Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/186182280FD711EE9DB1F00F4AD9E6FC.roa
File: 186182280FD711EE9DB1F00F4AD9E6FC.roa (raw, json)
Hash identifier: weHkgTlgqPfR1ka0Lewlrixb7u53WAoIKyUpt0CMjU0=
Subject key identifier: A1:99:87:98:C6:D3:42:A2:7E:02:6E:15:37:DB:ED:8F:29:4E:13:EC
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0FDB
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/186182280FD711EE9DB1F00F4AD9E6FC.roa
Signing time: Wed 21 Jun 2023 01:58:20 +0000
ROA not before: Wed 21 Jun 2023 01:58:16 +0000
ROA not after: Tue 18 Jun 2024 01:58:16 +0000
asID: 834
IP address blocks: 154.16.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4059 (0xfdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 21 01:58:16 2023 GMT
Not After : Jun 18 01:58:16 2024 GMT
Subject: CN=6492593c-a2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8e:e4:36:db:3a:c1:36:2f:1b:2f:f3:82:fb:
74:a3:4f:38:1f:8e:6e:ee:e2:63:b3:2f:02:a1:23:
9b:df:5d:28:e7:4b:74:23:bb:ac:1f:37:ba:83:6d:
9d:6b:4b:ab:64:d9:ef:23:3c:72:4b:6a:2c:ad:aa:
8a:91:6a:83:3b:10:64:13:8a:e8:39:46:23:90:fd:
b9:74:c4:55:89:56:c3:78:bf:07:05:8a:74:ea:55:
8a:b8:06:67:ef:b5:f1:2f:76:a1:14:65:fd:64:19:
8a:29:81:24:34:62:a2:02:b7:63:45:52:5c:a9:d4:
73:c0:90:db:f7:0e:d4:9c:0a:ea:b4:34:7b:6a:de:
b3:75:be:68:f0:af:a1:ef:f6:e7:19:40:b7:e5:22:
00:12:28:02:61:69:76:b0:09:0f:40:ba:37:c9:49:
b0:86:b1:96:c3:df:52:4c:52:e7:e7:ed:fd:dd:11:
7d:ea:ac:57:72:42:bd:97:ff:f7:0f:7e:d6:26:09:
1d:8e:38:01:f5:61:ea:99:f8:41:d1:eb:a7:9b:f1:
10:4b:0f:bb:af:6d:7f:68:fb:e4:3c:8b:18:02:2b:
1d:09:5d:72:cd:71:7c:b3:07:03:e0:1b:7a:b8:e2:
61:6f:6d:d7:b4:54:13:e7:6c:2d:09:dc:8a:b4:3d:
f5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:99:87:98:C6:D3:42:A2:7E:02:6E:15:37:DB:ED:8F:29:4E:13:EC
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/186182280FD711EE9DB1F00F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.87.0/24
Signature Algorithm: sha256WithRSAEncryption
04:9f:80:60:29:c8:4d:07:a5:e1:5c:a3:90:c2:e2:83:6a:7e:
0e:65:b6:e0:bf:98:ca:88:cb:be:0a:33:2d:7a:ef:9a:2e:f1:
54:ce:e4:5a:6a:ae:14:19:39:f6:8b:30:21:e3:f1:41:10:cc:
b5:92:c3:d0:5c:4a:6a:f7:f0:0b:c0:55:75:e7:8a:63:a7:3a:
a1:6b:66:71:9b:b0:b6:49:d7:1d:3d:45:e6:e9:ad:ec:2c:93:
10:ec:48:d2:00:c8:be:83:2a:a4:1e:de:5b:e7:b3:6e:0f:f0:
c7:2c:f0:87:2d:80:2e:0f:79:f2:4c:a9:23:fe:a3:3a:6f:9b:
33:f0:37:1f:0a:88:1a:29:8e:ae:8c:25:9d:e3:68:38:e4:eb:
d8:2b:fe:e2:5e:38:2f:b4:49:f4:48:b9:eb:47:4a:30:6e:76:
d8:34:ed:56:08:91:ed:db:51:08:2b:2a:71:71:b9:03:c1:5f:
88:50:74:d3:fb:eb:73:0c:3a:fa:3c:cc:f0:3f:75:0b:70:37:
7a:30:05:f4:dc:46:b5:e3:75:5c:ba:7e:1b:ff:ce:e9:84:2d:
d7:18:d1:98:9b:17:d0:49:fe:4a:12:59:49:4e:90:f6:d9:37:
79:03:96:90:a8:80:42:22:1a:b3:db:71:8d:77:5e:d9:43:77:
17:13:f4:23
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICD9swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA2MjEwMTU4MTZaFw0yNDA2MTgwMTU4MTZaMBgxFjAU
BgNVBAMTDTY0OTI1OTNjLWEyZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6juQ22zrBNi8bL/OC+3SjTzgfjm7u4mOzLwKhI5vfXSjnS3Qju6wfN7qD
bZ1rS6tk2e8jPHJLaiytqoqRaoM7EGQTiug5RiOQ/bl0xFWJVsN4vwcFinTqVYq4
BmfvtfEvdqEUZf1kGYopgSQ0YqICt2NFUlyp1HPAkNv3DtScCuq0NHtq3rN1vmjw
r6Hv9ucZQLflIgASKAJhaXawCQ9AujfJSbCGsZbD31JMUufn7f3dEX3qrFdyQr2X
//cPftYmCR2OOAH1YeqZ+EHR66eb8RBLD7uvbX9o++Q8ixgCKx0JXXLNcXyzBwPg
G3q44mFvbde0VBPnbC0J3Iq0PfWNAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUoZmH
mMbTQqJ+Am4VN9vtjylOE+wwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzE4NjE4MjI4MEZENzExRUU5REIxRjAwRjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEFcwDQYJKoZIhvcNAQEL
BQADggEBAASfgGApyE0HpeFco5DC4oNqfg5ltuC/mMqIy74KMy1675ou8VTO5Fpq
rhQZOfaLMCHj8UEQzLWSw9BcSmr38AvAVXXnimOnOqFrZnGbsLZJ1x09Rebprews
kxDsSNIAyL6DKqQe3lvns24P8Mcs8IctgC4PefJMqSP+ozpvmzPwNx8KiBopjq6M
JZ3jaDjk69gr/uJeOC+0SfRIuetHSjBudtg07VYIke3bUQgrKnFxuQPBX4hQdNP7
63MMOvo8zPA/dQtwN3owBfTcRrXjdVy6fhv/zumELdcY0ZibF9BJ/koSWUlOkPbZ
N3kDlpCogEIiGrPbcY13XtlDdxcT9CM=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org