Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A4AFEDECE7C011EFBCB7A66A762E951A.roa
File: A4AFEDECE7C011EFBCB7A66A762E951A.roa (raw, json)
Hash identifier: ExGk4HwBSMh7MXSlUdI4sJNf12SUH/3hF+aeyYBhpw0=
Subject key identifier: F1:38:4F:17:AB:8B:27:D5:F6:E0:4D:BA:4D:D6:42:7C:58:12:08:B5
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 13AE
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A4AFEDECE7C011EFBCB7A66A762E951A.roa
Signing time: Mon 10 Feb 2025 15:06:46 +0000
ROA not before: Mon 10 Feb 2025 15:06:39 +0000
ROA not after: Wed 10 Feb 2027 15:06:39 +0000
asID: 834
IP address blocks: 102.129.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Feb 2025 17:34:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5038 (0x13ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 10 15:06:39 2025 GMT
Not After : Feb 10 15:06:39 2027 GMT
Subject: CN=67aa1605-d0f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:82:5c:8b:18:d2:63:1e:d5:79:ab:c4:e6:1b:
92:37:d6:59:e5:f1:50:ed:16:19:6e:2d:6f:21:bf:
3a:b1:ab:c1:17:6b:98:b6:5f:4f:dd:61:01:c7:0d:
97:46:36:ac:df:51:8f:6c:30:33:53:5d:2a:63:39:
23:38:e2:05:d3:6c:a5:03:bc:ef:d4:06:68:c2:b9:
9a:71:86:82:53:ea:40:18:3e:c2:01:d4:9d:13:90:
93:a5:51:1e:83:79:a7:ea:6d:57:2b:dd:b1:5b:f4:
0c:0e:cf:f6:a8:69:b8:39:ca:14:4d:e8:a7:3d:27:
c3:28:2d:af:84:b2:67:b3:aa:89:ab:db:62:ac:e8:
18:da:13:85:f8:cc:86:3a:ed:35:78:6e:53:1b:21:
b8:81:24:ac:7b:8b:a5:18:23:f3:4d:cb:b1:a2:ae:
97:0d:02:90:ee:eb:cf:d3:c7:e4:23:55:95:3d:55:
da:4a:47:53:ac:ff:c8:f5:80:b3:53:4f:2f:02:00:
31:21:15:1e:73:6e:c6:d6:4e:82:53:0b:11:11:61:
48:a3:6a:38:19:44:61:18:6f:9b:7e:29:32:96:51:
15:87:88:35:e2:9b:e1:25:4c:bb:55:c9:3a:68:e2:
fa:2d:dd:5f:70:d1:82:d3:7a:38:27:97:6e:58:f5:
5e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:38:4F:17:AB:8B:27:D5:F6:E0:4D:BA:4D:D6:42:7C:58:12:08:B5
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A4AFEDECE7C011EFBCB7A66A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.248.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:e6:27:f0:97:62:2a:f8:5f:9c:cb:a0:a1:92:3f:15:17:08:
76:a1:e7:c8:5a:b4:c5:25:c2:23:31:fb:3e:a2:c9:5c:db:99:
5e:da:06:fb:79:a9:2e:41:e7:2e:b0:65:ab:1d:ff:91:05:fc:
17:7a:3e:b3:99:9a:0e:64:4a:02:c3:17:05:91:dd:2e:03:b9:
b6:35:7d:ae:0e:ec:f9:23:f9:db:78:5a:41:8b:d0:fc:f7:8f:
09:1c:6a:0b:dc:86:79:a9:64:4d:ed:27:31:3f:67:f1:be:1e:
09:f6:e3:60:a6:9b:6c:04:fd:c0:d5:14:a0:75:c5:f4:57:97:
8f:74:a6:26:71:cd:d2:57:53:ce:75:32:f2:91:e7:de:9f:34:
dd:da:87:e5:26:c5:33:fd:44:8e:68:cd:7a:ae:90:18:c8:05:
7c:dc:6a:33:43:bf:ed:5d:b5:be:df:a8:94:08:8e:91:e8:8f:
55:93:79:a1:44:f3:f2:8a:4c:9b:1c:65:ee:32:70:48:d7:a8:
1d:68:6a:a2:5d:da:19:66:28:b6:db:be:f0:e7:c8:f5:87:18:
21:83:03:aa:d7:ca:f7:2a:c5:f2:4a:66:e2:0f:7e:95:9d:8f:
36:30:2a:d3:d8:94:44:72:30:af:96:92:55:25:68:2f:60:a7:
28:ac:47:cf
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICE64wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNTAyMTAxNTA2MzlaFw0yNzAyMTAxNTA2MzlaMBgxFjAU
BgNVBAMTDTY3YWExNjA1LWQwZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPglyLGNJjHtV5q8TmG5I31lnl8VDtFhluLW8hvzqxq8EXa5i2X0/dYQHH
DZdGNqzfUY9sMDNTXSpjOSM44gXTbKUDvO/UBmjCuZpxhoJT6kAYPsIB1J0TkJOl
UR6DeafqbVcr3bFb9AwOz/aoabg5yhRN6Kc9J8MoLa+Esmezqomr22Ks6BjaE4X4
zIY67TV4blMbIbiBJKx7i6UYI/NNy7GirpcNApDu68/Tx+QjVZU9VdpKR1Os/8j1
gLNTTy8CADEhFR5zbsbWToJTCxERYUijajgZRGEYb5t+KTKWURWHiDXim+ElTLtV
yTpo4vot3V9w0YLTejgnl25Y9V6xAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU8ThP
F6uLJ9X24E26TdZCfFgSCLUwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0E0QUZFREVDRTdDMDExRUZCQ0I3QTY2QTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgfgwDQYJKoZIhvcNAQEL
BQADggEBALjmJ/CXYir4X5zLoKGSPxUXCHah58hatMUlwiMx+z6iyVzbmV7aBvt5
qS5B5y6wZasd/5EF/Bd6PrOZmg5kSgLDFwWR3S4DubY1fa4O7Pkj+dt4WkGL0Pz3
jwkcagvchnmpZE3tJzE/Z/G+Hgn242Cmm2wE/cDVFKB1xfRXl490piZxzdJXU851
MvKR596fNN3ah+UmxTP9RI5ozXqukBjIBXzcajNDv+1dtb7fqJQIjpHoj1WTeaFE
8/KKTJscZe4ycEjXqB1oaqJd2hlmKLbbvvDnyPWHGCGDA6rXyvcqxfJKZuIPfpWd
jzYwKtPYlERyMK+WklUlaC9gpyisR88=
-----END CERTIFICATE-----
Generated at Sun Feb 16 03:49:41 2025 by rpki-client on console.sobornost.net