Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/845CD7822BAE11EEBBDE60494AD9E6FC.roa
File: 845CD7822BAE11EEBBDE60494AD9E6FC.roa (raw, json)
Hash identifier: MPpwN1AkAFZsoXXI4BtshY5bz+sEW4I+EweHrZ2eTsc=
Subject key identifier: 53:06:E8:A8:F0:C0:07:1F:37:33:20:DB:8A:4E:95:B7:6D:18:86:9E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 10DD
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/845CD7822BAE11EEBBDE60494AD9E6FC.roa
Signing time: Wed 26 Jul 2023 12:18:24 +0000
ROA not before: Wed 26 Jul 2023 12:18:19 +0000
ROA not after: Sat 26 Jul 2025 12:18:19 +0000
asID: 174
IP address blocks: 154.127.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4317 (0x10dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 26 12:18:19 2023 GMT
Not After : Jul 26 12:18:19 2025 GMT
Subject: CN=64c10f10-987c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:31:8f:ae:1c:0c:e1:0b:56:1c:a3:f6:11:3a:
bb:36:37:00:3f:c3:e9:6f:e0:c2:f6:bf:cb:ea:46:
5d:a7:54:f5:90:6f:00:ff:18:6c:bc:e5:4f:b9:43:
39:6e:70:48:20:54:5f:26:91:70:57:f4:2e:bd:8b:
33:30:9d:a8:4b:34:e8:d2:95:58:37:cc:4d:05:b5:
31:85:f6:cc:9b:cd:f3:4d:c5:68:4b:0e:0b:d5:6d:
13:ea:52:ec:ad:a9:c8:81:c0:a9:d6:02:be:5e:34:
2f:0d:74:81:bf:8f:a0:c2:60:ff:6e:87:5c:2f:c3:
80:7d:e7:d7:d0:c2:b2:d9:72:ab:bb:9d:2d:a6:7d:
e7:82:ce:22:ea:75:bc:b6:a0:30:f4:2f:bd:a7:c5:
9f:40:b7:87:39:40:37:f5:61:f0:ff:2e:97:55:ff:
ab:66:9b:2b:08:ab:86:32:f7:1a:0a:c0:b0:4b:2b:
44:33:b9:9e:1c:d7:f0:7d:18:e4:f3:67:21:73:a4:
e4:73:1f:aa:46:fb:5b:b5:77:a8:0e:9e:4f:0b:f9:
ae:c6:7f:f3:8b:ff:1a:62:35:93:e0:70:17:0a:25:
e6:3e:23:72:95:8a:f4:96:80:13:f3:70:77:7a:ab:
08:5d:15:28:31:dc:ba:8f:85:b6:27:84:66:03:c1:
8d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:06:E8:A8:F0:C0:07:1F:37:33:20:DB:8A:4E:95:B7:6D:18:86:9E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/845CD7822BAE11EEBBDE60494AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.60.0/24
Signature Algorithm: sha256WithRSAEncryption
35:9d:bf:ad:94:89:aa:4a:3f:6d:00:b0:4b:65:73:d4:42:15:
d4:17:8a:16:58:83:98:87:96:0d:dc:d3:45:96:3a:74:48:c1:
ba:44:c3:fc:7b:38:4b:d8:97:a3:80:8c:5d:05:e9:b1:76:de:
f1:e7:0d:9f:e0:8b:32:86:90:13:3b:7a:fa:bc:ac:d4:7e:36:
be:32:6e:a4:bb:2d:19:e9:34:7b:04:04:b2:07:ea:88:d9:47:
5b:9b:5d:24:9b:68:52:1c:d6:5f:83:2d:35:a2:96:82:90:db:
2d:dd:53:ae:38:0e:45:5d:3e:5e:06:9f:29:3c:18:a4:e8:05:
30:70:27:c6:e2:d4:31:4c:e4:64:33:2f:80:cd:3d:58:6b:66:
4d:01:39:72:d6:17:b7:7c:18:66:52:a4:8b:02:5b:11:e9:c2:
b2:dd:21:78:10:b4:09:0b:a7:28:91:c9:38:68:24:22:19:a5:
c4:26:bf:1a:b7:25:9c:be:33:75:a7:88:50:c2:5d:47:e8:38:
d6:2b:38:b8:1f:11:1b:75:26:9b:8f:73:6c:66:07:28:3b:31:
04:05:8d:36:50:1b:d9:f0:6f:ed:e0:3d:57:b8:97:b1:4d:47:
b2:4c:6d:84:81:2c:e3:01:fe:b3:21:8b:81:2a:12:7a:6d:34:
1b:2b:a3:43
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEN0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA3MjYxMjE4MTlaFw0yNTA3MjYxMjE4MTlaMBgxFjAU
BgNVBAMTDTY0YzEwZjEwLTk4N2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDOMY+uHAzhC1Yco/YROrs2NwA/w+lv4ML2v8vqRl2nVPWQbwD/GGy85U+5
QzlucEggVF8mkXBX9C69izMwnahLNOjSlVg3zE0FtTGF9sybzfNNxWhLDgvVbRPq
UuytqciBwKnWAr5eNC8NdIG/j6DCYP9uh1wvw4B959fQwrLZcqu7nS2mfeeCziLq
dby2oDD0L72nxZ9At4c5QDf1YfD/LpdV/6tmmysIq4Yy9xoKwLBLK0QzuZ4c1/B9
GOTzZyFzpORzH6pG+1u1d6gOnk8L+a7Gf/OL/xpiNZPgcBcKJeY+I3KVivSWgBPz
cHd6qwhdFSgx3LqPhbYnhGYDwY1xAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUUwbo
qPDABx83MyDbik6Vt20Yhp4wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4Lzg0NUNENzgyMkJBRTExRUVCQkRFNjA0OTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACafzwwDQYJKoZIhvcNAQEL
BQADggEBADWdv62UiapKP20AsEtlc9RCFdQXihZYg5iHlg3c00WWOnRIwbpEw/x7
OEvYl6OAjF0F6bF23vHnDZ/gizKGkBM7evq8rNR+Nr4ybqS7LRnpNHsEBLIH6ojZ
R1ubXSSbaFIc1l+DLTWiloKQ2y3dU644DkVdPl4Gnyk8GKToBTBwJ8bi1DFM5GQz
L4DNPVhrZk0BOXLWF7d8GGZSpIsCWxHpwrLdIXgQtAkLpyiRyThoJCIZpcQmvxq3
JZy+M3WniFDCXUfoONYrOLgfERt1JpuPc2xmByg7MQQFjTZQG9nwb+3gPVe4l7FN
R7JMbYSBLOMB/rMhi4EqEnptNBsro0M=
-----END CERTIFICATE-----
Generated at Sat Aug 26 10:01:26 2023 by rpki-client on console-ams.rpki-client.org