Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F4594DE2ED5511ECAE2210DCF1222468.roa
File: F4594DE2ED5511ECAE2210DCF1222468.roa (raw, json)
Hash identifier: QyiTFwKfDzRhEBx6fhPhgU++FTyuPUo9e5T3UGx3UPY=
Subject key identifier: BC:7D:B0:FF:A5:D7:11:25:73:85:59:6E:58:35:C2:A5:06:C6:BB:89
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 089F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F4594DE2ED5511ECAE2210DCF1222468.roa
Signing time: Thu 16 Jun 2022 09:23:17 +0000
ROA not before: Thu 16 Jun 2022 09:23:13 +0000
ROA not after: Sun 16 Jun 2024 09:23:13 +0000
asID: 40676
IP address blocks: 154.16.23.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2207 (0x89f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 16 09:23:13 2022 GMT
Not After : Jun 16 09:23:13 2024 GMT
Subject: CN=62aaf685-74ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5b:d3:83:08:6d:ce:40:4a:43:1a:4e:a6:9b:
d1:c7:bc:cb:b3:96:c8:f0:a0:f3:b8:c7:bd:f2:00:
f4:4f:b1:cf:76:89:0d:4f:85:5c:7f:55:32:dc:33:
d6:e7:55:0b:8f:42:ca:1f:f4:50:fd:1b:83:99:d2:
86:85:52:6e:45:92:82:a5:e5:b6:eb:3d:d6:9e:a1:
df:aa:6c:39:2c:07:6c:67:df:96:2b:67:17:0f:db:
17:22:6d:93:08:70:d5:a0:c9:1b:f5:51:ae:35:63:
f9:8d:6c:93:68:d4:b0:9f:b6:86:d0:9c:ef:d7:85:
b5:cc:ad:f6:33:1a:7f:83:13:6b:81:c5:ab:4c:1f:
16:a3:06:c0:f9:2a:5e:16:a2:7b:c1:4c:27:a1:fb:
17:7b:f6:34:01:33:c8:d5:58:9f:11:cc:f3:e6:b4:
fe:8e:1c:6e:90:3c:09:f9:6e:b1:0c:0b:a3:c5:0f:
5d:09:d3:b8:51:ed:3f:c4:f8:61:54:65:95:56:cb:
e0:a8:8a:9c:02:68:f2:a3:2a:4f:ee:fc:17:4f:81:
4f:3b:44:ef:fe:26:de:fb:3f:45:1c:7e:83:81:19:
a4:b6:12:00:9b:11:de:32:ee:d1:b1:65:9e:9f:4b:
7c:38:4f:89:60:8b:fe:98:c0:0b:69:e3:3d:ac:3c:
73:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7D:B0:FF:A5:D7:11:25:73:85:59:6E:58:35:C2:A5:06:C6:BB:89
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F4594DE2ED5511ECAE2210DCF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.23.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:b5:03:b1:de:56:bf:f4:e8:85:5f:3d:b8:56:59:1a:61:fd:
be:42:07:b5:1a:cf:e4:05:dc:53:75:3a:e1:da:ea:d4:41:a5:
d3:a4:67:b2:26:df:1b:54:87:8f:cc:41:ad:86:ed:e5:01:8e:
00:51:77:ff:d7:e3:12:45:2d:af:3d:c4:c6:af:6f:2a:e9:6e:
95:25:27:3a:ca:a4:dd:01:c4:87:a7:24:71:56:df:39:09:5b:
08:02:08:49:a2:19:dc:83:ca:d9:16:36:24:0d:6a:78:b8:2d:
d9:47:91:95:b5:0e:c2:45:f6:22:ec:99:51:20:01:e1:0f:41:
2c:15:3d:86:36:b6:13:bd:66:a0:fb:e5:ba:9d:67:f6:d9:c4:
c2:07:50:e5:b7:94:7a:04:ca:e1:20:ab:29:9b:65:f3:ab:5b:
90:2e:38:bf:16:ff:1a:e5:e9:f3:3a:6c:aa:12:9a:39:bb:70:
05:32:5c:93:2f:37:07:bf:9a:50:f8:27:57:33:17:5a:de:d7:
67:93:32:29:99:64:49:90:4b:8b:f9:15:ff:2e:0c:77:d1:69:
6b:41:fc:16:0c:b8:8e:de:0e:af:c6:fc:7e:62:32:4d:ca:70:
aa:d8:e6:cc:d8:ff:a4:35:f1:df:64:ee:8c:6b:08:81:eb:22:
3f:c1:36:51
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCJ8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMjA2MTYwOTIzMTNaFw0yNDA2MTYwOTIzMTNaMBgxFjAU
BgNVBAMMDTYyYWFmNjg1LTc0YWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCcW9ODCG3OQEpDGk6mm9HHvMuzlsjwoPO4x73yAPRPsc92iQ1PhVx/VTLc
M9bnVQuPQsof9FD9G4OZ0oaFUm5FkoKl5bbrPdaeod+qbDksB2xn35YrZxcP2xci
bZMIcNWgyRv1Ua41Y/mNbJNo1LCftobQnO/XhbXMrfYzGn+DE2uBxatMHxajBsD5
Kl4WonvBTCeh+xd79jQBM8jVWJ8RzPPmtP6OHG6QPAn5brEMC6PFD10J07hR7T/E
+GFUZZVWy+CoipwCaPKjKk/u/BdPgU87RO/+Jt77P0UcfoOBGaS2EgCbEd4y7tGx
ZZ6fS3w4T4lgi/6YwAtp4z2sPHNNAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUvH2w
/6XXESVzhVluWDXCpQbGu4kwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0Y0NTk0REUyRUQ1NTExRUNBRTIyMTBEQ0YxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEBcwDQYJKoZIhvcNAQEL
BQADggEBAJ+1A7HeVr/06IVfPbhWWRph/b5CB7Uaz+QF3FN1OuHa6tRBpdOkZ7Im
3xtUh4/MQa2G7eUBjgBRd//X4xJFLa89xMavbyrpbpUlJzrKpN0BxIenJHFW3zkJ
WwgCCEmiGdyDytkWNiQNani4LdlHkZW1DsJF9iLsmVEgAeEPQSwVPYY2thO9ZqD7
5bqdZ/bZxMIHUOW3lHoEyuEgqymbZfOrW5AuOL8W/xrl6fM6bKoSmjm7cAUyXJMv
Nwe/mlD4J1czF1re12eTMimZZEmQS4v5Ff8uDHfRaWtB/BYMuI7eDq/G/H5iMk3K
cKrY5szY/6Q18d9k7oxrCIHrIj/BNlE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org