Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2A9900D62B8111EEAA8B71444AD9E6FC.roa
File: 2A9900D62B8111EEAA8B71444AD9E6FC.roa (raw, json)
Hash identifier: in677QN5YpGfEy8QAa4KrmTDIm1ymsdeJUYhSsuf/Sw=
Subject key identifier: 74:5E:2F:C2:22:71:FE:7B:8C:D0:CE:36:BF:69:FD:2A:6F:DE:70:F7
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 10DA
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2A9900D62B8111EEAA8B71444AD9E6FC.roa
Signing time: Wed 26 Jul 2023 06:53:46 +0000
ROA not before: Wed 26 Jul 2023 06:53:43 +0000
ROA not after: Sat 26 Jul 2025 06:53:43 +0000
asID: 834
IP address blocks: 154.16.23.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4314 (0x10da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 26 06:53:43 2023 GMT
Not After : Jul 26 06:53:43 2025 GMT
Subject: CN=64c0c2fa-e440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7c:73:51:65:f7:40:32:c4:40:ad:5e:16:4c:
3c:e2:27:37:ee:f6:6b:58:ba:c2:e6:49:98:a0:77:
c1:22:f3:17:6b:c3:ae:e1:8f:24:31:bd:b8:c0:23:
20:95:f0:70:1f:b5:1f:aa:2c:69:ba:ad:de:98:af:
96:75:3c:1e:5b:96:f7:48:ef:fc:ef:88:d7:45:b8:
f5:0e:3d:5a:e4:0e:19:d9:c4:2e:d4:8f:91:e5:b3:
38:b9:b6:79:72:d8:27:9e:62:08:02:42:6f:74:2d:
0e:aa:49:68:da:f3:45:5b:09:09:44:7e:dd:5d:a7:
bb:fa:b3:65:9e:b8:c9:06:68:4e:ef:53:39:82:b8:
69:29:c1:da:07:e3:da:35:e6:34:0d:84:98:49:04:
30:ea:e5:0b:23:96:c0:ad:6e:0a:d8:0e:56:eb:e5:
88:0b:9b:78:b0:43:36:d6:85:c5:16:9b:b2:57:c5:
6f:13:bb:92:a9:55:c8:8f:71:a7:e4:1c:1c:0a:b4:
f9:20:6e:2d:fc:2d:87:13:ba:f2:3c:f3:0d:3c:01:
50:e6:61:c7:a0:0d:e6:bc:1e:cf:f9:6d:16:35:bb:
18:76:a5:c5:3f:55:4a:8f:6a:55:c4:a6:73:95:dc:
61:fd:1e:5d:dd:46:5c:01:e4:50:0d:62:40:49:15:
dc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5E:2F:C2:22:71:FE:7B:8C:D0:CE:36:BF:69:FD:2A:6F:DE:70:F7
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2A9900D62B8111EEAA8B71444AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.23.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:8e:02:9e:04:80:27:d6:bb:91:d7:ef:38:80:73:59:e3:55:
8b:63:14:0a:88:ad:35:18:d3:f3:c5:40:b1:c9:f9:74:4b:cf:
6b:d2:01:66:10:40:57:35:e7:8b:1e:4e:bc:86:18:7d:2d:f8:
3f:6a:d0:5a:b6:3c:ea:a7:0a:a1:f3:a2:eb:66:54:b2:cb:7d:
50:09:2d:54:42:73:e2:47:df:76:26:ee:0c:06:dc:e7:48:5f:
1d:30:d9:79:8a:fe:cb:a9:db:99:48:3e:b0:9f:ee:c0:ac:1f:
d3:78:5d:44:42:16:a0:eb:0e:fc:08:13:35:2e:11:42:d1:fe:
cc:d1:5b:cf:19:96:1d:c2:b4:ef:dd:01:5d:69:1c:5d:9f:20:
17:db:0f:cc:1d:fd:32:33:af:bb:00:7e:5b:b7:43:fe:11:65:
0e:95:c0:03:12:96:68:e6:92:92:19:e6:a5:9e:32:4d:d2:ea:
98:7c:92:1c:88:c0:89:83:90:3f:32:ed:eb:63:29:5e:7e:ef:
21:be:55:0c:11:8a:4f:dd:2e:84:7d:fb:00:2e:0d:2a:d4:4c:
3a:c2:7a:dd:1d:0e:1f:e1:2e:84:31:1c:6c:80:a3:b5:7a:9c:
67:65:44:f8:62:f2:80:ef:1b:b4:05:a4:cb:4f:db:35:cb:b4:
e6:55:6f:43
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICENowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA3MjYwNjUzNDNaFw0yNTA3MjYwNjUzNDNaMBgxFjAU
BgNVBAMTDTY0YzBjMmZhLWU0NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDmfHNRZfdAMsRArV4WTDziJzfu9mtYusLmSZigd8Ei8xdrw67hjyQxvbjA
IyCV8HAftR+qLGm6rd6Yr5Z1PB5blvdI7/zviNdFuPUOPVrkDhnZxC7Uj5Hlszi5
tnly2CeeYggCQm90LQ6qSWja80VbCQlEft1dp7v6s2WeuMkGaE7vUzmCuGkpwdoH
49o15jQNhJhJBDDq5QsjlsCtbgrYDlbr5YgLm3iwQzbWhcUWm7JXxW8Tu5KpVciP
cafkHBwKtPkgbi38LYcTuvI88w08AVDmYcegDea8Hs/5bRY1uxh2pcU/VUqPalXE
pnOV3GH9Hl3dRlwB5FANYkBJFdyFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUdF4v
wiJx/nuM0M42v2n9Km/ecPcwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzJBOTkwMEQ2MkI4MTExRUVBQThCNzE0NDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEBcwDQYJKoZIhvcNAQEL
BQADggEBAB+OAp4EgCfWu5HX7ziAc1njVYtjFAqIrTUY0/PFQLHJ+XRLz2vSAWYQ
QFc154seTryGGH0t+D9q0Fq2POqnCqHzoutmVLLLfVAJLVRCc+JH33Ym7gwG3OdI
Xx0w2XmK/sup25lIPrCf7sCsH9N4XURCFqDrDvwIEzUuEULR/szRW88Zlh3CtO/d
AV1pHF2fIBfbD8wd/TIzr7sAflu3Q/4RZQ6VwAMSlmjmkpIZ5qWeMk3S6ph8khyI
wImDkD8y7etjKV5+7yG+VQwRik/dLoR9+wAuDSrUTDrCet0dDh/hLoQxHGyAo7V6
nGdlRPhi8oDvG7QFpMtP2zXLtOZVb0M=
-----END CERTIFICATE-----
Generated at Sat Nov 25 11:53:59 2023 by rpki-client on console-ams.rpki-client.org