Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1D1C4BC4058A11EE9C6A40644AD9E6FC.roa
File: 1D1C4BC4058A11EE9C6A40644AD9E6FC.roa (raw, json)
Hash identifier: faYMWDiGfB9kjlkVZSWZ1LJNLA34hgfIG9AyBOEiduk=
Subject key identifier: 2A:6C:36:81:7D:85:38:91:47:8F:0B:C7:92:44:25:76:67:0F:0C:90
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0EFC
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1D1C4BC4058A11EE9C6A40644AD9E6FC.roa
Signing time: Wed 07 Jun 2023 23:22:05 +0000
ROA not before: Thu 08 Jun 2023 23:22:01 +0000
ROA not after: Sat 07 Jun 2025 23:22:01 +0000
asID: 834
IP address blocks: 154.16.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 Jun 2023 21:12:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3836 (0xefc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Jun 8 23:22:01 2023 GMT
Not After : Jun 7 23:22:01 2025 GMT
Subject: CN=6481111d-3052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:af:2b:59:39:60:78:bc:e9:c7:f3:ca:0d:b7:
8a:2f:64:01:34:fb:4a:5f:60:33:9c:15:f5:52:a2:
4e:e0:65:cc:64:1d:5c:f4:e0:0c:f1:67:c2:9f:72:
e6:07:bf:e7:f2:d6:4e:57:13:2f:ab:c9:fd:cb:d9:
b8:19:9e:33:05:da:9a:49:5d:d8:7c:ce:aa:d1:a8:
fc:75:f5:8f:e0:de:0c:23:03:43:be:62:5a:f5:67:
10:d9:50:3a:ed:fa:60:79:9d:c8:df:66:a0:48:2c:
d4:89:d6:16:8f:65:ed:db:33:25:02:8e:c5:bd:7b:
9a:25:2e:10:bf:43:05:73:f7:d6:76:fd:7b:b7:00:
83:be:b2:69:52:54:a8:3d:ff:ab:86:13:57:01:71:
50:26:f3:31:f4:57:41:68:5b:36:70:b6:0c:89:d5:
5d:ff:b3:06:28:5e:b4:c4:ff:6c:b4:9f:23:3b:bb:
16:f9:0b:ee:19:69:05:16:94:15:ef:01:ae:68:96:
09:81:31:05:fa:cb:83:e9:c5:15:49:12:73:f2:58:
c7:40:a6:40:49:c9:a7:55:09:a5:da:df:f0:dc:26:
52:2e:da:d2:45:42:a2:3d:e9:8f:c9:89:23:d8:92:
92:b4:15:de:c7:11:bf:70:0f:e8:df:f1:f3:dc:f2:
0f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6C:36:81:7D:85:38:91:47:8F:0B:C7:92:44:25:76:67:0F:0C:90
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1D1C4BC4058A11EE9C6A40644AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.248.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:9d:de:0d:a9:0c:f9:06:2f:af:0c:24:07:e3:18:07:ba:bd:
56:a1:dc:be:0d:ea:a9:ad:78:d7:ed:e8:f1:22:d5:7f:d7:99:
d2:18:f3:ab:08:a7:7b:18:c3:2e:ce:d6:dd:a3:1c:46:1a:02:
76:26:22:f7:c6:4e:61:e4:f8:9f:ca:61:1f:19:56:04:03:59:
b7:f4:58:cd:56:a9:cf:1f:3c:b0:36:54:28:21:e6:72:35:b2:
8f:55:40:e1:cf:7b:a8:9c:68:c5:39:85:70:cf:b2:57:94:0f:
1d:16:2e:fa:2f:6a:a8:72:e1:07:53:f4:0c:cf:fa:72:24:91:
b8:9b:2d:d6:8e:3c:07:79:cc:c1:7a:c1:9a:4d:c3:d3:f2:8a:
1d:b0:5d:05:6c:b7:0d:9a:e0:d8:27:d3:e0:e0:2d:65:48:89:
95:e3:9d:8e:01:01:83:0b:b6:30:12:e0:3a:0f:22:e0:e4:60:
ef:3e:36:8c:87:92:55:92:5e:72:b9:7f:54:8a:57:b8:72:97:
dd:96:f3:3a:36:bb:72:7f:20:af:40:ce:49:21:d3:6e:02:98:
88:91:4c:d1:35:db:9f:66:69:b8:29:cc:bf:60:c5:cc:f8:88:
1d:3c:a2:7a:9b:19:b7:82:ca:62:40:37:af:c8:de:93:8f:b7:
1e:67:e8:87
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDvwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA2MDgyMzIyMDFaFw0yNTA2MDcyMzIyMDFaMBgxFjAU
BgNVBAMTDTY0ODExMTFkLTMwNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCmrytZOWB4vOnH88oNt4ovZAE0+0pfYDOcFfVSok7gZcxkHVz04AzxZ8Kf
cuYHv+fy1k5XEy+ryf3L2bgZnjMF2ppJXdh8zqrRqPx19Y/g3gwjA0O+Ylr1ZxDZ
UDrt+mB5ncjfZqBILNSJ1haPZe3bMyUCjsW9e5olLhC/QwVz99Z2/Xu3AIO+smlS
VKg9/6uGE1cBcVAm8zH0V0FoWzZwtgyJ1V3/swYoXrTE/2y0nyM7uxb5C+4ZaQUW
lBXvAa5olgmBMQX6y4PpxRVJEnPyWMdApkBJyadVCaXa3/DcJlIu2tJFQqI96Y/J
iSPYkpK0Fd7HEb9wD+jf8fPc8g+VAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUKmw2
gX2FOJFHjwvHkkQldmcPDJAwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzFEMUM0QkM0MDU4QTExRUU5QzZBNDA2NDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEPgwDQYJKoZIhvcNAQEL
BQADggEBAMad3g2pDPkGL68MJAfjGAe6vVah3L4N6qmteNft6PEi1X/XmdIY86sI
p3sYwy7O1t2jHEYaAnYmIvfGTmHk+J/KYR8ZVgQDWbf0WM1Wqc8fPLA2VCgh5nI1
so9VQOHPe6icaMU5hXDPsleUDx0WLvovaqhy4QdT9AzP+nIkkbibLdaOPAd5zMF6
wZpNw9Pyih2wXQVstw2a4Ngn0+DgLWVIiZXjnY4BAYMLtjAS4DoPIuDkYO8+NoyH
klWSXnK5f1SKV7hyl92W8zo2u3J/IK9Azkkh024CmIiRTNE1259mabgpzL9gxcz4
iB08onqbGbeCymJAN6/I3pOPtx5n6Ic=
-----END CERTIFICATE-----
Generated at Wed Feb 5 14:41:33 2025 by rpki-client