Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/33CB84C0077911EEBACDA8464AD9E6FC.roa
File: 33CB84C0077911EEBACDA8464AD9E6FC.roa (raw, json)
Hash identifier: ac9oeT+9CLyc1IVDXfHRsHP/heH3rPw2vamlV7okn+k=
Subject key identifier: 50:66:C1:B0:55:80:2B:FF:6D:2B:E8:B0:1A:23:45:69:8B:17:E1:F0
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F1F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/33CB84C0077911EEBACDA8464AD9E6FC.roa
Signing time: Sat 10 Jun 2023 10:26:04 +0000
ROA not before: Sat 10 Jun 2023 10:26:00 +0000
ROA not after: Tue 10 Jun 2025 10:26:00 +0000
asID: 199035
IP address blocks: 154.16.28.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3871 (0xf1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 10 10:26:00 2023 GMT
Not After : Jun 10 10:26:00 2025 GMT
Subject: CN=64844fbc-e88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:29:67:c5:14:ce:84:52:e6:c4:79:e7:17:31:
89:b8:5b:0a:a9:8b:ff:4e:b5:c2:88:50:77:1e:7d:
ca:0e:4b:85:c3:b6:8e:47:ce:19:2f:cf:90:f2:f8:
68:c8:f0:a1:20:0f:1f:b3:02:24:ca:2b:23:b2:61:
7e:84:53:8b:18:22:59:c4:ae:9a:a8:fb:ee:21:0a:
f4:23:6b:fa:1c:0e:ed:a6:b2:45:04:b0:b4:c8:20:
04:d1:04:52:4f:dc:9b:fb:23:64:dc:61:c5:5c:b6:
7c:3c:19:e8:67:6b:5e:69:bd:7a:e7:c2:15:2d:39:
af:45:4f:dd:1d:93:81:fb:ab:5b:7c:4d:17:e7:43:
b2:d6:1c:77:0b:66:60:58:69:35:57:eb:38:4b:77:
e8:33:17:64:b4:10:93:68:eb:68:73:80:4d:1f:3c:
72:e3:5c:86:43:4a:de:f8:6d:7e:65:71:be:41:5c:
ef:b8:e3:3c:85:83:5a:34:33:66:40:c4:5a:47:f4:
9e:f6:b4:d3:e0:4b:7d:24:88:0e:95:17:57:91:8b:
e0:cd:99:6f:a7:21:61:a2:0c:a7:e6:66:16:79:4a:
65:d1:98:0b:5f:3f:ed:b4:46:65:0c:1c:b7:37:87:
29:e7:67:6e:bf:64:b7:02:49:e1:22:af:ba:82:a7:
f9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:66:C1:B0:55:80:2B:FF:6D:2B:E8:B0:1A:23:45:69:8B:17:E1:F0
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/33CB84C0077911EEBACDA8464AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.28.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:ff:d4:3f:f1:88:57:c4:2a:7d:ab:71:05:a5:65:18:b7:4f:
39:bb:e9:be:52:10:ee:d9:43:b1:f9:1a:cf:d1:ab:19:df:10:
3b:f2:b9:f7:6d:92:3e:12:52:a2:15:5c:dd:ec:fd:05:21:55:
99:f3:7b:bd:45:93:0b:61:d0:80:30:4f:02:6d:3e:4e:9e:5f:
62:76:36:40:67:35:00:66:2e:18:34:c4:99:28:3b:85:a9:bb:
f2:e2:11:80:cd:6d:6e:d8:c2:ac:00:dd:ad:d5:1f:09:35:d3:
8e:d2:f4:d2:62:aa:da:96:e8:14:13:bd:aa:21:24:fd:b3:51:
28:ac:82:41:08:02:aa:b0:14:e5:c5:e0:a1:05:85:0c:43:56:
f2:de:02:e8:f5:5b:9b:5a:e7:ae:d9:6f:9c:ef:6e:b9:b8:0f:
ee:2e:04:a2:e2:81:11:9c:7c:f9:ad:91:27:b2:fa:64:2e:c4:
44:47:ae:7b:65:16:da:5a:fb:5c:ff:c6:53:92:01:1b:9e:82:
d0:7f:26:82:80:2e:91:16:61:d1:4a:39:39:45:68:b1:67:95:
2c:d7:5b:d7:d9:70:1d:20:b5:85:81:94:7b:65:b1:fb:86:9d:
ea:0f:92:06:a9:28:1a:81:e2:62:c7:b9:a8:15:be:2c:c1:89:
87:a0:b3:aa
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDx8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA2MTAxMDI2MDBaFw0yNTA2MTAxMDI2MDBaMBgxFjAU
BgNVBAMTDTY0ODQ0ZmJjLWU4OGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDWKWfFFM6EUubEeecXMYm4Wwqpi/9OtcKIUHcefcoOS4XDto5Hzhkvz5Dy
+GjI8KEgDx+zAiTKKyOyYX6EU4sYIlnErpqo++4hCvQja/ocDu2mskUEsLTIIATR
BFJP3Jv7I2TcYcVctnw8Gehna15pvXrnwhUtOa9FT90dk4H7q1t8TRfnQ7LWHHcL
ZmBYaTVX6zhLd+gzF2S0EJNo62hzgE0fPHLjXIZDSt74bX5lcb5BXO+44zyFg1o0
M2ZAxFpH9J72tNPgS30kiA6VF1eRi+DNmW+nIWGiDKfmZhZ5SmXRmAtfP+20RmUM
HLc3hynnZ26/ZLcCSeEir7qCp/nDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUUGbB
sFWAK/9tK+iwGiNFaYsX4fAwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzMzQ0I4NEMwMDc3OTExRUVCQUNEQTg0NjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEBwwDQYJKoZIhvcNAQEL
BQADggEBAKn/1D/xiFfEKn2rcQWlZRi3Tzm76b5SEO7ZQ7H5Gs/RqxnfEDvyufdt
kj4SUqIVXN3s/QUhVZnze71Fkwth0IAwTwJtPk6eX2J2NkBnNQBmLhg0xJkoO4Wp
u/LiEYDNbW7YwqwA3a3VHwk1047S9NJiqtqW6BQTvaohJP2zUSisgkEIAqqwFOXF
4KEFhQxDVvLeAuj1W5ta567Zb5zvbrm4D+4uBKLigRGcfPmtkSey+mQuxERHrntl
Ftpa+1z/xlOSARuegtB/JoKALpEWYdFKOTlFaLFnlSzXW9fZcB0gtYWBlHtlsfuG
neoPkgapKBqB4mLHuagVvizBiYegs6o=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org