Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4A710534B43A11ED92822DA1F1222468.roa
File: 4A710534B43A11ED92822DA1F1222468.roa (raw, json)
Hash identifier: Eehn/3/Dq1Z6hru4LRiAtXzugWnUbfCLp++OTJ5hwyw=
Subject key identifier: 14:B3:1E:D8:2C:24:89:C9:61:A7:04:EC:64:CF:54:D4:5D:FF:64:44
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0BF5
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4A710534B43A11ED92822DA1F1222468.roa
Signing time: Fri 24 Feb 2023 11:56:37 +0000
ROA not before: Fri 24 Feb 2023 11:56:33 +0000
ROA not after: Sat 22 Feb 2025 11:56:33 +0000
asID: 61317
IP address blocks: 154.16.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3061 (0xbf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 24 11:56:33 2023 GMT
Not After : Feb 22 11:56:33 2025 GMT
Subject: CN=63f8a5f5-a397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a7:62:c9:4b:ee:3a:3d:62:50:f1:81:56:df:
c8:a2:a0:2a:71:0f:bb:12:bf:30:22:ae:3a:f9:e5:
4f:d0:fe:df:72:ae:5f:dc:d3:00:dc:ee:44:bb:32:
fb:9c:81:44:dd:25:c6:88:86:a5:fd:73:80:d3:fb:
b0:17:32:68:39:c8:ed:1b:df:10:ce:15:0c:7d:d8:
59:84:ad:d1:5e:6c:62:e8:56:09:09:9b:9f:6d:b1:
43:40:a2:33:8a:bc:f7:a5:5f:f8:40:9a:62:38:8e:
11:c7:07:8f:55:ca:5c:a8:38:9e:38:6f:02:cc:e0:
3e:5a:75:5d:27:fb:67:93:0f:3f:df:45:22:74:6b:
63:6f:50:57:b2:f4:72:cb:a4:b2:8f:19:20:01:ea:
3d:c0:db:bc:7e:16:a0:5e:c9:ca:74:41:20:81:0d:
12:60:c0:ec:08:39:14:01:76:71:68:56:1d:a2:b6:
5a:95:09:7e:d7:21:08:8c:bc:8c:90:e6:08:e7:03:
94:bb:5d:4e:e2:55:35:fa:13:31:41:31:d7:5f:65:
7c:33:23:1f:3d:2d:9d:c7:e2:9d:de:b7:0c:b3:f1:
b1:b4:65:b0:f1:ec:45:2f:30:e6:fd:f5:1b:1d:85:
ab:f5:d6:b2:75:2e:40:43:4c:7e:27:f1:ab:23:bc:
85:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B3:1E:D8:2C:24:89:C9:61:A7:04:EC:64:CF:54:D4:5D:FF:64:44
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4A710534B43A11ED92822DA1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.25.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:d7:a2:91:ee:a1:f3:cb:26:dd:04:05:67:5e:04:07:a2:2b:
9a:9b:7c:93:40:fd:b5:a4:13:77:07:1f:12:81:39:84:0d:be:
6a:a8:b0:f7:bf:44:f1:4a:ec:b0:56:82:f4:2c:ce:68:dc:4d:
06:10:aa:5a:09:16:f5:08:a3:85:f4:94:a3:99:73:25:3f:99:
a2:80:83:2d:13:79:c7:58:a8:87:65:92:03:eb:c3:34:05:09:
d0:fa:e8:d7:20:2d:e2:e5:35:68:f1:e6:4b:e5:15:7a:ac:77:
a5:c7:77:54:c1:57:a4:46:d2:e5:33:76:bd:de:a2:1e:9d:18:
ec:c5:07:7b:54:09:7a:de:8d:d4:1b:0e:6d:30:0a:fe:2e:8f:
ba:e0:f3:3f:48:8d:2d:81:4b:4f:e6:47:28:15:95:55:61:5d:
1d:f4:b9:a4:a1:28:69:2a:71:2e:d9:0f:70:3b:e2:77:8d:bf:
bd:0e:4c:10:e0:1c:89:e5:4d:ab:0f:d5:2e:8b:55:25:37:ba:
0a:99:e3:4f:95:cd:a9:c4:2e:b1:fd:bf:a8:08:c4:c7:8d:89:
9f:2e:d2:5a:67:a8:41:76:83:2e:e9:06:14:9e:67:23:3e:77:
a6:8b:a6:57:2b:4f:57:06:b1:c5:71:65:fe:d6:84:7f:d9:2e:
e9:64:a4:3a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICC/UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzAyMjQxMTU2MzNaFw0yNTAyMjIxMTU2MzNaMBgxFjAU
BgNVBAMMDTYzZjhhNWY1LWEzOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrp2LJS+46PWJQ8YFW38iioCpxD7sSvzAirjr55U/Q/t9yrl/c0wDc7kS7
MvucgUTdJcaIhqX9c4DT+7AXMmg5yO0b3xDOFQx92FmErdFebGLoVgkJm59tsUNA
ojOKvPelX/hAmmI4jhHHB49VylyoOJ44bwLM4D5adV0n+2eTDz/fRSJ0a2NvUFey
9HLLpLKPGSAB6j3A27x+FqBeycp0QSCBDRJgwOwIORQBdnFoVh2itlqVCX7XIQiM
vIyQ5gjnA5S7XU7iVTX6EzFBMddfZXwzIx89LZ3H4p3etwyz8bG0ZbDx7EUvMOb9
9Rsdhav11rJ1LkBDTH4n8asjvIWLAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUFLMe
2CwkiclhpwTsZM9U1F3/ZEQwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzRBNzEwNTM0QjQzQTExRUQ5MjgyMkRBMUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEBkwDQYJKoZIhvcNAQEL
BQADggEBAGzXopHuofPLJt0EBWdeBAeiK5qbfJNA/bWkE3cHHxKBOYQNvmqosPe/
RPFK7LBWgvQszmjcTQYQqloJFvUIo4X0lKOZcyU/maKAgy0TecdYqIdlkgPrwzQF
CdD66NcgLeLlNWjx5kvlFXqsd6XHd1TBV6RG0uUzdr3eoh6dGOzFB3tUCXrejdQb
Dm0wCv4uj7rg8z9IjS2BS0/mRygVlVVhXR30uaShKGkqcS7ZD3A74neNv70OTBDg
HInlTasP1S6LVSU3ugqZ40+VzanELrH9v6gIxMeNiZ8u0lpnqEF2gy7pBhSeZyM+
d6aLplcrT1cGscVxZf7WhH/ZLulkpDo=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org