Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1AAE711A150511EF9665AC33017001B1.roa
File: 1AAE711A150511EF9665AC33017001B1.roa (raw, json)
Hash identifier: VJbKtvKbVE+dC6YY1ayeeh+QmXQnkSeM98LzkBnADuY=
Subject key identifier: B7:D8:E7:6D:EA:17:31:2D:9E:25:64:62:01:22:E2:36:F7:BC:1E:17
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1668
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1AAE711A150511EF9665AC33017001B1.roa
Signing time: Sat 18 May 2024 10:55:14 +0000
ROA not before: Sat 18 May 2024 10:55:09 +0000
ROA not after: Sat 16 May 2026 10:55:09 +0000
asID: 834
IP address blocks: 154.16.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 May 2024 09:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5736 (0x1668)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 18 10:55:09 2024 GMT
Not After : May 16 10:55:09 2026 GMT
Subject: CN=66488912-8e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:38:c9:99:0b:58:ba:47:df:88:dc:b2:2e:
4d:43:56:17:54:ef:41:20:f7:da:44:b0:70:70:3f:
09:94:23:f0:5f:3a:bb:74:52:44:ed:84:31:3a:1f:
a7:da:86:1e:a8:6a:58:1e:0e:1a:74:35:12:68:9f:
29:17:ee:3d:07:63:11:92:8c:ee:ac:c8:f6:46:59:
55:64:63:06:49:0c:ab:30:ad:65:eb:1b:21:47:d7:
25:93:40:1e:a9:c1:33:2f:8a:45:0c:28:12:78:d1:
96:6f:57:6d:08:9f:0a:d2:63:91:bd:fd:ec:48:ff:
26:39:92:dc:7e:9c:a9:7c:9e:da:34:28:c4:40:48:
35:81:f2:54:eb:6b:44:32:f5:52:51:c6:c4:39:ca:
e8:89:56:bf:65:0b:fe:2b:cb:80:07:54:1a:3c:5c:
3a:1a:1e:c8:f6:70:af:ea:b7:d0:b5:1a:6c:c3:7b:
3f:7c:2b:d8:51:4e:ff:eb:ea:e1:fc:22:70:28:b3:
35:3c:64:b6:c8:61:87:97:71:a3:fd:34:fd:a6:22:
92:81:66:98:61:3b:ae:4b:b6:d4:24:30:35:31:2f:
23:9e:e7:eb:eb:54:2a:d8:22:2f:11:8e:f6:7c:e4:
75:24:77:4a:3a:5c:c7:54:1d:4f:d3:b2:0d:ff:dd:
81:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D8:E7:6D:EA:17:31:2D:9E:25:64:62:01:22:E2:36:F7:BC:1E:17
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1AAE711A150511EF9665AC33017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.156.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:6b:91:6c:63:cc:fd:4e:46:3c:75:e0:3b:c0:dc:9c:16:5c:
04:2c:eb:91:bb:78:ef:4b:2f:d6:5b:a2:f7:d4:82:8b:a2:89:
80:a8:cb:c5:8c:f7:63:70:bb:e3:79:1e:e2:ff:80:ad:1f:97:
b3:dc:23:86:c8:b4:4e:f1:5b:0c:90:83:08:c2:58:a4:60:ff:
fe:f4:06:71:4c:3e:fd:c4:07:c5:37:8f:f8:93:c9:76:4e:22:
21:9f:b8:55:6f:37:6e:d0:f2:f0:c5:ec:12:65:3c:08:9f:24:
76:8a:cb:9c:0b:eb:a7:4d:84:ce:a0:29:b8:47:35:af:ae:a6:
b2:c0:08:39:cf:0c:02:48:6e:c0:de:e9:0a:b7:8d:80:d2:d6:
ca:2c:d9:d7:21:ea:f4:db:ea:da:8b:3b:51:3a:7b:f4:00:7c:
8f:85:7d:d9:1f:ca:b3:da:13:a4:eb:27:20:11:b3:14:0d:39:
9f:99:3a:df:7f:89:24:b7:ba:12:26:58:3d:77:70:77:7c:10:
3b:11:ec:a2:86:85:18:14:16:18:34:fc:5b:9d:8c:5d:fb:a6:
84:ab:ab:16:8f:b5:ea:65:f3:23:8c:6b:0f:bc:6d:d3:6a:f2:
1d:dc:e3:46:e2:07:18:1b:c8:f5:cf:c1:67:2d:c8:8b:33:0b:
db:54:8d:a3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFmgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNDA1MTgxMDU1MDlaFw0yNjA1MTYxMDU1MDlaMBgxFjAU
BgNVBAMTDTY2NDg4OTEyLThlMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1CzjJmQtYukffiNyyLk1DVhdU70Eg99pEsHBwPwmUI/BfOrt0UkTthDE6
H6fahh6oalgeDhp0NRJonykX7j0HYxGSjO6syPZGWVVkYwZJDKswrWXrGyFH1yWT
QB6pwTMvikUMKBJ40ZZvV20InwrSY5G9/exI/yY5ktx+nKl8nto0KMRASDWB8lTr
a0Qy9VJRxsQ5yuiJVr9lC/4ry4AHVBo8XDoaHsj2cK/qt9C1GmzDez98K9hRTv/r
6uH8InAoszU8ZLbIYYeXcaP9NP2mIpKBZphhO65LttQkMDUxLyOe5+vrVCrYIi8R
jvZ85HUkd0o6XMdUHU/Tsg3/3YHLAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUt9jn
beoXMS2eJWRiASLiNve8HhcwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzFBQUU3MTFBMTUwNTExRUY5NjY1QUMzMzAxNzAwMUIxLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEJwwDQYJKoZIhvcNAQEL
BQADggEBABprkWxjzP1ORjx14DvA3JwWXAQs65G7eO9LL9ZbovfUgouiiYCoy8WM
92Nwu+N5HuL/gK0fl7PcI4bItE7xWwyQgwjCWKRg//70BnFMPv3EB8U3j/iTyXZO
IiGfuFVvN27Q8vDF7BJlPAifJHaKy5wL66dNhM6gKbhHNa+uprLACDnPDAJIbsDe
6Qq3jYDS1sos2dch6vTb6tqLO1E6e/QAfI+FfdkfyrPaE6TrJyARsxQNOZ+ZOt9/
iSS3uhImWD13cHd8EDsR7KKGhRgUFhg0/FudjF37poSrqxaPtepl8yOMaw+8bdNq
8h3c40biBxgbyPXPwWctyIszC9tUjaM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:10 2024 by rpki-client on console-fra.rpki-client.org