53:4a:0c:e3:8a:
1f:6e:24:33:ee:23:c6:46:2c:4b:ab:4e:db:17:70:
df:58:47:02:d2:48:db:a0:4c:61:8f:01:33:b3:f6:
e9:09:26:08:c4:93:5d:a1:cc:80:d1:6f:87:a9:d4:
4c:a7:a0:99:14:b5:20:16:77:0d:a4:eb:3b:a7:d9:
5d:35:e5:fa:97:c6:46:3f:e3:a6:a4:a4:6c:87:11:
7d:5c:ed:c1:0c:91:b4:f6:5b:fe:9d:e3:16:89:39:
f4:4a:81:11:8d:a3:b2:2e:8c:69:7d:51:aa:27:a1:
9d:fc:1a:5e:68:ee:d6:91:4e:a4:7c:c8:8b:12:10:
80:de:b2:21:a2:74:7d:06:c6:33:f2:9d:58:47:0e:
60:f3:14:eb:90:19:eb:93:6e:73:8e:75:ca:79:ba:
9f:19:a0:89:92:b9:ff:8f:cc:de:7f:ad:af:7c:3c:
e6:48:3c:3b:d9:a9:07:5b:e3:ae:8c:b1:2c:e7:9a:
ea:8d:97:3a:48:76:bb:1b:3d:cc:4b:d2:f6:3f:52:
ba:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D8:ED:59:98:0C:B2:C1:F3:33:26:CD:D7:82:C0:AA:9F:9B:97:AA
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FD32FE923E8911ED9BF37AE0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.239.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:b4:71:4c:c8:a9:5b:90:89:b7:18:42:a9:d0:b6:13:95:ac:
d0:ef:dc:99:e4:f9:13:ba:80:9a:dc:e1:64:78:d1:3d:ab:03:
91:7d:c1:21:36:aa:b8:65:66:ec:94:97:7f:2a:3a:7e:c7:a6:
77:b8:55:66:4d:70:1c:36:36:04:a6:54:be:4f:fd:ca:f2:c3:
fe:de:e7:ba:e6:9a:40:ff:d4:bb:2a:c3:46:e3:ce:72:58:2b:
1a:eb:41:7d:ac:55:23:9d:6d:1c:d3:c8:a1:a2:18:46:3d:b2:
6b:5a:8b:ed:6e:84:67:6b:18:e0:c1:bf:5f:0b:e8:5e:4b:b4:
3c:af:2e:13:05:90:ca:97:b9:3a:5f:b2:7b:ce:65:9f:d1:86:
85:66:0e:41:ac:b9:a9:45:d4:8c:7d:67:3c:a6:96:03:91:74:
d2:2f:41:f7:84:31:6f:d3:cd:bf:3a:32:d9:9d:34:11:4c:75:
47:a1:59:03:0e:ac:cc:ee:33:67:78:05:4b:b4:2a:de:f9:69:
6f:ae:e8:8f:7f:25:3b:cc:96:76:52:2d:a6:36:a5:56:ac:e8:
13:a4:71:35:3f:c4:e2:95:a6:f9:b1:cc:30:9f:f6:22:7c:f1:
80:33:b0:81:71:4b:c5:8b:5f:29:c0:fe:8e:ed:a1:5e:f5:ed:
18:f5:9f:e7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCA0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMjA5MjcxNzI5NDZaFw0yNDA5MzAxNzI5NDZaMBgxFjAU
BgNVBAMMDTYzMzMzMzBlLThiZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/OX1SYGj8PNoK34gQT30u6tXUCLv37Io4JvH4hwiQc/UbZ6j8AqGt2wvb
GxWl++c4trAKHUhTSgzjih9uJDPuI8ZGLEurTtsXcN9YRwLSSNugTGGPATOz9ukJ
JgjEk12hzIDRb4ep1EynoJkUtSAWdw2k6zun2V015fqXxkY/46akpGyHEX1c7cEM
kbT2W/6d4xaJOfRKgRGNo7IujGl9UaonoZ38Gl5o7taRTqR8yIsSEIDesiGidH0G
xjPynVhHDmDzFOuQGeuTbnOOdcp5up8ZoImSuf+PzN5/ra98POZIPDvZqQdb466M
sSznmuqNlzpIdrsbPcxL0vY/UrrJAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUv9jt
WZgMssHzMybN14LAqp+bl6owHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0ZEMzJGRTkyM0U4OTExRUQ5QkYzN0FFMEYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmge8wDQYJKoZIhvcNAQEL
BQADggEBAL+0cUzIqVuQibcYQqnQthOVrNDv3Jnk+RO6gJrc4WR40T2rA5F9wSE2
qrhlZuyUl38qOn7Hpne4VWZNcBw2NgSmVL5P/cryw/7e57rmmkD/1Lsqw0bjznJY
KxrrQX2sVSOdbRzTyKGiGEY9smtai+1uhGdrGODBv18L6F5LtDyvLhMFkMqXuTpf
snvOZZ/RhoVmDkGsualF1Ix9ZzymlgORdNIvQfeEMW/Tzb86MtmdNBFMdUehWQMO
rMzuM2d4BUu0Kt75aW+u6I9/JTvMlnZSLaY2pVas6BOkcTU/xOKVpvmxzDCf9iJ8
8YAzsIFxS8WLXynA/o7toV717Rj1n+c=
-----END CERTIFICATE-----
Generated at Wed Sep 18 12:51:51 2024 by rpki-client on console-fra.rpki-client.org