Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/342DD99A045E11EEB7220C5E4AD9E6FC.roa
File: 342DD99A045E11EEB7220C5E4AD9E6FC.roa (raw, json)
Hash identifier: ULY8u1gajuRh50hgSK6XikFFqPzlqmvLZr8YaUjzUYA=
Subject key identifier: 96:F5:02:4C:C0:E6:1A:29:3E:C2:82:42:15:28:EF:15:4F:5E:C2:5C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0ECC
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/342DD99A045E11EEB7220C5E4AD9E6FC.roa
Signing time: Tue 06 Jun 2023 11:35:14 +0000
ROA not before: Tue 06 Jun 2023 11:35:11 +0000
ROA not after: Fri 06 Jun 2025 11:35:11 +0000
asID: 6939
IP address blocks: 154.16.248.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3788 (0xecc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 6 11:35:11 2023 GMT
Not After : Jun 6 11:35:11 2025 GMT
Subject: CN=647f19f2-e9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c0:db:13:2a:aa:96:2f:91:51:4f:64:21:69:
d1:70:f3:bd:2d:da:21:c7:d7:f4:06:e4:f8:a7:7f:
62:4b:1e:3c:79:0e:b1:57:16:06:40:b9:7d:ef:46:
76:6d:55:62:97:30:b2:c5:5f:59:f2:2a:c3:f4:de:
7b:0f:f5:29:a8:d3:6a:f6:cc:6d:d2:09:ec:86:02:
94:1b:be:54:80:05:d6:1e:ba:f3:3e:13:e8:5a:8a:
da:8a:39:71:6f:94:cf:0e:05:78:8f:b3:92:48:b9:
d9:da:2f:2c:fc:36:6b:b0:b0:8e:74:7f:46:5e:68:
d1:21:29:f8:78:8f:0f:1d:23:9e:73:77:ff:64:dc:
5a:c3:73:d1:00:92:9d:38:59:67:69:ba:fe:e9:62:
1c:29:03:bd:e7:e8:22:32:f1:87:f6:f2:49:5f:34:
ed:43:2a:29:7b:48:e4:52:31:77:97:96:50:86:78:
1c:84:0f:dc:fa:e0:18:a6:93:9a:d5:fb:63:39:cc:
b6:80:ff:ac:a5:fb:b1:f0:96:9e:e4:3b:b1:34:d0:
5d:58:80:a0:e8:9d:a0:bd:2c:b2:f3:e5:85:23:c7:
2c:72:04:dd:f3:ca:64:fe:7f:12:6d:64:f2:33:33:
64:ce:7a:d3:ca:11:17:b3:b2:29:1e:97:68:93:9e:
00:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F5:02:4C:C0:E6:1A:29:3E:C2:82:42:15:28:EF:15:4F:5E:C2:5C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/342DD99A045E11EEB7220C5E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.248.0/24
Signature Algorithm: sha256WithRSAEncryption
43:06:bd:d9:39:ef:4a:77:7b:94:69:97:30:87:02:b5:bd:3e:
6e:25:61:11:37:01:5e:e6:9b:10:ce:f3:28:03:c1:0e:17:de:
9f:54:53:33:7e:ab:6e:8f:49:db:7a:c6:bd:95:86:c4:7d:ad:
40:94:56:ae:c8:0a:77:42:92:6b:ad:b8:f3:53:f2:1d:3c:90:
f6:8c:92:24:bb:6c:6d:a8:8b:0f:08:3a:aa:22:4d:41:07:79:
aa:ac:a6:17:86:2b:76:5c:56:d3:3e:d4:47:81:7e:e3:94:a7:
6c:09:cd:30:31:65:b0:c8:68:28:56:51:de:6c:7e:42:c1:80:
9e:36:6d:c8:24:f0:2a:d1:e3:84:0b:b9:4f:9a:5b:7a:fc:6d:
46:34:aa:62:25:db:ba:d9:f4:ca:45:76:92:4e:cf:17:cf:1e:
6e:36:05:61:5a:98:83:ee:f7:2f:d2:5e:eb:7b:0b:e2:1e:28:
c9:41:f5:08:04:55:3f:06:5c:39:8c:9c:5a:73:67:44:64:b7:
74:96:e9:60:02:a7:24:1c:2a:fb:59:bd:98:51:3d:bf:0f:ae:
96:14:cd:06:f1:55:7c:16:00:47:2b:86:da:9b:3e:de:77:a5:
be:c2:1a:e4:4b:96:a4:53:29:1e:2e:58:24:26:b9:41:9a:5d:
b2:d9:39:e7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDswwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA2MDYxMTM1MTFaFw0yNTA2MDYxMTM1MTFaMBgxFjAU
BgNVBAMTDTY0N2YxOWYyLWU5ZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNwNsTKqqWL5FRT2QhadFw870t2iHH1/QG5Pinf2JLHjx5DrFXFgZAuX3v
RnZtVWKXMLLFX1nyKsP03nsP9Smo02r2zG3SCeyGApQbvlSABdYeuvM+E+haitqK
OXFvlM8OBXiPs5JIudnaLyz8NmuwsI50f0ZeaNEhKfh4jw8dI55zd/9k3FrDc9EA
kp04WWdpuv7pYhwpA73n6CIy8Yf28klfNO1DKil7SORSMXeXllCGeByED9z64Bim
k5rV+2M5zLaA/6yl+7Hwlp7kO7E00F1YgKDonaC9LLLz5YUjxyxyBN3zymT+fxJt
ZPIzM2TOetPKERezsikel2iTngCLAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUlvUC
TMDmGik+woJCFSjvFU9ewlwwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzM0MkREOTlBMDQ1RTExRUVCNzIyMEM1RTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEPgwDQYJKoZIhvcNAQEL
BQADggEBAEMGvdk570p3e5RplzCHArW9Pm4lYRE3AV7mmxDO8ygDwQ4X3p9UUzN+
q26PSdt6xr2VhsR9rUCUVq7ICndCkmutuPNT8h08kPaMkiS7bG2oiw8IOqoiTUEH
eaqspheGK3ZcVtM+1EeBfuOUp2wJzTAxZbDIaChWUd5sfkLBgJ42bcgk8CrR44QL
uU+aW3r8bUY0qmIl27rZ9MpFdpJOzxfPHm42BWFamIPu9y/SXut7C+IeKMlB9QgE
VT8GXDmMnFpzZ0Rkt3SW6WACpyQcKvtZvZhRPb8PrpYUzQbxVXwWAEcrhtqbPt53
pb7CGuRLlqRTKR4uWCQmuUGaXbLZOec=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org