Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4C907714EE4111EDA3496A814AD9E6FC.roa
File: 4C907714EE4111EDA3496A814AD9E6FC.roa (raw, json)
Hash identifier: 4E1drVkVZB7hPjL6KCFCtHkpEtbVMcgwYv3t167a0yA=
Subject key identifier: 05:6E:FB:42:A8:9D:17:4C:E7:56:90:21:C0:70:AC:67:93:61:1F:0F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0DA2
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4C907714EE4111EDA3496A814AD9E6FC.roa
Signing time: Tue 09 May 2023 08:12:54 +0000
ROA not before: Tue 09 May 2023 08:12:51 +0000
ROA not after: Thu 08 May 2025 08:12:51 +0000
asID: 834
IP address blocks: 154.16.52.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3490 (0xda2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 9 08:12:51 2023 GMT
Not After : May 8 08:12:51 2025 GMT
Subject: CN=645a0086-7a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7a:08:7b:bb:e3:29:0e:0f:82:87:9d:44:2f:
de:e9:42:dd:de:d3:55:29:ac:e6:a6:c3:d4:58:33:
fc:89:de:a8:52:9e:fe:54:77:31:5d:86:41:92:69:
20:a2:3e:71:74:dd:1a:c8:44:88:ca:dc:cd:bd:f5:
0c:a3:a3:65:b3:df:6b:a6:cc:97:2b:0a:11:33:90:
99:14:f8:66:06:b7:26:78:47:38:3a:9a:3b:bc:58:
7d:92:17:1a:20:cc:45:99:25:f7:a2:de:6a:f7:a4:
38:29:aa:59:84:ed:49:dd:43:e3:fb:ff:87:42:93:
2c:38:4d:3c:ce:c9:a6:29:ed:19:96:72:eb:23:95:
3c:7d:4e:23:ce:e7:0a:e4:14:6f:9f:04:f4:60:76:
89:04:5e:4a:11:aa:37:fe:ed:cd:19:3d:9c:b5:6a:
18:12:a4:fb:33:73:a9:5b:a8:c9:e7:bf:cf:f8:34:
fb:ae:e9:ab:a7:7f:c0:d0:97:9f:48:ef:11:6d:50:
6e:88:ab:eb:77:e6:df:31:aa:36:ec:f1:b6:9d:7e:
31:3d:70:9e:1e:23:9f:c5:9b:fd:32:a2:0d:15:e0:
f3:0d:ec:cb:c7:a7:e9:4f:0c:34:2b:28:6d:cc:9a:
f1:2c:a8:ca:2d:f4:a4:86:a8:2e:2e:9a:89:45:65:
c5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6E:FB:42:A8:9D:17:4C:E7:56:90:21:C0:70:AC:67:93:61:1F:0F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4C907714EE4111EDA3496A814AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.52.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:9d:9c:f0:74:ed:59:1d:fe:ad:4b:08:c2:30:43:d1:6c:6e:
0d:45:9f:38:6c:a1:2c:ce:8b:98:d3:f6:b1:85:e7:ea:cc:75:
00:63:b6:93:5c:58:b2:db:f0:73:ef:57:d5:be:9a:42:aa:89:
92:8c:16:25:a7:a0:46:5b:ee:95:2b:ae:87:ef:0e:6b:dd:66:
e2:26:34:68:e2:94:d5:4d:f7:2c:20:88:67:fc:b0:e5:a6:d5:
d3:67:69:36:e6:83:c9:a6:4b:07:d9:75:eb:4f:b7:56:c9:99:
06:08:74:2c:48:eb:4a:2f:7f:13:8b:68:49:cf:84:51:ea:b4:
7e:ec:e2:fe:2a:0d:60:2e:67:c5:96:8c:7f:dd:fb:e2:1d:57:
66:ee:ed:cb:17:ff:8a:45:bb:b0:f5:7a:43:ae:fe:f7:cf:66:
81:2e:60:0d:40:96:5c:6c:92:83:6b:39:1b:c3:42:d7:04:76:
44:a0:95:bf:7f:a0:67:9b:42:d4:72:ca:bc:24:37:5a:fa:fa:
14:99:f2:b0:af:46:14:c8:f9:03:80:11:c9:24:27:78:e2:50:
00:14:04:f7:e4:d4:e4:e6:ba:b1:2d:67:88:7d:a9:55:17:37:
51:f1:76:2f:2c:8a:2c:00:1a:d4:a0:7c:4c:6c:da:8d:55:2b:
41:0b:be:af
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDaIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA1MDkwODEyNTFaFw0yNTA1MDgwODEyNTFaMBgxFjAU
BgNVBAMTDTY0NWEwMDg2LTdhMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDregh7u+MpDg+Ch51EL97pQt3e01UprOamw9RYM/yJ3qhSnv5UdzFdhkGS
aSCiPnF03RrIRIjK3M299Qyjo2Wz32umzJcrChEzkJkU+GYGtyZ4Rzg6mju8WH2S
FxogzEWZJfei3mr3pDgpqlmE7UndQ+P7/4dCkyw4TTzOyaYp7RmWcusjlTx9TiPO
5wrkFG+fBPRgdokEXkoRqjf+7c0ZPZy1ahgSpPszc6lbqMnnv8/4NPuu6aunf8DQ
l59I7xFtUG6Iq+t35t8xqjbs8badfjE9cJ4eI5/Fm/0yog0V4PMN7MvHp+lPDDQr
KG3MmvEsqMot9KSGqC4umolFZcX3AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUBW77
QqidF0znVpAhwHCsZ5NhHw8wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzRDOTA3NzE0RUU0MTExRURBMzQ5NkE4MTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEDQwDQYJKoZIhvcNAQEL
BQADggEBAF+dnPB07Vkd/q1LCMIwQ9Fsbg1FnzhsoSzOi5jT9rGF5+rMdQBjtpNc
WLLb8HPvV9W+mkKqiZKMFiWnoEZb7pUrrofvDmvdZuImNGjilNVN9ywgiGf8sOWm
1dNnaTbmg8mmSwfZdetPt1bJmQYIdCxI60ovfxOLaEnPhFHqtH7s4v4qDWAuZ8WW
jH/d++IdV2bu7csX/4pFu7D1ekOu/vfPZoEuYA1AllxskoNrORvDQtcEdkSglb9/
oGebQtRyyrwkN1r6+hSZ8rCvRhTI+QOAEckkJ3jiUAAUBPfk1OTmurEtZ4h9qVUX
N1Hxdi8siiwAGtSgfExs2o1VK0ELvq8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org