Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/18C5ACF80F8711EE93747A164AD9E6FC.roa
File: 18C5ACF80F8711EE93747A164AD9E6FC.roa (raw, json)
Hash identifier: LDMZhszZEi4NFhAdfd8joUnHY6Ypq1wQUdwfYVYzO9U=
Subject key identifier: D2:B5:B6:76:CB:3F:A5:4A:07:A1:F4:75:64:0C:D7:81:DC:F2:16:8C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0FC6
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/18C5ACF80F8711EE93747A164AD9E6FC.roa
Signing time: Tue 20 Jun 2023 16:25:41 +0000
ROA not before: Tue 20 Jun 2023 16:25:37 +0000
ROA not after: Thu 19 Jun 2025 16:25:37 +0000
asID: 147291
IP address blocks: 154.16.33.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4038 (0xfc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 20 16:25:37 2023 GMT
Not After : Jun 19 16:25:37 2025 GMT
Subject: CN=6491d304-7f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7d:01:89:26:d9:80:7a:d3:32:d9:30:53:c8:
7a:4f:7d:e0:d1:a8:4a:77:c9:38:f7:f4:5b:fc:86:
bc:c2:06:c4:c1:3f:98:c7:57:1a:62:4c:e4:1a:12:
cd:44:b1:37:d9:0b:33:30:69:0b:99:0b:c3:9b:ab:
72:d5:4d:f8:45:b3:ce:e0:35:2e:73:f4:e4:fc:89:
2b:b2:fc:0c:74:10:b5:e8:cd:70:43:de:e1:1c:10:
fd:da:ef:e2:4d:aa:2f:c7:91:da:cc:5b:11:4a:0b:
c8:1f:ce:8d:7f:26:fc:18:57:9e:10:a8:8f:26:8a:
e6:d0:d6:10:55:8c:da:d5:65:62:49:d9:4f:a7:6b:
60:b6:fc:45:7e:78:09:f0:6f:9e:11:43:0a:eb:41:
26:4d:d9:d4:a1:b8:01:c6:9f:9b:e7:88:47:c9:86:
10:ac:69:0f:34:3c:83:8e:40:aa:55:cb:e0:3e:53:
0d:e4:62:a8:b3:b0:00:56:a9:57:42:a3:93:79:32:
5d:22:7d:cf:6d:e4:8f:cb:48:6a:26:d3:f6:40:c5:
10:48:8c:9b:02:6d:83:57:3a:87:b6:ae:af:7d:28:
6b:1c:71:1c:cf:92:69:8e:bb:93:af:c9:cb:84:fe:
10:64:4d:56:2a:83:3d:c9:72:7d:3f:78:5e:f9:66:
49:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B5:B6:76:CB:3F:A5:4A:07:A1:F4:75:64:0C:D7:81:DC:F2:16:8C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/18C5ACF80F8711EE93747A164AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.33.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:85:77:6c:a3:b4:c3:4b:79:42:51:b7:17:6a:39:4d:a1:80:
3d:97:0c:7d:35:dc:5d:e7:a7:44:07:cf:38:ca:d1:af:60:01:
4a:d5:2e:a1:07:1c:2f:84:6f:14:72:b5:11:ad:48:7f:d8:2d:
1e:3c:9a:a4:7d:46:14:f8:94:22:d6:b7:6b:01:22:db:bc:a0:
12:21:a5:74:33:30:c8:6f:65:5d:b1:52:98:67:0c:36:83:db:
d5:6a:89:61:9b:04:75:00:7c:89:87:c5:40:89:99:ab:26:52:
30:03:88:e4:2c:d8:9c:58:f9:a1:c1:ad:82:87:a1:59:1b:17:
9f:20:57:bc:36:58:6c:fb:80:90:1f:bd:a5:50:07:d8:b3:68:
7e:a1:93:f5:a2:8d:ad:10:e0:a8:55:23:53:5e:03:5e:d3:d8:
a0:31:50:7c:bd:1c:0d:9a:45:55:f6:b8:09:44:a2:ff:a0:34:
66:af:70:55:d1:7a:af:2d:aa:79:a2:b6:4e:c0:27:d3:45:12:
cd:96:ab:e1:36:34:6b:5e:b5:93:9b:82:45:e0:8b:40:f9:8d:
10:7b:47:5d:95:0f:47:fe:9f:11:54:29:34:b9:be:f5:3f:77:
e6:42:2b:cd:25:cc:cb:ae:d4:8d:89:f1:8f:21:c4:4a:98:9b:
7d:d2:7c:c1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICD8YwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA2MjAxNjI1MzdaFw0yNTA2MTkxNjI1MzdaMBgxFjAU
BgNVBAMTDTY0OTFkMzA0LTdmMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRfQGJJtmAetMy2TBTyHpPfeDRqEp3yTj39Fv8hrzCBsTBP5jHVxpiTOQa
Es1EsTfZCzMwaQuZC8Obq3LVTfhFs87gNS5z9OT8iSuy/Ax0ELXozXBD3uEcEP3a
7+JNqi/HkdrMWxFKC8gfzo1/JvwYV54QqI8miubQ1hBVjNrVZWJJ2U+na2C2/EV+
eAnwb54RQwrrQSZN2dShuAHGn5vniEfJhhCsaQ80PIOOQKpVy+A+Uw3kYqizsABW
qVdCo5N5Ml0ifc9t5I/LSGom0/ZAxRBIjJsCbYNXOoe2rq99KGsccRzPkmmOu5Ov
ycuE/hBkTVYqgz3Jcn0/eF75ZkntAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU0rW2
dss/pUoHofR1ZAzXgdzyFowwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzE4QzVBQ0Y4MEY4NzExRUU5Mzc0N0ExNjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaECEwDQYJKoZIhvcNAQEL
BQADggEBAE+Fd2yjtMNLeUJRtxdqOU2hgD2XDH013F3np0QHzzjK0a9gAUrVLqEH
HC+EbxRytRGtSH/YLR48mqR9RhT4lCLWt2sBItu8oBIhpXQzMMhvZV2xUphnDDaD
29VqiWGbBHUAfImHxUCJmasmUjADiOQs2JxY+aHBrYKHoVkbF58gV7w2WGz7gJAf
vaVQB9izaH6hk/Wija0Q4KhVI1NeA17T2KAxUHy9HA2aRVX2uAlEov+gNGavcFXR
eq8tqnmitk7AJ9NFEs2Wq+E2NGtetZObgkXgi0D5jRB7R12VD0f+nxFUKTS5vvU/
d+ZCK80lzMuu1I2J8Y8hxEqYm33SfME=
-----END CERTIFICATE-----
Generated at Sun Aug 20 21:59:30 2023 by rpki-client on console-fra.rpki-client.org