Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/143B9C50B1FA11EDB1624FAFF1222468.roa
File: 143B9C50B1FA11EDB1624FAFF1222468.roa (raw, json)
Hash identifier: 2RKsIg1p460FUL7q4fCQBcX88o5N3MYWsKrXiXy+IA0=
Subject key identifier: E5:86:04:AE:B5:10:6C:C7:7D:2D:8B:2C:B3:A3:69:7C:ED:F3:C7:4F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0BC7
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/143B9C50B1FA11EDB1624FAFF1222468.roa
Signing time: Tue 21 Feb 2023 15:11:56 +0000
ROA not before: Tue 21 Feb 2023 15:11:52 +0000
ROA not after: Sat 20 Feb 2027 15:11:52 +0000
asID: 834
IP address blocks: 154.16.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3015 (0xbc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 21 15:11:52 2023 GMT
Not After : Feb 20 15:11:52 2027 GMT
Subject: CN=63f4df3c-8767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b0:2d:da:93:a4:57:f6:07:57:bb:cf:52:31:
da:da:21:4b:03:f6:87:b1:52:9b:b0:eb:44:ad:f7:
1c:df:82:fd:75:d9:1c:62:33:2e:b2:5f:a4:72:30:
1d:36:2d:a9:5b:ff:05:59:62:0e:56:7c:32:df:97:
17:0d:5c:5b:7e:f5:5d:ed:9e:c3:4e:59:4a:53:52:
bb:07:2d:02:24:5e:c5:57:2c:8d:5b:a1:11:35:0e:
34:04:5f:7a:95:93:f7:c5:84:9d:23:f1:a4:6e:6c:
22:53:38:37:66:23:77:82:93:af:3f:15:60:b3:d0:
10:8a:2c:c9:f6:7e:2a:bf:e7:ae:32:01:98:a6:15:
82:dd:0d:09:9c:87:c7:e4:9e:11:d7:ad:5e:65:d2:
fa:22:6a:94:16:07:bb:65:9a:17:76:ed:09:ed:74:
07:bb:77:26:43:42:3f:93:ce:28:46:f4:ce:e2:8b:
14:66:1f:01:9a:5e:31:92:b9:cb:ca:90:e6:bd:ae:
c2:fb:7f:58:ef:e5:ac:f2:77:ea:ad:a0:40:b1:ae:
d4:fb:63:6f:30:fc:03:89:e6:ff:f8:da:4c:a7:ae:
07:a8:5a:28:17:9c:e5:81:d9:c0:bc:28:57:d3:02:
3a:b4:11:72:8b:04:92:0e:ba:f7:25:22:76:5f:6f:
b0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:86:04:AE:B5:10:6C:C7:7D:2D:8B:2C:B3:A3:69:7C:ED:F3:C7:4F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/143B9C50B1FA11EDB1624FAFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c2:f8:3d:53:5a:1e:c0:e1:78:5c:b2:f9:08:c6:01:f8:e4:61:
2a:57:e3:e8:f1:40:56:ed:7d:64:9d:1a:25:2c:b3:cf:5b:00:
90:df:11:44:0f:79:aa:3e:ac:6a:4e:4b:b8:53:13:63:c4:38:
4f:5b:98:c0:c9:74:65:19:cf:8c:4e:34:ac:54:9a:1f:51:a3:
bd:d6:5b:5f:1a:4c:ab:d3:ab:9e:4e:7e:b7:45:25:b4:34:2c:
5a:68:83:b8:94:ce:4d:2a:d3:0e:c1:3c:58:bc:81:2e:8d:82:
97:e4:16:15:88:ed:af:03:29:c7:72:02:ec:1b:44:fc:19:fc:
ca:02:93:3c:b0:f8:55:14:94:12:4e:bf:f3:58:cc:fb:95:ff:
7e:fa:a5:33:b0:dc:e3:dc:08:dd:64:8c:44:db:63:7f:b5:5d:
03:ae:58:a2:c4:1f:35:33:d0:c5:50:65:89:6f:d7:c8:ac:fe:
52:96:3a:6d:bb:f0:34:e3:1b:80:7c:06:59:46:89:fb:2d:bc:
58:cf:70:ec:c6:c0:14:76:ac:66:1e:6a:3a:bc:9b:f7:5c:c8:
a4:ae:84:61:86:e9:92:a5:5f:17:68:07:23:37:75:27:51:39:
10:46:1f:c5:3e:94:eb:e7:c0:33:38:78:f7:ea:d8:94:72:89:
bc:b8:44:c4
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICC8cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzAyMjExNTExNTJaFw0yNzAyMjAxNTExNTJaMBgxFjAU
BgNVBAMMDTYzZjRkZjNjLTg3NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGsC3ak6RX9gdXu89SMdraIUsD9oexUpuw60St9xzfgv112RxiMy6yX6Ry
MB02Lalb/wVZYg5WfDLflxcNXFt+9V3tnsNOWUpTUrsHLQIkXsVXLI1boRE1DjQE
X3qVk/fFhJ0j8aRubCJTODdmI3eCk68/FWCz0BCKLMn2fiq/564yAZimFYLdDQmc
h8fknhHXrV5l0voiapQWB7tlmhd27QntdAe7dyZDQj+TzihG9M7iixRmHwGaXjGS
ucvKkOa9rsL7f1jv5azyd+qtoECxrtT7Y28w/AOJ5v/42kynrgeoWigXnOWB2cC8
KFfTAjq0EXKLBJIOuvclInZfb7DRAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQU5YYE
rrUQbMd9LYsss6NpfO3zx08wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzE0M0I5QzUwQjFGQTExRURCMTYyNEZBRkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwCaEDANBgkqhkiG9w0BAQsF
AAOCAQEAwvg9U1oewOF4XLL5CMYB+ORhKlfj6PFAVu19ZJ0aJSyzz1sAkN8RRA95
qj6sak5LuFMTY8Q4T1uYwMl0ZRnPjE40rFSaH1GjvdZbXxpMq9Ornk5+t0UltDQs
WmiDuJTOTSrTDsE8WLyBLo2Cl+QWFYjtrwMpx3IC7BtE/Bn8ygKTPLD4VRSUEk6/
81jM+5X/fvqlM7Dc49wI3WSMRNtjf7VdA65YosQfNTPQxVBliW/XyKz+UpY6bbvw
NOMbgHwGWUaJ+y28WM9w7MbAFHasZh5qOryb91zIpK6EYYbpkqVfF2gHIzd1J1E5
EEYfxT6U6+fAMzh49+rYlHKJvLhExA==
-----END CERTIFICATE-----
Generated at Thu Dec 14 20:04:55 2023 by rpki-client on console-fra.rpki-client.org