Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3E0FEEBC552211ED9DD3FB89F1222468.roa
File: 3E0FEEBC552211ED9DD3FB89F1222468.roa (raw, json)
Hash identifier: 4BYDk1/T8yaYX9kA7MwZt7+qL9pvFbjHCKo8CHzdkH4=
Subject key identifier: B3:77:90:36:4F:4E:3E:6B:3E:DC:D1:31:EA:4E:A0:E3:5D:19:36:37
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0A70
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3E0FEEBC552211ED9DD3FB89F1222468.roa
Signing time: Wed 26 Oct 2022 11:35:08 +0000
ROA not before: Wed 26 Oct 2022 11:35:04 +0000
ROA not after: Sun 27 Oct 2024 11:35:04 +0000
asID: 36352
IP address blocks: 154.16.116.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2672 (0xa70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 26 11:35:04 2022 GMT
Not After : Oct 27 11:35:04 2024 GMT
Subject: CN=63591b6c-d9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4b:95:77:8f:d1:6d:c3:a4:fd:46:f4:9b:e2:
de:11:82:78:36:ad:0d:57:83:bf:58:85:65:05:b0:
37:66:57:52:ef:ef:5d:a1:05:a5:82:f7:a6:04:5e:
2a:42:12:23:25:f4:aa:8c:ce:71:37:19:03:ae:42:
40:c3:a8:2c:69:bd:c4:d4:9e:a8:25:e8:cd:a1:a8:
e2:40:9f:91:8b:5f:58:7a:d8:2a:1a:d8:76:54:33:
28:a5:a3:43:8a:a5:4a:ba:8f:9a:c0:e9:be:d7:f6:
70:65:53:c8:97:c5:29:38:95:75:11:b2:b2:5e:04:
ec:f8:59:c0:f8:7a:7d:58:7e:20:47:5c:2e:33:07:
d5:87:e4:03:a3:b2:12:c1:a4:45:ba:aa:4f:54:71:
0b:67:41:f7:87:8f:4f:7b:52:a5:2d:1a:d3:4f:57:
d4:d8:ad:92:da:fe:58:53:d3:50:aa:78:96:d2:fe:
36:1d:95:ee:c6:17:26:8c:0d:32:6a:b3:4a:ff:44:
3f:74:ba:fd:37:cc:24:26:01:15:68:3f:7d:73:cc:
5c:20:d6:0c:9f:6c:fe:e8:9e:f0:1d:1e:ac:97:ea:
57:fb:69:d3:01:e6:c8:9d:b9:91:13:5a:99:7e:d6:
60:16:c3:e8:4c:02:a5:27:e7:61:83:45:5e:b2:07:
fc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:77:90:36:4F:4E:3E:6B:3E:DC:D1:31:EA:4E:A0:E3:5D:19:36:37
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3E0FEEBC552211ED9DD3FB89F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.116.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:b7:43:ed:26:a8:64:47:96:56:cf:f8:0f:61:9b:f0:49:81:
4c:64:e6:28:e9:4f:56:64:dc:94:1d:fa:2c:3c:74:fa:46:55:
fd:cf:c6:0d:83:94:61:00:3e:4d:cc:53:aa:b1:c9:0a:d7:df:
88:71:08:29:be:7c:e2:d8:a6:f1:c5:e6:d0:6f:1b:ac:59:8b:
e7:16:09:52:d7:6e:52:95:43:41:ca:bd:c1:8d:55:0d:bf:5b:
0c:f3:07:09:cf:8d:3d:6e:a2:01:ec:b7:e8:6c:d8:5c:81:fa:
1e:6c:3f:cd:bb:72:c9:d0:39:10:0c:52:16:5a:b0:e5:86:b5:
f3:3f:3c:b7:5c:52:66:88:38:6a:fd:ba:9c:21:94:00:3f:bc:
cd:02:9a:54:e3:1e:51:fd:81:54:c5:a4:d6:db:23:b8:c8:36:
25:33:fc:7b:12:f7:29:48:e0:7c:07:01:65:5a:ab:ac:47:fc:
a4:2e:a4:c5:7d:db:b8:76:e1:6f:d7:61:20:d2:16:0a:1b:35:
e3:08:1c:08:19:13:b3:3c:15:22:30:59:b3:55:38:99:8c:d8:
b5:8c:77:ee:3a:2a:88:9d:7f:82:e7:3e:e1:e6:38:0d:ce:45:
0f:b9:66:31:aa:c9:f8:9b:c7:44:95:f0:f7:35:fa:29:4e:18:
b8:58:9a:9f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCnAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMjEwMjYxMTM1MDRaFw0yNDEwMjcxMTM1MDRaMBgxFjAU
BgNVBAMMDTYzNTkxYjZjLWQ5ZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDpS5V3j9Ftw6T9RvSb4t4Rgng2rQ1Xg79YhWUFsDdmV1Lv712hBaWC96YE
XipCEiMl9KqMznE3GQOuQkDDqCxpvcTUnqgl6M2hqOJAn5GLX1h62Coa2HZUMyil
o0OKpUq6j5rA6b7X9nBlU8iXxSk4lXURsrJeBOz4WcD4en1YfiBHXC4zB9WH5AOj
shLBpEW6qk9UcQtnQfeHj097UqUtGtNPV9TYrZLa/lhT01CqeJbS/jYdle7GFyaM
DTJqs0r/RD90uv03zCQmARVoP31zzFwg1gyfbP7onvAdHqyX6lf7adMB5siduZET
Wpl+1mAWw+hMAqUn52GDRV6yB/yzAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUs3eQ
Nk9OPms+3NEx6k6g410ZNjcwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzNFMEZFRUJDNTUyMjExRUQ5REQzRkI4OUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEHQwDQYJKoZIhvcNAQEL
BQADggEBAMi3Q+0mqGRHllbP+A9hm/BJgUxk5ijpT1Zk3JQd+iw8dPpGVf3Pxg2D
lGEAPk3MU6qxyQrX34hxCCm+fOLYpvHF5tBvG6xZi+cWCVLXblKVQ0HKvcGNVQ2/
WwzzBwnPjT1uogHst+hs2FyB+h5sP827csnQORAMUhZasOWGtfM/PLdcUmaIOGr9
upwhlAA/vM0CmlTjHlH9gVTFpNbbI7jINiUz/HsS9ylI4HwHAWVaq6xH/KQupMV9
27h24W/XYSDSFgobNeMIHAgZE7M8FSIwWbNVOJmM2LWMd+46Koidf4LnPuHmOA3O
RQ+5ZjGqyfibx0SV8Pc1+ilOGLhYmp8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org