Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1492CF0A04E011EE8F8FBF6B4AD9E6FC.roa
File: 1492CF0A04E011EE8F8FBF6B4AD9E6FC.roa (raw, json)
Hash identifier: PxC74WfKJilOIT0Nq+kiww0wkBXkoxDpHaP4oGkxxYA=
Subject key identifier: 5E:C9:85:E7:4E:6C:67:B7:83:62:36:10:B1:99:2F:74:7A:74:78:68
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0EED
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1492CF0A04E011EE8F8FBF6B4AD9E6FC.roa
Signing time: Wed 07 Jun 2023 03:04:56 +0000
ROA not before: Wed 07 Jun 2023 03:04:52 +0000
ROA not after: Sat 07 Jun 2025 03:04:52 +0000
asID: 834
IP address blocks: 154.16.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3821 (0xeed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 7 03:04:52 2023 GMT
Not After : Jun 7 03:04:52 2025 GMT
Subject: CN=647ff3d8-dc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fa:f3:ac:fe:57:48:9f:97:5e:46:38:44:5b:
a7:44:6a:f1:c3:3b:06:ac:ab:aa:fa:47:3a:d9:8a:
65:31:d0:cd:fa:ed:99:0f:ee:6f:54:1f:54:40:be:
17:de:84:63:bf:c3:78:3d:13:1b:b0:1d:be:b1:0c:
4e:32:9a:5a:16:08:ee:c2:40:4a:23:48:9d:7b:ac:
1c:91:c0:0b:85:3a:ab:65:4d:01:5e:4f:cc:9f:08:
1b:2e:f2:9d:3d:c0:e3:7d:3a:1e:22:d4:64:c4:93:
07:3e:0c:84:7a:8e:a4:8e:4d:8a:f4:53:6c:ed:50:
7b:c5:84:d8:fd:df:b3:42:b5:01:1d:8b:b3:1c:e1:
64:ce:2a:58:c1:f2:95:55:31:e1:7c:0a:17:d0:27:
ca:3a:3f:89:74:18:a5:71:8f:e3:65:14:61:cd:96:
c5:ff:2b:04:28:12:71:16:76:ea:fc:d8:fd:62:00:
72:63:45:d1:ad:40:5b:5b:a4:ff:91:dd:56:b7:aa:
e6:95:35:af:4d:ea:3d:fc:2f:c0:de:87:b7:c3:8c:
e5:72:5a:da:16:4a:32:ee:db:d3:59:5d:72:7a:4c:
2b:3b:73:b9:c9:b7:95:ca:99:4c:98:fd:d6:6c:fc:
5d:e6:5f:fe:60:81:45:bd:22:cb:e2:c0:ca:30:67:
1e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C9:85:E7:4E:6C:67:B7:83:62:36:10:B1:99:2F:74:7A:74:78:68
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1492CF0A04E011EE8F8FBF6B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.34.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:58:81:1b:05:8e:8b:fb:36:41:68:39:0a:f9:1e:d4:f0:b4:
8a:62:f6:04:db:30:49:25:f8:c0:0a:d8:dd:fc:dc:5a:e4:6d:
39:f6:e0:ef:b0:2b:a1:88:ba:bd:56:ce:a3:3b:8b:cf:95:e1:
02:6e:40:af:a4:9d:fb:ab:13:b4:70:91:34:74:58:fb:ef:d9:
84:3a:cd:ad:6a:36:d6:5f:d1:a4:bb:ce:d1:93:cf:d3:4f:38:
e7:e5:67:1e:ac:3e:0c:ca:72:5c:63:4d:5f:29:26:54:5b:df:
93:5b:6c:47:ce:6d:26:5f:cf:be:fa:82:d7:5d:7d:79:c4:ee:
1e:1b:2b:3c:ac:30:7d:c9:c0:de:65:55:81:4a:48:1c:d2:27:
79:dc:f0:5f:89:12:fd:56:04:96:8c:e2:0f:7b:79:3e:2c:20:
12:db:46:aa:58:3d:29:42:87:7d:e3:82:2d:2e:d3:18:31:9b:
34:a3:ee:28:00:7e:d5:f7:57:5b:05:77:b8:ad:fc:c1:72:ea:
e3:72:13:46:9a:d5:06:14:6a:b6:16:02:5f:a1:30:a0:dc:2d:
b2:d8:a3:6e:15:74:ce:61:03:e3:44:90:97:82:8f:c3:76:1a:
5c:8d:8d:8f:8f:f1:bb:2f:3e:3b:e2:fd:05:ed:f4:9f:74:b7:
34:c7:84:3b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDu0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA2MDcwMzA0NTJaFw0yNTA2MDcwMzA0NTJaMBgxFjAU
BgNVBAMTDTY0N2ZmM2Q4LWRjNmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDT+vOs/ldIn5deRjhEW6dEavHDOwasq6r6RzrZimUx0M367ZkP7m9UH1RA
vhfehGO/w3g9ExuwHb6xDE4ymloWCO7CQEojSJ17rByRwAuFOqtlTQFeT8yfCBsu
8p09wON9Oh4i1GTEkwc+DIR6jqSOTYr0U2ztUHvFhNj937NCtQEdi7Mc4WTOKljB
8pVVMeF8ChfQJ8o6P4l0GKVxj+NlFGHNlsX/KwQoEnEWdur82P1iAHJjRdGtQFtb
pP+R3Va3quaVNa9N6j38L8Deh7fDjOVyWtoWSjLu29NZXXJ6TCs7c7nJt5XKmUyY
/dZs/F3mX/5ggUW9IsviwMowZx4HAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUXsmF
505sZ7eDYjYQsZkvdHp0eGgwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzE0OTJDRjBBMDRFMDExRUU4RjhGQkY2QjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaECIwDQYJKoZIhvcNAQEL
BQADggEBAMdYgRsFjov7NkFoOQr5HtTwtIpi9gTbMEkl+MAK2N383FrkbTn24O+w
K6GIur1WzqM7i8+V4QJuQK+knfurE7RwkTR0WPvv2YQ6za1qNtZf0aS7ztGTz9NP
OOflZx6sPgzKclxjTV8pJlRb35NbbEfObSZfz776gtddfXnE7h4bKzysMH3JwN5l
VYFKSBzSJ3nc8F+JEv1WBJaM4g97eT4sIBLbRqpYPSlCh33jgi0u0xgxmzSj7igA
ftX3V1sFd7it/MFy6uNyE0aa1QYUarYWAl+hMKDcLbLYo24VdM5hA+NEkJeCj8N2
GlyNjY+P8bsvPjvi/QXt9J90tzTHhDs=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org