Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/18F49F9CFA3B11ED8BD0108B4AD9E6FC.roa
File: 18F49F9CFA3B11ED8BD0108B4AD9E6FC.roa (raw, json)
Hash identifier: paCF78XI8Xjv6iLBS5Y3WxZXMqEzDUrpDgIm6nyaEMk=
Subject key identifier: EF:ED:CB:40:C9:FA:3B:46:FA:C4:DE:88:1A:2F:4B:DA:B0:AA:35:DC
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0DE4
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/18F49F9CFA3B11ED8BD0108B4AD9E6FC.roa
Signing time: Wed 24 May 2023 13:58:45 +0000
ROA not before: Wed 24 May 2023 13:58:41 +0000
ROA not after: Fri 23 May 2025 13:58:41 +0000
asID: 46844
IP address blocks: 154.16.52.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3556 (0xde4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 24 13:58:41 2023 GMT
Not After : May 23 13:58:41 2025 GMT
Subject: CN=646e1815-69d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4c:16:a8:c7:a2:46:09:e2:81:06:f4:7e:3e:
f0:44:bc:5c:1f:75:d8:3e:73:46:c0:8a:6b:f8:97:
21:31:e3:03:2c:de:39:75:70:bb:5e:5f:41:ae:b9:
c6:4c:7e:ad:bb:76:c4:d8:13:6d:50:3b:68:44:c8:
89:7f:a4:dd:4e:4b:62:04:b7:78:aa:ec:e9:53:b6:
f3:28:68:6f:3b:a5:61:90:1a:3a:be:7c:11:3c:a5:
52:fa:8d:7a:64:10:da:e7:43:d3:0e:45:d7:6f:b3:
54:c0:ad:48:97:70:45:42:a7:3e:78:37:36:3b:7c:
65:69:e2:61:0e:50:9f:fd:20:3b:b1:c9:1a:a0:5e:
d3:3e:02:d0:d9:c5:c0:12:43:dc:02:9d:1c:8c:4b:
7e:6f:38:e7:53:a1:71:0d:b7:77:58:4c:7f:d9:d5:
6a:a4:62:d9:b8:5f:cf:62:a5:25:24:51:c1:b5:8a:
1e:07:49:d9:e1:68:f8:4e:d9:78:97:a9:f5:fd:af:
87:59:0a:ef:11:58:f1:d8:7b:06:3f:92:78:8e:b2:
2a:75:63:b0:d0:3a:fd:4a:d1:0b:45:d5:e1:2b:2a:
02:1b:ae:85:f4:fe:8b:8f:9c:a2:7a:7c:7a:5a:40:
2b:55:bc:85:8b:ba:68:18:4e:e3:a5:5f:11:20:2d:
d2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:ED:CB:40:C9:FA:3B:46:FA:C4:DE:88:1A:2F:4B:DA:B0:AA:35:DC
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/18F49F9CFA3B11ED8BD0108B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.52.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:61:fc:7b:b1:fa:56:4b:ef:bb:56:8a:58:1b:a1:a6:cf:d4:
d9:1b:20:67:ad:9a:16:47:d6:65:7c:60:ad:87:eb:f8:dc:d4:
98:0f:b3:7d:d2:f8:19:54:3a:ce:9e:db:9f:ca:d8:8f:75:7a:
90:50:64:6f:ed:0e:7c:41:76:b3:b6:54:bd:93:1f:46:3d:ea:
30:16:55:17:e8:56:ff:74:5d:20:9c:f3:e2:f1:38:d1:f7:92:
d8:2b:aa:f4:04:21:8c:f0:04:e7:03:71:98:fa:76:c4:ed:1f:
37:db:7d:fc:d6:d8:bd:a5:85:33:54:a6:47:22:c8:f1:db:cb:
3d:9b:e8:1a:f0:4c:b6:0b:e2:1d:b7:09:48:fd:53:ac:f6:c2:
ad:4b:ca:ff:b4:f7:79:77:eb:a0:37:54:46:20:bc:e2:5a:e8:
b4:09:9c:30:f4:00:35:70:89:85:19:e1:e8:a1:1d:2a:4f:e0:
a5:c6:69:c1:8e:41:67:0a:37:19:5d:c8:fa:ae:87:7c:40:d1:
bd:77:23:21:c8:b8:96:79:39:22:0f:4b:87:23:b2:e6:7c:6c:
62:6c:b1:bf:d8:aa:ca:20:77:de:7f:58:5e:ea:87:35:3d:b4:
04:fc:41:aa:98:10:54:32:6d:04:6b:fc:0b:c4:52:be:59:84:
e2:d2:ec:a6
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDeQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA1MjQxMzU4NDFaFw0yNTA1MjMxMzU4NDFaMBgxFjAU
BgNVBAMTDTY0NmUxODE1LTY5ZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5TBaox6JGCeKBBvR+PvBEvFwfddg+c0bAimv4lyEx4wMs3jl1cLteX0Gu
ucZMfq27dsTYE21QO2hEyIl/pN1OS2IEt3iq7OlTtvMoaG87pWGQGjq+fBE8pVL6
jXpkENrnQ9MORddvs1TArUiXcEVCpz54NzY7fGVp4mEOUJ/9IDuxyRqgXtM+AtDZ
xcASQ9wCnRyMS35vOOdToXENt3dYTH/Z1WqkYtm4X89ipSUkUcG1ih4HSdnhaPhO
2XiXqfX9r4dZCu8RWPHYewY/kniOsip1Y7DQOv1K0QtF1eErKgIbroX0/ouPnKJ6
fHpaQCtVvIWLumgYTuOlXxEgLdJJAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU7+3L
QMn6O0b6xN6IGi9L2rCqNdwwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzE4RjQ5RjlDRkEzQjExRUQ4QkQwMTA4QjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEDQwDQYJKoZIhvcNAQEL
BQADggEBAE5h/Hux+lZL77tWilgboabP1NkbIGetmhZH1mV8YK2H6/jc1JgPs33S
+BlUOs6e25/K2I91epBQZG/tDnxBdrO2VL2TH0Y96jAWVRfoVv90XSCc8+LxONH3
ktgrqvQEIYzwBOcDcZj6dsTtHzfbffzW2L2lhTNUpkciyPHbyz2b6BrwTLYL4h23
CUj9U6z2wq1Lyv+093l366A3VEYgvOJa6LQJnDD0ADVwiYUZ4eihHSpP4KXGacGO
QWcKNxldyPquh3xA0b13IyHIuJZ5OSIPS4cjsuZ8bGJssb/Yqsogd95/WF7qhzU9
tAT8QaqYEFQybQRr/AvEUr5ZhOLS7KY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org