Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/342746943FA411EEBFD5A72A4AD9E6FC.roa
File: 342746943FA411EEBFD5A72A4AD9E6FC.roa (raw, json)
Hash identifier: FrFYlaNJPrcw2xa0/ScRcioB7K602tFvwZqmjfoEIhQ=
Subject key identifier: 34:51:18:B5:53:2E:77:7D:11:69:D9:A4:6F:4D:20:47:35:78:AF:C9
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1195
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/342746943FA411EEBFD5A72A4AD9E6FC.roa
Signing time: Sun 20 Aug 2023 21:54:58 +0000
ROA not before: Sun 20 Aug 2023 21:54:54 +0000
ROA not after: Wed 21 Aug 2024 21:54:54 +0000
asID: 834
IP address blocks: 154.16.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4501 (0x1195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 20 21:54:54 2023 GMT
Not After : Aug 21 21:54:54 2024 GMT
Subject: CN=64e28bb2-242b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7b:3c:92:28:fd:2b:b9:45:cb:cc:c4:ee:cf:
b1:2b:19:01:a5:1a:71:f4:c9:2b:67:c6:a0:e9:a8:
22:9f:14:e6:af:05:d6:ac:3c:5f:6e:25:d2:96:4c:
59:3e:4e:84:1d:82:f8:cd:00:ab:4d:17:49:41:32:
85:db:5e:0c:ed:2b:37:3b:4e:df:7d:37:7f:fb:78:
cd:7c:ea:50:8e:4a:22:9c:00:51:93:3d:16:78:79:
00:c0:56:a1:8f:91:7c:d8:a3:e6:ff:f8:e7:71:02:
c0:d8:d0:31:35:c1:bb:a7:07:bb:a4:5a:43:84:7f:
9d:e7:ed:1a:ef:df:1d:94:47:63:ab:fd:4b:a1:b2:
77:ca:8b:d2:f7:ed:ce:f3:48:1b:c1:d5:8b:e1:95:
f8:ad:94:60:30:19:23:04:97:3d:74:57:95:12:ac:
0d:84:c5:62:c3:89:72:62:2f:e6:55:f9:78:16:ce:
39:73:c5:30:7b:d8:a0:30:d1:53:04:63:fc:56:d0:
be:7d:77:6f:04:2b:50:8a:10:3a:83:00:7f:0f:f4:
36:f6:93:6d:10:a0:56:64:05:8b:ba:40:cb:e2:40:
0d:9f:3c:2d:30:00:5b:06:28:19:ea:e1:7d:af:fb:
39:81:5d:a8:c6:04:1b:2f:d6:0a:67:a8:28:05:18:
a7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:51:18:B5:53:2E:77:7D:11:69:D9:A4:6F:4D:20:47:35:78:AF:C9
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/342746943FA411EEBFD5A72A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.85.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:38:7a:45:2c:67:03:de:5f:76:91:7c:44:eb:db:40:0e:38:
64:4c:8d:02:e6:0a:4a:11:bf:73:64:70:c1:0c:81:e8:fc:1e:
e4:d3:a2:92:f8:01:42:dc:4e:a8:e7:e7:af:97:3f:f2:a5:0f:
b1:39:1e:6e:79:0a:5d:83:26:1d:53:cd:72:88:8a:03:d2:ca:
54:af:8b:b9:30:e6:88:1d:da:d1:fa:af:28:49:bc:92:3f:97:
bb:33:82:80:b7:87:d4:e3:fc:a7:53:f7:5f:17:7e:31:37:8a:
7c:d8:a1:0c:79:43:b7:10:46:46:48:a7:47:f5:79:10:8f:54:
c8:02:03:60:1c:6d:07:b6:96:80:9e:17:45:6e:24:6b:a8:5b:
a4:0b:67:e3:0c:cc:8d:47:18:5e:26:3c:af:3e:65:6d:d3:60:
03:62:5f:75:7a:fe:91:4d:cf:bf:f9:7d:6b:d0:4c:ab:87:83:
36:7b:ca:7e:ca:10:8e:5e:9d:ad:8b:a9:35:42:64:ef:cd:19:
18:d4:35:4a:80:21:1d:dc:42:f7:69:2f:86:e3:23:c7:8a:65:
95:80:3b:4b:1a:5d:37:e6:6b:08:e7:fb:0d:e3:47:5b:f9:0a:
43:f2:12:a6:3a:7f:67:58:8d:85:c9:25:b1:50:82:39:e0:cc:
e3:d6:89:5d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEZUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA4MjAyMTU0NTRaFw0yNDA4MjEyMTU0NTRaMBgxFjAU
BgNVBAMTDTY0ZTI4YmIyLTI0MmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQClezySKP0ruUXLzMTuz7ErGQGlGnH0yStnxqDpqCKfFOavBdasPF9uJdKW
TFk+ToQdgvjNAKtNF0lBMoXbXgztKzc7Tt99N3/7eM186lCOSiKcAFGTPRZ4eQDA
VqGPkXzYo+b/+OdxAsDY0DE1wbunB7ukWkOEf53n7Rrv3x2UR2Or/UuhsnfKi9L3
7c7zSBvB1YvhlfitlGAwGSMElz10V5USrA2ExWLDiXJiL+ZV+XgWzjlzxTB72KAw
0VMEY/xW0L59d28EK1CKEDqDAH8P9Db2k20QoFZkBYu6QMviQA2fPC0wAFsGKBnq
4X2v+zmBXajGBBsv1gpnqCgFGKcrAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUNFEY
tVMud30Radmkb00gRzV4r8kwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzM0Mjc0Njk0M0ZBNDExRUVCRkQ1QTcyQTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEFUwDQYJKoZIhvcNAQEL
BQADggEBAEo4ekUsZwPeX3aRfETr20AOOGRMjQLmCkoRv3NkcMEMgej8HuTTopL4
AULcTqjn56+XP/KlD7E5Hm55Cl2DJh1TzXKIigPSylSvi7kw5ogd2tH6ryhJvJI/
l7szgoC3h9Tj/KdT918XfjE3inzYoQx5Q7cQRkZIp0f1eRCPVMgCA2AcbQe2loCe
F0VuJGuoW6QLZ+MMzI1HGF4mPK8+ZW3TYANiX3V6/pFNz7/5fWvQTKuHgzZ7yn7K
EI5ena2LqTVCZO/NGRjUNUqAIR3cQvdpL4bjI8eKZZWAO0saXTfmawjn+w3jR1v5
CkPyEqY6f2dYjYXJJbFQgjngzOPWiV0=
-----END CERTIFICATE-----
Generated at Tue Sep 26 12:47:04 2023 by rpki-client on console-fra.rpki-client.org