Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0DE3C466053F11EE8B1B5F864AD9E6FC.roa
File: 0DE3C466053F11EE8B1B5F864AD9E6FC.roa (raw, json)
Hash identifier: nqMUzM/HWAa5P2BHQFxjJyTOyib8/t2q9ND6nJ0l0FQ=
Subject key identifier: 42:C8:90:AC:92:47:D9:3B:DB:35:65:C2:FA:32:23:E1:3D:4E:A0:9A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0EF3
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0DE3C466053F11EE8B1B5F864AD9E6FC.roa
Signing time: Wed 07 Jun 2023 14:24:47 +0000
ROA not before: Wed 07 Jun 2023 14:24:42 +0000
ROA not after: Mon 09 Jun 2025 14:24:42 +0000
asID: 20473
IP address blocks: 154.16.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3827 (0xef3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 7 14:24:42 2023 GMT
Not After : Jun 9 14:24:42 2025 GMT
Subject: CN=6480932f-1f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:95:2c:ca:75:f7:7d:e1:ae:b7:5a:cd:30:21:
3b:35:90:fc:e8:4b:43:e3:27:f2:1a:43:ca:de:29:
c3:4a:b6:2e:85:f1:3d:f2:5f:57:a1:80:b7:e4:3a:
89:c6:35:33:32:ff:b6:f9:7b:48:11:3c:e6:55:f5:
53:86:ef:00:2a:03:38:91:ff:bc:59:f0:ca:ad:3a:
bf:45:55:e3:bc:3c:f6:f4:9e:2a:68:c4:23:1f:d4:
5a:e2:65:28:4b:0c:4f:e8:c9:8b:61:35:0d:a7:c3:
79:a3:1c:f2:5f:0a:8b:25:ea:cc:75:1a:89:59:9a:
ab:24:20:34:85:01:d4:1b:e9:5a:20:25:65:6f:ea:
fa:b9:05:86:45:54:99:96:02:d5:f5:38:00:59:72:
d0:0a:4c:40:46:d9:5b:ee:a2:28:d5:24:9d:22:f2:
4f:15:c6:21:97:ed:0f:86:e2:0b:26:e2:76:2e:5c:
20:5c:86:dd:e1:fd:d2:1c:80:5c:6d:05:b2:1c:57:
a7:64:de:19:fc:39:c6:65:f4:87:b4:0c:ad:f4:eb:
83:28:1a:ea:13:11:bb:39:93:dd:f8:9b:17:c7:06:
ca:20:ad:24:f8:94:dc:dd:31:cd:62:68:4b:e4:37:
1f:d0:d3:1d:02:5c:52:72:bf:89:bd:ca:55:67:0a:
59:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C8:90:AC:92:47:D9:3B:DB:35:65:C2:FA:32:23:E1:3D:4E:A0:9A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0DE3C466053F11EE8B1B5F864AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.25.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:8d:be:0b:ae:e2:0c:ba:10:3c:f9:e6:17:67:fe:4d:ee:9f:
73:8b:54:ee:35:7b:0c:22:3e:09:7f:82:12:a4:1e:52:c9:47:
8d:7e:19:6d:ad:62:9b:f1:80:02:b8:90:4f:99:49:81:26:9b:
67:88:31:41:87:d1:a2:23:46:12:e1:c8:31:d8:e6:a5:2f:ff:
9c:b1:82:ed:e5:c8:93:2c:c1:5a:5a:7f:9a:7c:d1:96:ec:80:
99:98:37:f7:f2:e3:f0:dc:08:6c:98:3f:51:41:87:e4:00:b2:
92:14:36:c9:62:0e:f2:70:dc:ed:32:82:78:5b:d8:03:03:92:
33:93:28:68:26:bb:5f:82:1d:96:12:49:fe:2a:38:10:ca:a8:
dd:db:ea:17:d6:01:f0:07:dd:d0:5d:55:32:a6:21:cf:48:fc:
77:83:ef:d9:28:17:4f:e4:d0:46:93:20:19:e4:10:be:45:f9:
76:ba:e3:c2:e5:ac:1d:f6:f2:e5:91:f3:7b:49:20:30:1a:d4:
fd:bc:87:d4:53:38:20:82:ce:db:5b:55:55:14:64:f6:c5:96:
3c:62:f7:6e:1c:06:e4:05:a1:bf:91:63:1f:c9:bb:69:46:83:
3f:30:c5:6b:57:d4:bd:45:0d:41:db:e8:da:fe:3f:ef:6f:3a:
1e:4a:e8:7e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDvMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA2MDcxNDI0NDJaFw0yNTA2MDkxNDI0NDJaMBgxFjAU
BgNVBAMTDTY0ODA5MzJmLTFmNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDOlSzKdfd94a63Ws0wITs1kPzoS0PjJ/IaQ8reKcNKti6F8T3yX1ehgLfk
OonGNTMy/7b5e0gRPOZV9VOG7wAqAziR/7xZ8MqtOr9FVeO8PPb0nipoxCMf1Fri
ZShLDE/oyYthNQ2nw3mjHPJfCosl6sx1GolZmqskIDSFAdQb6VogJWVv6vq5BYZF
VJmWAtX1OABZctAKTEBG2VvuoijVJJ0i8k8VxiGX7Q+G4gsm4nYuXCBcht3h/dIc
gFxtBbIcV6dk3hn8OcZl9Ie0DK3064MoGuoTEbs5k934mxfHBsogrST4lNzdMc1i
aEvkNx/Q0x0CXFJyv4m9ylVnClmhAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUQsiQ
rJJH2TvbNWXC+jIj4T1OoJowHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzBERTNDNDY2MDUzRjExRUU4QjFCNUY4NjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEBkwDQYJKoZIhvcNAQEL
BQADggEBALCNvguu4gy6EDz55hdn/k3un3OLVO41ewwiPgl/ghKkHlLJR41+GW2t
YpvxgAK4kE+ZSYEmm2eIMUGH0aIjRhLhyDHY5qUv/5yxgu3lyJMswVpaf5p80Zbs
gJmYN/fy4/DcCGyYP1FBh+QAspIUNsliDvJw3O0ygnhb2AMDkjOTKGgmu1+CHZYS
Sf4qOBDKqN3b6hfWAfAH3dBdVTKmIc9I/HeD79koF0/k0EaTIBnkEL5F+Xa648Ll
rB328uWR83tJIDAa1P28h9RTOCCCzttbVVUUZPbFljxi924cBuQFob+RYx/Ju2lG
gz8wxWtX1L1FDUHb6Nr+P+9vOh5K6H4=
-----END CERTIFICATE-----
Generated at Wed Sep 6 07:24:47 2023 by rpki-client on console-fra.rpki-client.org