Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3C9D08D8D9BD11ED9B467403306D8C1D.roa
File: 3C9D08D8D9BD11ED9B467403306D8C1D.roa (raw, json)
Hash identifier: KlQklOFS2yddR/YvQpQM8qEeOuB80OUjcAjwsgdpE8Y=
Subject key identifier: 34:0D:46:BC:E2:78:4E:4A:BC:A9:5E:5C:C1:D4:C7:A6:9D:9F:AE:B2
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0D4C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3C9D08D8D9BD11ED9B467403306D8C1D.roa
Signing time: Thu 13 Apr 2023 05:37:11 +0000
ROA not before: Thu 13 Apr 2023 05:37:06 +0000
ROA not after: Tue 15 Apr 2025 05:37:06 +0000
asID: 834
IP address blocks: 154.16.186.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3404 (0xd4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 13 05:37:06 2023 GMT
Not After : Apr 15 05:37:06 2025 GMT
Subject: CN=64379507-c43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5d:8a:e5:53:a5:fb:7d:a1:7f:df:95:50:03:
32:6e:0d:f9:aa:47:25:f8:53:df:39:b9:0a:fa:77:
98:19:5b:09:f8:4f:49:58:cd:e5:f2:26:83:57:90:
c3:1e:77:83:05:76:c6:59:79:cd:be:7a:90:61:07:
71:f5:d0:7c:95:29:9a:83:ba:c0:5b:ca:38:d2:0a:
59:8a:5c:1f:11:42:f8:16:34:e7:ad:67:0c:42:ef:
85:66:05:2e:b3:73:df:e9:0f:7c:df:1f:50:07:f9:
ff:7f:f0:7f:d9:d3:bb:6f:56:36:24:48:f1:53:56:
c3:43:19:a6:ff:90:50:99:40:ce:ef:be:b1:e0:3b:
70:71:c7:2a:1b:5a:3c:4c:3a:fc:a1:20:eb:83:73:
9d:52:8b:1b:9c:9f:57:3d:42:9e:a9:cc:b8:7c:e4:
d5:99:e7:12:e5:f1:24:77:ed:f6:3c:8b:66:e5:f8:
55:d1:3c:70:de:22:d2:13:d6:13:81:80:c2:14:9f:
e9:05:b3:c5:07:53:b1:13:1c:bf:80:c9:6a:2b:2b:
e0:fe:10:a8:5a:0e:e5:28:86:49:cb:f3:3c:36:c5:
46:f1:8b:eb:88:47:08:c6:e0:92:90:d3:96:8e:c7:
d4:90:7c:34:f8:55:87:a3:38:e2:e2:1b:d5:f4:37:
f0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0D:46:BC:E2:78:4E:4A:BC:A9:5E:5C:C1:D4:C7:A6:9D:9F:AE:B2
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3C9D08D8D9BD11ED9B467403306D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.186.0/24
Signature Algorithm: sha256WithRSAEncryption
07:69:62:7f:7f:61:8f:cd:60:6e:fc:f4:0a:de:0f:76:1f:ef:
ae:ba:d7:f4:72:45:37:65:d2:60:14:65:1b:13:19:59:e9:68:
eb:f0:54:d0:6f:9d:d7:b6:01:f8:78:36:50:bd:f8:b9:c5:74:
e6:04:7a:04:97:5a:70:de:14:e1:04:6b:18:1c:de:58:2b:a1:
81:d1:5b:05:9a:0e:2d:ea:f3:11:b9:99:18:a9:42:1a:39:79:
d1:4f:c6:ae:35:b3:06:b7:6f:a9:7c:e3:5a:af:ca:2b:84:bd:
c5:2e:9e:3b:0f:1c:9e:04:6c:6b:b4:eb:fc:c9:19:b2:ce:ea:
b3:0b:38:72:5d:d6:9b:10:3c:12:64:b4:4b:9b:0b:73:6b:54:
e3:75:8b:1d:db:b8:70:04:9f:c0:8f:bd:15:df:d5:38:d7:06:
48:30:eb:96:ab:c6:d4:50:79:d7:11:64:d6:62:71:12:56:d2:
26:ef:2e:f2:e6:59:59:52:c1:f6:26:b5:ac:45:67:9d:17:84:
03:c2:d1:4e:da:8a:43:d5:2d:2e:d0:ca:30:07:d3:38:da:ce:
58:00:28:ec:3b:2c:72:08:35:ce:9a:62:59:67:d6:c7:9c:c8:
87:b7:62:1b:de:b8:fa:b3:17:2e:72:6c:e1:f2:b7:dc:4b:c3:
f4:d2:f5:93
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDUwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA0MTMwNTM3MDZaFw0yNTA0MTUwNTM3MDZaMBgxFjAU
BgNVBAMMDTY0Mzc5NTA3LWM0M2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGXYrlU6X7faF/35VQAzJuDfmqRyX4U985uQr6d5gZWwn4T0lYzeXyJoNX
kMMed4MFdsZZec2+epBhB3H10HyVKZqDusBbyjjSClmKXB8RQvgWNOetZwxC74Vm
BS6zc9/pD3zfH1AH+f9/8H/Z07tvVjYkSPFTVsNDGab/kFCZQM7vvrHgO3Bxxyob
WjxMOvyhIOuDc51Sixucn1c9Qp6pzLh85NWZ5xLl8SR37fY8i2bl+FXRPHDeItIT
1hOBgMIUn+kFs8UHU7ETHL+AyWorK+D+EKhaDuUohknL8zw2xUbxi+uIRwjG4JKQ
05aOx9SQfDT4VYejOOLiG9X0N/ApAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUNA1G
vOJ4Tkq8qV5cwdTHpp2frrIwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzNDOUQwOEQ4RDlCRDExRUQ5QjQ2NzQwMzMwNkQ4QzFELnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaELowDQYJKoZIhvcNAQEL
BQADggEBAAdpYn9/YY/NYG789AreD3Yf76661/RyRTdl0mAUZRsTGVnpaOvwVNBv
nde2Afh4NlC9+LnFdOYEegSXWnDeFOEEaxgc3lgroYHRWwWaDi3q8xG5mRipQho5
edFPxq41swa3b6l841qvyiuEvcUunjsPHJ4EbGu06/zJGbLO6rMLOHJd1psQPBJk
tEubC3NrVON1ix3buHAEn8CPvRXf1TjXBkgw65arxtRQedcRZNZicRJW0ibvLvLm
WVlSwfYmtaxFZ50XhAPC0U7aikPVLS7QyjAH0zjazlgAKOw7LHIINc6aYlln1sec
yIe3YhveuPqzFy5ybOHyt9xLw/TS9ZM=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org