Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4496E110E8E711ED82080A3A4AD9E6FC.roa
File: 4496E110E8E711ED82080A3A4AD9E6FC.roa (raw, json)
Hash identifier: YUYaVDhtlXTMhdG98DqJM2HfQXxyv+iGeqVZidpitRA=
Subject key identifier: AE:E1:EE:BD:11:CF:0A:74:E9:08:8A:56:48:E2:B9:07:6B:E6:9B:D8
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0D8C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4496E110E8E711ED82080A3A4AD9E6FC.roa
Signing time: Tue 02 May 2023 12:45:51 +0000
ROA not before: Tue 02 May 2023 12:45:46 +0000
ROA not after: Thu 01 May 2025 12:45:46 +0000
asID: 834
IP address blocks: 154.16.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3468 (0xd8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 2 12:45:46 2023 GMT
Not After : May 1 12:45:46 2025 GMT
Subject: CN=645105fe-fc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:11:70:e1:9b:66:dd:c3:93:fc:5e:80:b6:4a:
39:69:d9:71:06:84:0a:50:41:1c:ca:4f:05:1b:3a:
61:f3:f6:d5:44:cf:ce:36:91:6e:3b:3c:cb:76:64:
eb:20:28:a1:b7:af:88:d2:d0:bf:1d:04:82:21:3c:
02:92:5c:50:bd:a8:dc:3a:65:75:62:ba:f6:41:de:
34:fe:d6:5e:16:66:3d:80:ea:bf:05:f4:64:63:6b:
32:fd:89:14:f5:f6:6a:6e:03:b1:d0:13:79:d1:ee:
63:24:3a:05:ba:5b:79:0f:18:e6:b9:99:8e:8d:e3:
78:5f:11:c8:a3:c2:44:76:c6:cd:d6:6a:db:47:d9:
2b:31:2f:b7:3a:d2:da:ec:fe:ef:ee:db:4f:fa:2b:
b4:fd:ab:1d:96:78:43:0c:98:54:13:fd:b1:bf:b0:
83:1a:27:10:63:ce:0c:f4:3d:f5:67:49:c2:f5:8f:
3c:91:5a:f7:5c:d0:97:85:76:f7:3d:e5:d9:f6:55:
fa:94:34:d1:cd:37:13:fe:40:57:e7:5f:6f:7c:b6:
4e:79:b6:43:2c:75:49:79:b6:e2:02:21:06:34:2b:
45:c1:0d:fd:0c:32:ef:05:1a:38:d7:b0:7b:92:7c:
25:65:69:f1:22:0c:ce:bf:55:74:14:f1:18:67:bb:
7f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E1:EE:BD:11:CF:0A:74:E9:08:8A:56:48:E2:B9:07:6B:E6:9B:D8
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4496E110E8E711ED82080A3A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.106.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:16:81:0b:5e:91:32:ba:13:64:9a:ca:9e:fc:e7:34:8e:51:
8f:84:87:aa:94:1f:69:75:a3:03:96:32:81:42:38:2c:02:d3:
89:aa:3e:fb:10:ed:62:97:2c:d7:49:a2:98:95:17:83:f1:56:
ea:00:d9:bc:48:f4:f1:9f:aa:f2:da:d1:4b:27:2d:b3:e9:74:
01:39:2b:4b:6a:2e:4e:0a:06:09:0b:62:a2:20:73:4f:02:32:
d8:24:d5:c4:12:cc:6f:a3:3c:73:49:66:5a:f7:47:45:45:ff:
d6:06:7c:42:2e:c6:bb:32:1f:85:8b:0f:13:82:45:08:90:45:
37:6d:60:88:f8:b2:58:2d:68:44:f6:60:fa:5e:a4:29:a5:89:
a9:9d:20:db:bb:51:95:5f:39:99:8a:e5:66:8c:8f:58:6b:3b:
7a:fa:c1:e9:82:c7:55:ca:9b:58:ff:dd:28:bf:53:09:0d:b5:
2c:dc:ee:01:1e:ff:db:03:44:1f:6d:1d:02:aa:91:f1:46:60:
86:6b:60:fd:fc:7a:98:a4:63:7d:27:e6:ea:98:43:00:2d:4a:
36:ae:cb:29:4c:d6:e1:c3:7a:c4:d7:94:0b:ea:70:e3:09:9f:
34:99:63:69:2e:29:76:5d:f1:9a:4e:34:4c:f4:63:4b:31:76:
91:01:3d:d0
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDYwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA1MDIxMjQ1NDZaFw0yNTA1MDExMjQ1NDZaMBgxFjAU
BgNVBAMTDTY0NTEwNWZlLWZjM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCqEXDhm2bdw5P8XoC2Sjlp2XEGhApQQRzKTwUbOmHz9tVEz842kW47PMt2
ZOsgKKG3r4jS0L8dBIIhPAKSXFC9qNw6ZXViuvZB3jT+1l4WZj2A6r8F9GRjazL9
iRT19mpuA7HQE3nR7mMkOgW6W3kPGOa5mY6N43hfEcijwkR2xs3WattH2SsxL7c6
0trs/u/u20/6K7T9qx2WeEMMmFQT/bG/sIMaJxBjzgz0PfVnScL1jzyRWvdc0JeF
dvc95dn2VfqUNNHNNxP+QFfnX298tk55tkMsdUl5tuICIQY0K0XBDf0MMu8FGjjX
sHuSfCVlafEiDM6/VXQU8Rhnu3/TAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUruHu
vRHPCnTpCIpWSOK5B2vmm9gwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzQ0OTZFMTEwRThFNzExRUQ4MjA4MEEzQTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEGowDQYJKoZIhvcNAQEL
BQADggEBAGsWgQtekTK6E2Sayp785zSOUY+Eh6qUH2l1owOWMoFCOCwC04mqPvsQ
7WKXLNdJopiVF4PxVuoA2bxI9PGfqvLa0UsnLbPpdAE5K0tqLk4KBgkLYqIgc08C
Mtgk1cQSzG+jPHNJZlr3R0VF/9YGfEIuxrsyH4WLDxOCRQiQRTdtYIj4slgtaET2
YPpepCmliamdINu7UZVfOZmK5WaMj1hrO3r6wemCx1XKm1j/3Si/UwkNtSzc7gEe
/9sDRB9tHQKqkfFGYIZrYP38epikY30n5uqYQwAtSjauyylM1uHDesTXlAvqcOMJ
nzSZY2kuKXZd8ZpONEz0Y0sxdpEBPdA=
-----END CERTIFICATE-----
Generated at Fri Aug 18 03:43:17 2023 by rpki-client on console-ams.rpki-client.org