Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FD85358AB1AB11EFAB0EFB55762E951A.roa
File: FD85358AB1AB11EFAB0EFB55762E951A.roa (raw, json)
Hash identifier: nGir+wO/jCbbwn6u+an1KUUVPfNyCQxPkQCBlQgTzhc=
Subject key identifier: 0A:19:1D:78:19:50:CD:51:5F:6B:BA:B6:6A:36:86:90:A3:97:05:D1
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1307
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FD85358AB1AB11EFAB0EFB55762E951A.roa
Signing time: Tue 03 Dec 2024 19:22:52 +0000
ROA not before: Tue 03 Dec 2024 19:22:48 +0000
ROA not after: Thu 03 Dec 2026 19:22:48 +0000
asID: 212238
IP address blocks: 102.129.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Mar 2025 07:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4871 (0x1307)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Dec 3 19:22:48 2024 GMT
Not After : Dec 3 19:22:48 2026 GMT
Subject: CN=674f5a8c-8a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:42:65:38:33:45:09:a2:2e:45:a0:59:38:b9:
df:c1:a4:14:7f:95:a4:8d:03:df:9a:fc:19:02:fb:
ea:45:ee:7b:4e:b5:d6:0c:8f:81:9a:a7:db:6c:4b:
e9:5b:ae:89:15:7c:2d:46:9c:ab:36:cb:ef:a9:b4:
ae:b1:79:c5:33:91:c9:f8:d8:f0:5b:5e:75:2f:d4:
50:2a:d3:98:a2:a5:6f:11:bd:b5:d8:c6:93:ce:c9:
a7:47:75:89:e6:8a:a5:37:51:5a:a6:5d:9e:18:74:
d2:cd:c0:d3:73:e1:97:13:00:38:4f:fe:c8:e0:fb:
67:57:0b:c3:1f:16:b4:f9:60:b2:25:8a:33:c5:1c:
f7:56:78:f1:3a:aa:23:20:63:e6:06:4a:8e:88:08:
b8:8f:d0:ff:2f:57:21:80:24:02:f2:b1:1b:cd:10:
03:51:6b:b7:ef:7e:2e:6f:e5:91:5f:21:98:82:36:
07:d5:c6:e3:90:53:01:f6:6d:d2:b0:9f:23:23:9f:
dc:32:e4:8c:c3:29:b1:2a:56:57:5e:b0:f0:04:3d:
c4:20:5b:0c:a2:27:a3:88:e8:9c:1e:8e:6a:f4:52:
e6:ee:6c:02:c1:9b:fc:5e:44:3f:58:00:46:cc:0c:
92:0b:28:cf:7b:a1:ca:d1:c4:1c:74:6a:7a:e1:7e:
4a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:19:1D:78:19:50:CD:51:5F:6B:BA:B6:6A:36:86:90:A3:97:05:D1
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FD85358AB1AB11EFAB0EFB55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.128.0/24
Signature Algorithm: sha256WithRSAEncryption
63:5c:a6:2f:32:6a:5d:ed:94:84:ea:7a:6d:ef:33:6b:ce:da:
62:60:ec:fc:a2:ab:ea:fb:57:60:66:23:fc:d6:3e:37:28:67:
c6:bc:2e:13:25:31:fd:66:2b:70:c4:ce:6a:00:f7:c2:c7:33:
dd:e0:13:08:96:55:d5:ec:8e:a8:d9:9d:ea:89:20:0a:7e:f1:
29:eb:cd:23:6f:b1:3c:21:b2:17:a8:ad:10:9f:86:28:b5:fb:
63:67:f5:53:d1:41:82:b5:a3:05:9b:f5:78:27:36:e0:d1:4f:
f7:a1:64:0d:53:03:7f:cc:4d:55:c5:2f:63:27:6b:74:7c:a5:
c6:05:2a:52:34:32:e6:35:8a:0d:df:d9:bd:c4:6f:f0:0e:c9:
14:b6:71:ab:2d:78:52:ab:be:2b:bb:8a:b9:85:62:56:92:6e:
b4:3b:52:2c:7a:62:9d:7a:83:de:a4:71:c6:fa:18:f4:5c:31:
4a:04:96:5b:15:85:e2:d1:e0:06:5b:f6:55:c2:b4:47:e5:1e:
de:d9:31:c7:41:84:a6:2a:f4:7e:9b:90:b2:29:91:52:b7:98:
f3:81:72:56:5c:5d:5a:f5:39:61:5a:18:cd:9e:50:4b:45:41:
34:2f:f7:7a:38:05:2f:5c:aa:47:23:e3:fb:74:d8:d2:fa:a6:
b9:61:16:db
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEwcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNDEyMDMxOTIyNDhaFw0yNjEyMDMxOTIyNDhaMBgxFjAU
BgNVBAMTDTY3NGY1YThjLThhMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrQmU4M0UJoi5FoFk4ud/BpBR/laSNA9+a/BkC++pF7ntOtdYMj4Gap9ts
S+lbrokVfC1GnKs2y++ptK6xecUzkcn42PBbXnUv1FAq05iipW8RvbXYxpPOyadH
dYnmiqU3UVqmXZ4YdNLNwNNz4ZcTADhP/sjg+2dXC8MfFrT5YLIlijPFHPdWePE6
qiMgY+YGSo6ICLiP0P8vVyGAJALysRvNEANRa7fvfi5v5ZFfIZiCNgfVxuOQUwH2
bdKwnyMjn9wy5IzDKbEqVldesPAEPcQgWwyiJ6OI6Jwejmr0UububALBm/xeRD9Y
AEbMDJILKM97ocrRxBx0anrhfkprAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUChkd
eBlQzVFfa7q2ajaGkKOXBdEwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0ZEODUzNThBQjFBQjExRUZBQjBFRkI1NTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgYAwDQYJKoZIhvcNAQEL
BQADggEBAGNcpi8yal3tlITqem3vM2vO2mJg7Pyiq+r7V2BmI/zWPjcoZ8a8LhMl
Mf1mK3DEzmoA98LHM93gEwiWVdXsjqjZneqJIAp+8SnrzSNvsTwhsheorRCfhii1
+2Nn9VPRQYK1owWb9XgnNuDRT/ehZA1TA3/MTVXFL2Mna3R8pcYFKlI0MuY1ig3f
2b3Eb/AOyRS2casteFKrviu7irmFYlaSbrQ7Uix6Yp16g96kccb6GPRcMUoEllsV
heLR4AZb9lXCtEflHt7ZMcdBhKYq9H6bkLIpkVK3mPOBclZcXVr1OWFaGM2eUEtF
QTQv93o4BS9cqkcj4/t02NL6prlhFts=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:46 2025 by rpki-client