Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4C7512E4935F11EE8C65F243D25BE465.roa
File: 4C7512E4935F11EE8C65F243D25BE465.roa (raw, json)
Hash identifier: tS2IvVh++qNHrV07QPzxlNUxAIKP+qQ8QnNyNGtdouA=
Subject key identifier: 7E:97:BB:81:3F:0C:0F:BF:83:52:3A:A3:E0:EC:BB:F2:EF:C2:C4:EC
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 13BF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4C7512E4935F11EE8C65F243D25BE465.roa
Signing time: Tue 05 Dec 2023 11:13:21 +0000
ROA not before: Tue 05 Dec 2023 11:13:17 +0000
ROA not after: Fri 05 Dec 2025 11:13:17 +0000
asID: 984
IP address blocks: 154.16.213.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5055 (0x13bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Dec 5 11:13:17 2023 GMT
Not After : Dec 5 11:13:17 2025 GMT
Subject: CN=656f05d1-4cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:33:76:d0:b2:87:01:eb:53:77:26:2a:d1:e5:
a1:b9:ac:ee:c1:f9:61:9a:84:a3:47:99:c9:59:4e:
6f:2e:f8:df:b7:bb:ad:11:22:00:4d:23:cb:37:22:
fd:bf:49:16:3e:0f:21:1b:01:da:88:b5:b2:d0:87:
5c:b1:87:bd:41:d3:0d:28:70:f0:24:87:8d:2b:1d:
f7:05:ea:1b:90:61:dc:d3:4b:a6:9f:bf:7c:eb:a3:
cd:ee:6e:55:34:84:33:2f:bb:ca:86:4b:35:78:ac:
77:d0:e7:f1:50:f5:f4:b4:12:54:ea:62:2c:d8:60:
8a:9f:93:75:f6:de:be:6e:63:d6:48:cb:8f:4e:1a:
eb:c4:ca:ac:a2:c7:e6:cc:5a:f1:c4:01:be:ff:89:
bb:f8:3d:90:97:f8:89:e4:7d:59:9b:1a:fb:c4:5b:
8c:dc:7c:4d:c5:aa:55:c5:5c:4c:e3:3c:d9:ca:86:
85:0b:c6:a8:63:a6:38:73:9f:c6:6f:17:2c:ee:f6:
b2:4a:15:ad:4e:4d:22:3b:9f:52:e5:8d:0e:9b:be:
c6:23:79:0a:62:ec:1c:b4:39:ea:9c:35:d1:b4:d0:
1c:1c:79:35:f9:31:ba:37:d6:6e:89:c0:c3:d8:06:
41:f4:1c:5c:c4:bb:2d:4f:65:f3:48:ad:68:56:43:
c8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:97:BB:81:3F:0C:0F:BF:83:52:3A:A3:E0:EC:BB:F2:EF:C2:C4:EC
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4C7512E4935F11EE8C65F243D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.213.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:4f:21:6f:ea:ee:9d:53:99:26:f1:ad:96:20:c4:4f:e9:3a:
9f:50:77:ca:4b:00:b4:7d:9d:51:50:78:c3:c3:b1:8a:6a:e8:
74:8b:d5:b9:f8:9c:aa:c2:57:78:a5:00:38:f2:bc:1e:94:44:
83:82:64:1e:cb:70:07:be:5f:1f:29:0b:4c:91:98:cc:c8:45:
1c:a0:54:a5:a8:45:48:dd:b3:d1:41:24:bc:96:aa:9a:63:88:
98:ff:b3:c1:0b:c7:bf:37:87:47:50:17:9d:cb:a6:d7:52:23:
2f:ab:b1:1f:34:22:dd:09:d0:0b:c9:89:95:62:9e:23:78:22:
c8:56:c3:8b:7b:65:45:18:07:30:0b:14:bc:d2:6f:f3:c3:b4:
ef:22:e3:fc:16:87:03:95:5b:ab:8e:ec:e7:46:ee:06:5d:05:
79:9c:1c:81:08:a3:a0:65:c5:d9:91:53:3b:43:07:92:79:2f:
f4:05:41:48:69:cb:b6:17:b4:4a:de:77:de:29:cc:55:b2:68:
6a:a3:45:cd:68:4c:13:b4:a2:33:5c:68:fc:6c:69:2a:f0:cc:
db:bf:22:54:04:57:6f:fe:12:19:af:0a:02:b6:a6:65:ad:fb:
67:5d:f6:68:61:53:43:fc:b5:9a:81:51:5a:ea:ba:73:80:fd:
6f:02:97:39
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICE78wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzEyMDUxMTEzMTdaFw0yNTEyMDUxMTEzMTdaMBgxFjAU
BgNVBAMTDTY1NmYwNWQxLTRjZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7M3bQsocB61N3JirR5aG5rO7B+WGahKNHmclZTm8u+N+3u60RIgBNI8s3
Iv2/SRY+DyEbAdqItbLQh1yxh71B0w0ocPAkh40rHfcF6huQYdzTS6afv3zro83u
blU0hDMvu8qGSzV4rHfQ5/FQ9fS0ElTqYizYYIqfk3X23r5uY9ZIy49OGuvEyqyi
x+bMWvHEAb7/ibv4PZCX+InkfVmbGvvEW4zcfE3FqlXFXEzjPNnKhoULxqhjpjhz
n8ZvFyzu9rJKFa1OTSI7n1LljQ6bvsYjeQpi7By0OeqcNdG00BwceTX5Mbo31m6J
wMPYBkH0HFzEuy1PZfNIrWhWQ8jJAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUfpe7
gT8MD7+DUjqj4Oy78u/CxOwwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzRDNzUxMkU0OTM1RjExRUU4QzY1RjI0M0QyNUJFNDY1LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaENUwDQYJKoZIhvcNAQEL
BQADggEBAD9PIW/q7p1TmSbxrZYgxE/pOp9Qd8pLALR9nVFQeMPDsYpq6HSL1bn4
nKrCV3ilADjyvB6URIOCZB7LcAe+Xx8pC0yRmMzIRRygVKWoRUjds9FBJLyWqppj
iJj/s8ELx783h0dQF53LptdSIy+rsR80It0J0AvJiZViniN4IshWw4t7ZUUYBzAL
FLzSb/PDtO8i4/wWhwOVW6uO7OdG7gZdBXmcHIEIo6BlxdmRUztDB5J5L/QFQUhp
y7YXtEred94pzFWyaGqjRc1oTBO0ojNcaPxsaSrwzNu/IlQEV2/+EhmvCgK2pmWt
+2dd9mhhU0P8tZqBUVrqunOA/W8Clzk=
-----END CERTIFICATE-----
Generated at Fri Dec 29 08:25:40 2023 by rpki-client on console-fra.rpki-client.org