Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/044EB38CB8F711ED90F0E7F0F1222468.roa
File: 044EB38CB8F711ED90F0E7F0F1222468.roa (raw, json)
Hash identifier: +LgfT8SgOIsyFIBVW5dcRtRI89eoY6kEAhUbQMFPNd4=
Subject key identifier: 27:12:3F:27:9A:6D:8D:EB:43:2B:64:FC:53:E5:DD:A5:2D:2E:FB:D3
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0CA3
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/044EB38CB8F711ED90F0E7F0F1222468.roa
Signing time: Thu 02 Mar 2023 12:37:39 +0000
ROA not before: Thu 02 Mar 2023 12:37:35 +0000
ROA not after: Sat 01 Mar 2025 12:37:35 +0000
asID: 61317
IP address blocks: 154.16.218.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3235 (0xca3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 2 12:37:35 2023 GMT
Not After : Mar 1 12:37:35 2025 GMT
Subject: CN=64009893-5c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:61:eb:8b:07:b7:92:26:33:e8:37:c8:34:88:
5e:64:71:cf:98:72:8a:d0:bc:5f:54:a7:2c:ea:50:
25:af:27:77:d5:bf:9d:ad:0d:18:44:84:6b:8d:cc:
ea:6e:8d:c7:08:d0:83:c8:e2:92:14:7f:9b:13:1e:
94:a2:f2:5e:0f:7d:de:5f:69:13:c0:cd:67:42:8a:
f5:d9:1b:df:80:ad:3e:df:7e:f3:8f:ac:db:92:b4:
cc:70:4f:d5:57:b1:a8:2c:94:31:83:64:ef:d4:aa:
39:ea:83:d1:32:80:c3:10:5e:1e:ce:8e:9b:61:7d:
0c:8d:b2:f7:bc:4f:4c:68:a5:d4:5c:93:8d:a9:c7:
52:1b:fb:ea:45:fa:78:b9:3e:e7:a1:c4:df:bb:d0:
87:67:55:71:99:63:ca:2c:c2:80:71:ae:73:21:ac:
49:4b:f3:4e:90:f0:5e:18:fb:37:b5:aa:54:7b:35:
49:9e:9f:63:b5:b5:83:0a:01:43:bc:bb:92:14:d3:
f1:f1:14:96:75:8e:1b:5b:ec:c5:30:63:97:b2:a7:
81:95:63:23:9b:2c:69:f8:d3:16:8a:79:9d:70:47:
46:9e:37:e8:39:a4:02:bb:f0:d9:ec:86:7f:90:5e:
49:a1:20:15:97:2b:46:e7:8b:b0:7a:94:b5:69:d0:
53:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:12:3F:27:9A:6D:8D:EB:43:2B:64:FC:53:E5:DD:A5:2D:2E:FB:D3
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/044EB38CB8F711ED90F0E7F0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.218.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:ab:d7:99:2d:c5:ed:2b:93:0f:c8:ca:77:97:22:0d:6c:20:
ea:d9:63:e3:11:21:6a:d5:9a:77:2e:89:83:6f:96:12:a8:50:
04:98:03:d1:01:76:bf:16:a9:c4:18:36:d5:ff:26:24:12:c4:
25:1f:65:64:3f:c2:59:ce:e1:7f:88:d9:ee:f0:c7:f5:0d:77:
2f:a0:02:56:03:e4:42:a6:f0:55:bf:64:dd:d3:ec:dc:f8:84:
f1:8c:fe:8a:7c:58:4b:cb:d3:cf:e9:f2:18:c4:aa:c9:4f:d3:
58:1e:1a:6c:1b:4d:a3:1d:f4:fd:86:8d:ac:5b:0d:be:56:40:
bb:73:a6:33:20:22:74:a7:ea:2b:7c:30:4b:e6:82:83:d4:f7:
9a:b7:cf:ed:ce:de:55:0c:a5:fb:4b:20:29:9c:da:47:35:04:
43:60:82:5d:25:a8:29:aa:e7:86:0e:7a:36:9e:f6:a4:73:36:
25:63:7d:82:4a:de:59:46:32:12:67:c5:fd:b6:86:f1:51:3d:
05:9a:fe:31:b3:64:e8:9d:1c:80:28:f4:4b:51:a4:af:d6:b6:
30:ca:3f:d3:43:18:4a:0c:6e:b8:a9:61:03:41:8a:8d:b3:24:
bf:5c:21:fa:9a:37:55:92:7c:a3:3f:58:90:d8:31:2f:3e:d5:
33:0f:34:7c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDKMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzAzMDIxMjM3MzVaFw0yNTAzMDExMjM3MzVaMBgxFjAU
BgNVBAMMDTY0MDA5ODkzLTVjNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD2YeuLB7eSJjPoN8g0iF5kcc+YcorQvF9UpyzqUCWvJ3fVv52tDRhEhGuN
zOpujccI0IPI4pIUf5sTHpSi8l4Pfd5faRPAzWdCivXZG9+ArT7ffvOPrNuStMxw
T9VXsagslDGDZO/Uqjnqg9EygMMQXh7OjpthfQyNsve8T0xopdRck42px1Ib++pF
+ni5PuehxN+70IdnVXGZY8oswoBxrnMhrElL806Q8F4Y+ze1qlR7NUmen2O1tYMK
AUO8u5IU0/HxFJZ1jhtb7MUwY5eyp4GVYyObLGn40xaKeZ1wR0aeN+g5pAK78Nns
hn+QXkmhIBWXK0bni7B6lLVp0FPTAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUJxI/
J5ptjetDK2T8U+XdpS0u+9MwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzA0NEVCMzhDQjhGNzExRUQ5MEYwRTdGMEYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaENowDQYJKoZIhvcNAQEL
BQADggEBALCr15ktxe0rkw/IyneXIg1sIOrZY+MRIWrVmncuiYNvlhKoUASYA9EB
dr8WqcQYNtX/JiQSxCUfZWQ/wlnO4X+I2e7wx/UNdy+gAlYD5EKm8FW/ZN3T7Nz4
hPGM/op8WEvL08/p8hjEqslP01geGmwbTaMd9P2GjaxbDb5WQLtzpjMgInSn6it8
MEvmgoPU95q3z+3O3lUMpftLICmc2kc1BENggl0lqCmq54YOejae9qRzNiVjfYJK
3llGMhJnxf22hvFRPQWa/jGzZOidHIAo9EtRpK/WtjDKP9NDGEoMbripYQNBio2z
JL9cIfqaN1WSfKM/WJDYMS8+1TMPNHw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org