Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1B3FDE18A4EC11EEA52ACC05D25BE465.roa
File: 1B3FDE18A4EC11EEA52ACC05D25BE465.roa (raw, json)
Hash identifier: jZEc2+n5lyjgr6T8z9zYHLpb5iM+HMZ6SMHXfCOYzus=
Subject key identifier: 56:9E:FC:BC:35:32:A5:F1:CF:A2:FE:8D:94:38:B7:C9:CC:65:40:EA
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 13FF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1B3FDE18A4EC11EEA52ACC05D25BE465.roa
Signing time: Wed 27 Dec 2023 19:14:08 +0000
ROA not before: Wed 27 Dec 2023 19:14:02 +0000
ROA not after: Sat 27 Dec 2025 19:14:02 +0000
asID: 3320
IP address blocks: 154.16.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5119 (0x13ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Dec 27 19:14:02 2023 GMT
Not After : Dec 27 19:14:02 2025 GMT
Subject: CN=658c7780-4b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ab:f9:f3:ad:79:ad:da:c3:1f:32:42:dc:95:
91:f0:fe:6a:93:51:30:95:ca:c5:da:26:5d:e7:e1:
bb:f3:d5:c7:88:c2:fb:2a:f7:32:22:be:a1:e8:91:
a2:82:57:de:25:c4:00:aa:d5:58:3b:cb:e5:cf:aa:
92:1a:b0:ed:4a:9f:f2:89:d7:f3:51:68:ec:db:97:
dd:00:c8:b5:6f:a1:87:e7:43:97:25:e8:1b:65:6b:
5c:51:e1:55:48:36:b8:e4:91:d2:4a:35:f7:85:b9:
2e:05:2a:c6:20:fa:7b:27:3a:a6:8b:fa:9a:5a:9f:
54:71:b3:03:c0:d2:fa:63:44:95:19:76:bd:da:2e:
c5:76:11:c5:5c:7c:d9:d9:b3:72:05:1f:21:fd:72:
ae:1c:4e:19:02:6a:f2:b5:5e:c0:3f:e1:27:74:20:
18:8e:4c:39:11:93:79:44:63:40:78:90:0b:81:77:
b8:08:e5:93:74:56:f6:c9:eb:61:22:82:8b:26:8f:
72:a7:ec:61:9c:ee:54:9a:20:f7:db:af:df:6c:41:
ae:60:4a:66:b4:f4:b1:65:01:0e:0e:60:99:95:cb:
d9:c2:db:73:4f:35:61:f6:9c:ce:4a:95:18:d6:6f:
54:6c:a2:bd:62:a3:0f:84:5b:db:8a:7b:09:6a:ed:
21:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9E:FC:BC:35:32:A5:F1:CF:A2:FE:8D:94:38:B7:C9:CC:65:40:EA
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1B3FDE18A4EC11EEA52ACC05D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.9.0/24
Signature Algorithm: sha256WithRSAEncryption
70:9f:78:8e:14:86:08:ff:0f:d8:b4:76:60:f8:2c:a6:bc:51:
38:c8:af:40:08:31:34:c4:70:78:b9:0e:d2:b9:27:0f:cd:02:
60:b2:b7:cb:df:38:cc:96:6b:0c:e2:90:b8:d1:46:03:a5:e7:
11:07:ae:aa:91:71:d0:9b:f1:59:5e:50:99:a7:61:59:f8:8f:
95:ca:e0:0d:a8:54:86:28:21:4a:0a:ef:22:62:e6:eb:12:e3:
73:5b:6e:81:67:07:f1:25:ca:f0:65:02:a9:d2:3a:31:2b:a0:
44:9a:28:25:07:ff:a8:55:3a:af:19:a0:bd:0f:77:f7:87:68:
2f:61:c8:6d:71:3d:27:c8:6a:3b:e1:1e:d0:40:38:87:82:95:
50:57:c3:f3:1f:b6:7a:d5:54:73:59:f3:7c:9a:a4:55:0f:34:
08:3d:30:fd:39:30:04:b3:79:d2:55:b0:46:3b:b8:ee:e7:81:
f5:66:c7:4e:01:38:92:f0:d7:0d:eb:35:5a:73:8f:4a:17:aa:
1c:5d:28:28:32:38:ab:55:d9:7d:90:1d:6f:e0:0b:eb:f5:0b:
1f:a7:cc:f9:ab:e4:ba:2f:a1:3d:c9:b1:bb:1c:73:93:c3:fc:
5b:f6:cf:db:9e:a9:55:fa:0f:bc:be:2c:29:d0:8e:05:4d:01:
ce:a4:d9:1c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICE/8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzEyMjcxOTE0MDJaFw0yNTEyMjcxOTE0MDJaMBgxFjAU
BgNVBAMTDTY1OGM3NzgwLTRiMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCcq/nzrXmt2sMfMkLclZHw/mqTUTCVysXaJl3n4bvz1ceIwvsq9zIivqHo
kaKCV94lxACq1Vg7y+XPqpIasO1Kn/KJ1/NRaOzbl90AyLVvoYfnQ5cl6Btla1xR
4VVINrjkkdJKNfeFuS4FKsYg+nsnOqaL+ppan1RxswPA0vpjRJUZdr3aLsV2EcVc
fNnZs3IFHyH9cq4cThkCavK1XsA/4Sd0IBiOTDkRk3lEY0B4kAuBd7gI5ZN0VvbJ
62Eigosmj3Kn7GGc7lSaIPfbr99sQa5gSma09LFlAQ4OYJmVy9nC23NPNWH2nM5K
lRjWb1Rsor1iow+EW9uKewlq7SHnAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUVp78
vDUypfHPov6NlDi3ycxlQOowHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzFCM0ZERTE4QTRFQzExRUVBNTJBQ0MwNUQyNUJFNDY1LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEAkwDQYJKoZIhvcNAQEL
BQADggEBAHCfeI4Uhgj/D9i0dmD4LKa8UTjIr0AIMTTEcHi5DtK5Jw/NAmCyt8vf
OMyWawzikLjRRgOl5xEHrqqRcdCb8VleUJmnYVn4j5XK4A2oVIYoIUoK7yJi5usS
43NbboFnB/ElyvBlAqnSOjEroESaKCUH/6hVOq8ZoL0Pd/eHaC9hyG1xPSfIajvh
HtBAOIeClVBXw/MftnrVVHNZ83yapFUPNAg9MP05MASzedJVsEY7uO7ngfVmx04B
OJLw1w3rNVpzj0oXqhxdKCgyOKtV2X2QHW/gC+v1Cx+nzPmr5LovoT3Jsbscc5PD
/Fv2z9ueqVX6D7y+LCnQjgVNAc6k2Rw=
-----END CERTIFICATE-----
Generated at Fri Dec 29 08:25:40 2023 by rpki-client on console-fra.rpki-client.org