Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2F76DD02B8FA11ED8F929CFAF1222468.roa
File: 2F76DD02B8FA11ED8F929CFAF1222468.roa (raw, json)
Hash identifier: T7T5iaHtGHJjVIm3ez1u5rrLRbhBCTX5SBq0hnba0RY=
Subject key identifier: 64:FD:C5:F6:17:34:99:0A:63:05:78:01:D4:09:C5:B3:B0:96:3D:F4
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0CC7
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2F76DD02B8FA11ED8F929CFAF1222468.roa
Signing time: Thu 02 Mar 2023 13:00:20 +0000
ROA not before: Thu 02 Mar 2023 13:00:16 +0000
ROA not after: Sat 01 Mar 2025 13:00:16 +0000
asID: 61317
IP address blocks: 154.16.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Apr 2024 18:19:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3271 (0xcc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 2 13:00:16 2023 GMT
Not After : Mar 1 13:00:16 2025 GMT
Subject: CN=64009de4-5632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a9:34:7f:67:d5:fd:1a:36:fc:22:0e:69:d0:
f7:f7:90:60:f9:0a:08:18:fa:39:c4:47:21:c4:2b:
e1:d2:77:43:c4:72:31:be:68:63:ca:71:01:8c:4c:
6c:9a:04:18:cc:64:8e:6a:eb:9e:4d:b0:73:4c:1d:
a4:1f:c0:59:95:46:97:13:96:98:96:5f:86:7c:b7:
fb:1c:c5:41:dd:89:ee:c4:75:a1:85:3c:ff:fb:59:
2f:27:8f:b1:06:77:aa:89:a3:8e:42:ef:74:41:34:
7c:f7:52:ea:73:e1:ab:2d:51:df:91:72:0e:3c:ac:
1d:fe:22:c8:fe:cc:3b:a8:e3:1a:77:52:d1:db:3a:
59:f7:19:74:2c:3b:9b:9e:4f:87:3c:2c:46:af:54:
20:f8:97:c5:dd:13:cc:13:a4:de:9c:9b:9e:50:7f:
4c:2b:01:5b:dd:a5:c7:48:c4:46:a7:5b:41:19:76:
8f:b5:a2:0f:53:9e:fa:73:0f:1a:39:29:b5:03:54:
05:10:c6:60:8e:f9:61:72:83:9d:60:be:3c:c3:2a:
53:2c:d3:47:7a:7b:30:c2:43:af:7c:fb:d9:0a:be:
9c:6e:e5:78:1d:4c:74:4f:23:48:22:88:6c:3f:ad:
07:7f:0a:36:b8:95:d2:bb:ab:6b:5d:39:05:c1:54:
5d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FD:C5:F6:17:34:99:0A:63:05:78:01:D4:09:C5:B3:B0:96:3D:F4
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2F76DD02B8FA11ED8F929CFAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.249.0/24
Signature Algorithm: sha256WithRSAEncryption
09:51:dc:84:4a:84:ed:18:a2:e5:68:3f:fa:5a:34:02:b5:90:
76:af:21:d5:9f:f2:83:74:70:ba:48:18:34:50:e1:de:1c:08:
3f:45:37:fc:ed:a3:5e:b1:ca:6e:2d:1a:1a:47:56:bc:29:f5:
d5:ed:47:09:f5:d7:1c:ff:bc:b1:9b:8b:d7:21:89:ee:d1:70:
92:79:bc:19:57:54:57:f0:31:02:dc:ee:bd:9c:af:92:db:94:
43:d5:7f:e9:4b:99:e9:5c:17:21:a1:3f:e6:54:ab:bf:2b:a4:
94:d4:06:ca:d0:86:e6:3c:7d:f3:20:bd:74:4f:22:fb:fb:db:
87:fe:58:62:ef:b8:7c:45:4b:e4:eb:c0:a8:a5:d9:66:43:83:
2d:5f:f4:5a:af:7f:bb:1e:80:01:3d:48:a3:39:3d:4b:6a:ef:
17:b3:4e:20:08:f2:da:b5:55:1f:78:5a:cf:e2:d0:a5:22:52:
38:8c:25:a3:6d:1d:9e:a9:5a:93:c2:dd:26:ea:91:0f:f7:83:
0c:f0:77:de:6a:76:85:6a:71:b0:ab:d5:b9:13:f6:b6:71:d7:
db:58:ab:26:c0:7f:64:a8:41:8f:1b:d0:05:78:a6:9a:73:16:
7e:95:3f:6b:29:68:f8:e5:38:f2:68:9c:99:e7:eb:f5:d0:19:
dc:21:7f:13
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDMcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzAzMDIxMzAwMTZaFw0yNTAzMDExMzAwMTZaMBgxFjAU
BgNVBAMMDTY0MDA5ZGU0LTU2MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCUqTR/Z9X9Gjb8Ig5p0Pf3kGD5CggY+jnERyHEK+HSd0PEcjG+aGPKcQGM
TGyaBBjMZI5q655NsHNMHaQfwFmVRpcTlpiWX4Z8t/scxUHdie7EdaGFPP/7WS8n
j7EGd6qJo45C73RBNHz3Uupz4astUd+Rcg48rB3+Isj+zDuo4xp3UtHbOln3GXQs
O5ueT4c8LEavVCD4l8XdE8wTpN6cm55Qf0wrAVvdpcdIxEanW0EZdo+1og9Tnvpz
Dxo5KbUDVAUQxmCO+WFyg51gvjzDKlMs00d6ezDCQ698+9kKvpxu5XgdTHRPI0gi
iGw/rQd/Cja4ldK7q2tdOQXBVF2RAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUZP3F
9hc0mQpjBXgB1AnFs7CWPfQwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzJGNzZERDAyQjhGQTExRUQ4RjkyOUNGQUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEPkwDQYJKoZIhvcNAQEL
BQADggEBAAlR3IRKhO0YouVoP/paNAK1kHavIdWf8oN0cLpIGDRQ4d4cCD9FN/zt
o16xym4tGhpHVrwp9dXtRwn11xz/vLGbi9chie7RcJJ5vBlXVFfwMQLc7r2cr5Lb
lEPVf+lLmelcFyGhP+ZUq78rpJTUBsrQhuY8ffMgvXRPIvv724f+WGLvuHxFS+Tr
wKil2WZDgy1f9Fqvf7segAE9SKM5PUtq7xezTiAI8tq1VR94Ws/i0KUiUjiMJaNt
HZ6pWpPC3SbqkQ/3gwzwd95qdoVqcbCr1bkT9rZx19tYqybAf2SoQY8b0AV4pppz
Fn6VP2spaPjlOPJonJnn6/XQGdwhfxM=
-----END CERTIFICATE-----
Generated at Wed Apr 17 21:32:34 2024 by rpki-client on console-ams.rpki-client.org