Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/32AAC6F2B43911EDADD2EF9DF1222468.roa
File: 32AAC6F2B43911EDADD2EF9DF1222468.roa (raw, json)
Hash identifier: ORzdKBYZbdMag3ea1AR4fZaMLCDzsd9Sl9SPPU20nnU=
Subject key identifier: A6:19:02:08:88:51:2C:BD:31:84:3D:DF:27:C2:85:37:B0:06:C8:DA
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0BED
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/32AAC6F2B43911EDADD2EF9DF1222468.roa
Signing time: Fri 24 Feb 2023 11:48:47 +0000
ROA not before: Fri 24 Feb 2023 11:48:44 +0000
ROA not after: Sat 22 Feb 2025 11:48:44 +0000
asID: 61317
IP address blocks: 154.16.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 May 2023 13:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3053 (0xbed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Feb 24 11:48:44 2023 GMT
Not After : Feb 22 11:48:44 2025 GMT
Subject: CN=63f8a41f-39a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:25:27:ae:c2:66:34:44:56:ad:77:7d:81:83:
9e:6b:58:4a:0e:b7:e5:e1:ba:f9:a2:27:88:46:85:
06:70:74:cb:72:ed:b9:2c:b0:17:04:0d:5e:ed:98:
f4:3d:9c:eb:39:ef:65:7b:05:ce:77:6d:a0:df:12:
86:be:6a:0d:8d:d3:3a:80:b2:bc:18:7b:e2:f2:23:
93:a0:a1:a7:f5:dc:13:02:f1:16:af:57:55:f2:30:
f2:18:f8:ed:52:a2:37:dc:98:83:69:4f:6e:5e:c6:
7c:fb:29:34:15:dc:6d:ae:83:b8:3b:a7:3c:35:fb:
1c:94:4b:26:c9:82:e2:2f:49:04:a0:0f:c1:8a:ad:
e0:25:5f:08:71:a0:8f:dd:32:42:36:e6:d5:36:62:
14:80:10:3c:82:37:02:59:81:0b:a8:8a:70:2b:6e:
40:66:1b:87:dc:b4:bd:7c:89:ec:33:2e:f6:28:eb:
66:d9:d2:57:99:a7:4d:cb:24:1b:b8:97:23:ed:28:
fc:9f:91:6a:58:54:85:6b:05:08:c9:68:4b:a0:cc:
c4:e7:e2:58:9b:7e:3e:f9:ea:45:52:fa:13:2c:33:
78:cd:2f:e2:e7:e5:14:a8:16:69:87:89:d8:a5:b5:
39:f9:38:4f:39:4d:26:ce:96:37:54:d3:c8:29:cd:
cd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:19:02:08:88:51:2C:BD:31:84:3D:DF:27:C2:85:37:B0:06:C8:DA
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/32AAC6F2B43911EDADD2EF9DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.16.0/24
Signature Algorithm: sha256WithRSAEncryption
94:e9:6c:d8:01:52:6b:51:41:ff:4b:d0:44:7d:df:cd:33:f1:
3d:07:dc:5f:99:5e:db:59:0a:ed:d0:3c:d1:06:5f:4b:9b:72:
d4:7c:3a:85:9c:96:f4:bb:7d:d2:ab:75:98:6c:bd:1a:53:74:
5d:87:06:9f:97:c0:f5:ff:b7:17:60:fa:a5:87:55:d6:64:3b:
54:3e:fa:52:45:af:57:47:d0:67:ea:28:33:f6:45:0f:41:33:
78:ba:54:7e:f0:6e:d5:e7:bd:0b:91:9b:f1:81:72:70:a7:d3:
64:5c:72:6d:23:d1:5f:06:01:af:f1:69:19:44:c0:f6:2e:1a:
ae:20:62:32:5a:ab:57:c0:4f:da:32:d9:77:c4:c6:c4:42:40:
31:27:7d:98:ae:78:a0:ae:9f:4f:7b:5a:99:02:d3:a8:bb:8d:
99:aa:5e:96:a0:79:7d:d0:72:97:fc:34:5b:0a:86:1f:da:7a:
cd:14:20:9d:7b:b8:6d:fc:9f:2c:e2:e4:2f:39:8d:a2:e8:24:
d9:13:57:b2:9d:9a:2b:1d:3c:53:d7:cd:46:e7:46:ee:c6:89:
97:81:a1:31:41:54:da:ae:d3:56:22:5e:40:53:53:10:c8:76:
47:34:18:1f:7b:30:65:2a:f7:7f:69:38:99:bf:db:fa:1f:b4:
70:67:90:63
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICC+0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzAyMjQxMTQ4NDRaFw0yNTAyMjIxMTQ4NDRaMBgxFjAU
BgNVBAMMDTYzZjhhNDFmLTM5YTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDBJSeuwmY0RFatd32Bg55rWEoOt+XhuvmiJ4hGhQZwdMty7bkssBcEDV7t
mPQ9nOs572V7Bc53baDfEoa+ag2N0zqAsrwYe+LyI5Ogoaf13BMC8RavV1XyMPIY
+O1SojfcmINpT25exnz7KTQV3G2ug7g7pzw1+xyUSybJguIvSQSgD8GKreAlXwhx
oI/dMkI25tU2YhSAEDyCNwJZgQuoinArbkBmG4fctL18iewzLvYo62bZ0leZp03L
JBu4lyPtKPyfkWpYVIVrBQjJaEugzMTn4libfj756kVS+hMsM3jNL+Ln5RSoFmmH
idiltTn5OE85TSbOljdU08gpzc2XAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUphkC
CIhRLL0xhD3fJ8KFN7AGyNowHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzMyQUFDNkYyQjQzOTExRURBREQyRUY5REYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEBAwDQYJKoZIhvcNAQEL
BQADggEBAJTpbNgBUmtRQf9L0ER9380z8T0H3F+ZXttZCu3QPNEGX0ubctR8OoWc
lvS7fdKrdZhsvRpTdF2HBp+XwPX/txdg+qWHVdZkO1Q++lJFr1dH0GfqKDP2RQ9B
M3i6VH7wbtXnvQuRm/GBcnCn02Rccm0j0V8GAa/xaRlEwPYuGq4gYjJaq1fAT9oy
2XfExsRCQDEnfZiueKCun097WpkC06i7jZmqXpageX3Qcpf8NFsKhh/aes0UIJ17
uG38nyzi5C85jaLoJNkTV7KdmisdPFPXzUbnRu7GiZeBoTFBVNqu01YiXkBTUxDI
dkc0GB97MGUq939pOJm/2/oftHBnkGM=
-----END CERTIFICATE-----
Generated at Wed Feb 5 14:48:10 2025 by rpki-client