Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/435B3EEE3D7511EEAC6F354B4AD9E6FC.roa
File: 435B3EEE3D7511EEAC6F354B4AD9E6FC.roa (raw, json)
Hash identifier: d36PP2b5XrPKqR26TeXgwho/R5Z9xj8QhFndZQx30wA=
Subject key identifier: EA:77:73:6F:BE:7C:89:72:E2:B9:2A:86:94:3A:E2:32:DF:0C:23:E5
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1189
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/435B3EEE3D7511EEAC6F354B4AD9E6FC.roa
Signing time: Fri 18 Aug 2023 03:13:55 +0000
ROA not before: Fri 18 Aug 2023 03:13:51 +0000
ROA not after: Mon 18 Aug 2025 03:13:51 +0000
asID: 834
IP address blocks: 154.16.56.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4489 (0x1189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 18 03:13:51 2023 GMT
Not After : Aug 18 03:13:51 2025 GMT
Subject: CN=64dee1f2-de4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:54:0e:3c:8b:6d:f9:93:da:05:3f:16:34:
09:25:0b:94:51:af:e2:15:ad:08:6b:e6:62:a3:0d:
7c:3a:cc:53:70:ee:3f:25:69:48:73:ac:5a:81:89:
fd:a0:22:e6:7f:9e:58:6e:c2:ff:4b:f9:67:1a:4a:
64:c1:81:e8:47:f5:24:d8:d3:7d:04:fa:b6:5e:e1:
74:92:fe:ff:4c:df:bb:ae:22:7b:b9:97:ff:97:92:
d1:be:11:37:b5:b7:fa:07:54:73:89:9e:80:ea:90:
17:60:62:2e:cb:3f:83:85:93:cf:33:f1:26:22:75:
9b:9d:fd:5d:5e:4c:35:50:e4:ae:46:da:50:f9:85:
f7:10:b1:b3:7d:c9:57:3b:7e:ca:f3:a8:49:0b:b4:
a4:24:d8:d0:bc:c2:a9:56:13:8a:c2:b3:fe:e6:d7:
a0:bd:e5:7d:ee:f4:d6:00:2d:67:97:fa:ab:74:8d:
f2:c5:d6:88:27:df:23:bd:5c:f6:93:74:37:2b:13:
e7:23:85:6a:7e:92:c0:7a:fa:91:a1:83:ff:cf:95:
60:61:de:0d:82:1d:86:61:52:d9:87:f0:cd:b9:ad:
ba:92:1c:ce:bb:f9:c4:3a:81:c0:5c:ca:e5:94:a0:
cb:de:18:94:86:6f:6f:9f:27:18:95:77:51:af:7a:
e0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:77:73:6F:BE:7C:89:72:E2:B9:2A:86:94:3A:E2:32:DF:0C:23:E5
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/435B3EEE3D7511EEAC6F354B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.56.0/24
Signature Algorithm: sha256WithRSAEncryption
03:1d:b9:3d:85:d7:55:d3:19:ed:5c:dd:ba:79:df:dc:93:af:
13:cb:0f:71:8f:76:b9:f7:03:16:63:73:8f:0f:02:63:19:6c:
9b:1d:ba:8b:57:f3:b9:c7:31:46:5d:0f:fb:e5:92:29:4f:f4:
87:d1:1e:92:f4:b6:39:5f:ab:03:17:49:0d:b9:b1:17:dc:15:
88:3f:9a:92:6a:47:bb:74:cf:63:1f:12:08:5f:44:2a:00:8d:
a0:e7:d2:b3:96:b4:53:37:7e:a3:59:b5:70:9d:34:4b:59:59:
19:e2:10:39:c0:d8:05:1b:03:e1:b0:00:77:e7:9f:04:d5:0e:
ef:bd:40:91:bf:63:78:c3:88:52:1a:83:63:62:86:14:4d:63:
a0:e4:2d:3d:30:df:6d:76:39:d5:fc:9d:8e:79:78:3f:4d:bb:
30:45:13:fd:5b:08:f0:61:94:df:04:45:07:0a:f8:d4:7e:13:
46:4d:af:59:01:ab:25:9e:14:d0:ef:d1:e4:17:11:09:40:93:
d0:4a:5f:32:ea:03:d1:e0:bd:c1:47:18:6c:05:54:26:75:a7:
2a:4c:9a:71:16:73:08:c1:d2:10:27:fe:38:a9:c7:8b:a7:3c:
46:d5:dd:8f:6c:f2:b4:8a:ec:f7:07:6f:8c:40:83:20:80:70:
48:86:50:c0
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEYkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA4MTgwMzEzNTFaFw0yNTA4MTgwMzEzNTFaMBgxFjAU
BgNVBAMTDTY0ZGVlMWYyLWRlNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5BFQOPItt+ZPaBT8WNAklC5RRr+IVrQhr5mKjDXw6zFNw7j8laUhzrFqB
if2gIuZ/nlhuwv9L+WcaSmTBgehH9STY030E+rZe4XSS/v9M37uuInu5l/+XktG+
ETe1t/oHVHOJnoDqkBdgYi7LP4OFk88z8SYidZud/V1eTDVQ5K5G2lD5hfcQsbN9
yVc7fsrzqEkLtKQk2NC8wqlWE4rCs/7m16C95X3u9NYALWeX+qt0jfLF1ogn3yO9
XPaTdDcrE+cjhWp+ksB6+pGhg//PlWBh3g2CHYZhUtmH8M25rbqSHM67+cQ6gcBc
yuWUoMveGJSGb2+fJxiVd1GveuApAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU6ndz
b758iXLiuSqGlDriMt8MI+UwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzQzNUIzRUVFM0Q3NTExRUVBQzZGMzU0QjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEDgwDQYJKoZIhvcNAQEL
BQADggEBAAMduT2F11XTGe1c3bp539yTrxPLD3GPdrn3AxZjc48PAmMZbJsduotX
87nHMUZdD/vlkilP9IfRHpL0tjlfqwMXSQ25sRfcFYg/mpJqR7t0z2MfEghfRCoA
jaDn0rOWtFM3fqNZtXCdNEtZWRniEDnA2AUbA+GwAHfnnwTVDu+9QJG/Y3jDiFIa
g2NihhRNY6DkLT0w3212OdX8nY55eD9NuzBFE/1bCPBhlN8ERQcK+NR+E0ZNr1kB
qyWeFNDv0eQXEQlAk9BKXzLqA9HgvcFHGGwFVCZ1pypMmnEWcwjB0hAn/jipx4un
PEbV3Y9s8rSK7PcHb4xAgyCAcEiGUMA=
-----END CERTIFICATE-----
Generated at Thu Aug 24 21:15:16 2023 by rpki-client on console-fra.rpki-client.org