Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/349D65E2B69011ED89DAAFB1F1222468.roa
File: 349D65E2B69011ED89DAAFB1F1222468.roa (raw, json)
Hash identifier: 9PRb+fUq6/REFz2Fq4q1lLoaytc7xUMYQ4j+AiuRCLQ=
Subject key identifier: 40:04:5E:B3:CC:27:6F:AC:E1:34:C6:4A:61:E8:C6:E9:D8:65:97:86
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0C32
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/349D65E2B69011ED89DAAFB1F1222468.roa
Signing time: Mon 27 Feb 2023 11:16:39 +0000
ROA not before: Mon 27 Feb 2023 11:16:35 +0000
ROA not after: Thu 27 Feb 2025 11:16:35 +0000
asID: 61317
IP address blocks: 154.16.68.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3122 (0xc32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 27 11:16:35 2023 GMT
Not After : Feb 27 11:16:35 2025 GMT
Subject: CN=63fc9117-693f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ae:42:6b:9a:c7:16:a6:4c:02:f1:8f:63:01:
27:2a:98:bc:98:0c:85:43:e6:56:8f:92:de:b0:a3:
0c:97:e6:a4:5d:de:f5:3d:a7:c8:d4:74:bb:be:48:
13:d7:d1:04:4d:c4:07:25:d6:f3:99:0f:36:e9:01:
55:ed:3c:24:68:56:94:03:17:a0:b3:5e:b3:9a:1c:
0f:60:3b:fd:6d:2a:bd:fc:0c:14:98:7c:34:fd:5d:
6e:7e:dd:f8:16:88:a7:12:ba:09:c4:16:99:e9:bd:
6f:20:66:e4:e0:81:62:74:02:6a:a3:64:8c:15:be:
8f:ac:f5:99:43:a3:f4:ce:74:44:9d:b4:38:96:fd:
43:c2:e2:b7:e2:a3:76:b6:0d:3e:df:1e:96:5f:60:
e8:38:cc:da:95:3e:b5:d4:a6:8b:a4:d7:5c:81:64:
e1:06:ff:1d:fd:25:4b:fb:e3:15:dd:c0:a7:fc:9c:
51:fe:f4:02:c4:c2:25:17:63:b5:05:e5:06:04:fe:
aa:69:1c:59:dd:bc:ee:56:aa:bd:0b:27:b6:cc:1d:
24:d2:ef:3e:54:4b:62:22:b1:69:d3:5e:76:27:f7:
d6:a9:89:ea:b5:ed:e2:09:a5:46:12:5d:a8:af:cd:
b7:e9:7c:ea:cd:cc:7a:1a:9b:3c:88:a4:2b:1e:f5:
1e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:04:5E:B3:CC:27:6F:AC:E1:34:C6:4A:61:E8:C6:E9:D8:65:97:86
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/349D65E2B69011ED89DAAFB1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.68.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:55:d3:ef:0d:7a:2a:ba:97:17:3f:ed:d7:1c:d2:10:e5:e3:
e3:4e:46:7b:e3:d2:3e:55:b0:cc:6b:5f:e2:90:31:4a:3e:c8:
58:3a:90:be:06:94:7d:7b:97:bf:82:e4:cd:a3:80:e2:9f:04:
e6:c8:52:2a:7d:87:36:b1:f5:53:ed:b5:e7:08:85:d0:91:33:
07:ad:5a:c5:ac:a4:4a:0f:55:f2:0f:1d:8d:1c:6b:0f:4e:7a:
6a:34:19:1d:d6:f3:c3:d6:e9:cc:a5:6a:5a:51:3e:87:55:3d:
4e:7a:52:cf:22:89:65:c1:c8:3c:e4:6d:d3:ed:ae:ae:7a:09:
16:2e:12:f7:e6:fb:80:d1:f1:6d:0e:78:40:2d:d6:e8:fb:e5:
6d:24:33:ec:9f:04:ca:94:40:af:c5:f6:e2:ad:77:ff:8b:c1:
28:53:72:fb:61:90:94:4a:1d:50:fb:38:40:f2:d2:03:34:1b:
51:d4:4a:95:7b:d4:ef:67:50:ac:ef:7b:ab:0d:8f:85:59:a3:
78:45:47:9c:9d:ac:d9:32:a3:e4:a9:04:97:8e:06:35:48:eb:
53:70:6b:80:31:65:67:a7:95:37:81:38:58:8e:8e:9d:a1:cd:
97:06:df:4d:d2:b5:ec:eb:40:d2:60:f0:d3:44:90:ae:8f:18:
07:dd:2b:f2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDDIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzAyMjcxMTE2MzVaFw0yNTAyMjcxMTE2MzVaMBgxFjAU
BgNVBAMMDTYzZmM5MTE3LTY5M2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7rkJrmscWpkwC8Y9jAScqmLyYDIVD5laPkt6wowyX5qRd3vU9p8jUdLu+
SBPX0QRNxAcl1vOZDzbpAVXtPCRoVpQDF6CzXrOaHA9gO/1tKr38DBSYfDT9XW5+
3fgWiKcSugnEFpnpvW8gZuTggWJ0AmqjZIwVvo+s9ZlDo/TOdESdtDiW/UPC4rfi
o3a2DT7fHpZfYOg4zNqVPrXUpouk11yBZOEG/x39JUv74xXdwKf8nFH+9ALEwiUX
Y7UF5QYE/qppHFndvO5Wqr0LJ7bMHSTS7z5US2IisWnTXnYn99apieq17eIJpUYS
XaivzbfpfOrNzHoamzyIpCse9R59AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUQARe
s8wnb6zhNMZKYejG6dhll4YwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzM0OUQ2NUUyQjY5MDExRUQ4OURBQUZCMUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEEQwDQYJKoZIhvcNAQEL
BQADggEBALxV0+8Neiq6lxc/7dcc0hDl4+NORnvj0j5VsMxrX+KQMUo+yFg6kL4G
lH17l7+C5M2jgOKfBObIUip9hzax9VPttecIhdCRMwetWsWspEoPVfIPHY0caw9O
emo0GR3W88PW6cylalpRPodVPU56Us8iiWXByDzkbdPtrq56CRYuEvfm+4DR8W0O
eEAt1uj75W0kM+yfBMqUQK/F9uKtd/+LwShTcvthkJRKHVD7OEDy0gM0G1HUSpV7
1O9nUKzve6sNj4VZo3hFR5ydrNkyo+SpBJeOBjVI61Nwa4AxZWenlTeBOFiOjp2h
zZcG303StezrQNJg8NNEkK6PGAfdK/I=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org