Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/53B7D66A37F111EDB55750DAF1222468.roa
File: 53B7D66A37F111EDB55750DAF1222468.roa (raw, json)
Hash identifier: z1JVneekclkODXxf/Pv5fDgXWo1FPykvmi/Pm+D8vzE=
Subject key identifier: 6B:0E:87:4A:C1:6D:4F:12:78:B1:8E:8B:B8:39:9E:51:77:07:09:6F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 09A8
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/53B7D66A37F111EDB55750DAF1222468.roa
Signing time: Mon 19 Sep 2022 08:01:55 +0000
ROA not before: Mon 19 Sep 2022 08:01:51 +0000
ROA not after: Sat 21 Sep 2024 08:01:51 +0000
asID: 33387
IP address blocks: 154.16.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2472 (0x9a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 19 08:01:51 2022 GMT
Not After : Sep 21 08:01:51 2024 GMT
Subject: CN=632821f3-2ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:71:04:7c:bf:bb:83:b4:60:b5:36:01:af:86:
46:3a:73:3e:d1:e9:40:6c:47:60:e5:a9:6b:ba:81:
73:97:0e:19:63:38:7a:9c:50:6a:aa:61:15:34:7a:
fd:2f:cd:b1:d4:b9:a2:9c:c2:38:80:71:cd:e5:b4:
12:7c:39:71:28:89:a7:51:34:2d:18:53:68:3e:5f:
0d:b6:d7:48:6b:7a:86:b3:fb:fb:f2:32:e1:36:fc:
fe:89:18:80:2c:fc:9c:e0:25:4a:17:91:2d:4e:7d:
cb:af:5b:d1:ca:ae:11:75:51:26:b8:f6:c7:8d:42:
2f:d4:40:39:08:cc:cc:78:f4:a8:9d:50:65:31:76:
ef:34:27:3c:96:28:b8:14:f8:a7:ac:f5:5e:c0:b3:
4e:28:9b:3e:b7:bd:30:97:c2:7f:83:3c:26:15:68:
ed:04:af:50:a3:3e:05:7c:8a:17:cb:d6:b5:71:ba:
04:9e:6a:41:26:cc:5f:56:0c:07:d1:e6:2d:8b:4b:
ba:89:3e:ed:ec:6b:13:c2:0c:76:cf:41:f6:19:00:
18:4f:c8:55:69:04:da:5e:a5:ef:21:c1:b5:ce:2a:
dd:2b:b9:47:a9:45:ec:cb:f3:a5:bc:a4:3f:67:36:
e7:44:9e:5d:c0:40:eb:5e:d4:9e:38:42:03:78:a7:
74:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0E:87:4A:C1:6D:4F:12:78:B1:8E:8B:B8:39:9E:51:77:07:09:6F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/53B7D66A37F111EDB55750DAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.9.0/24
Signature Algorithm: sha256WithRSAEncryption
01:1c:0f:a6:25:b9:db:75:75:f0:15:db:bd:43:dc:72:e9:69:
15:e3:ca:20:b3:92:9a:6a:61:cb:ab:44:df:25:66:dd:4b:5a:
72:c3:67:49:4d:73:03:50:78:60:49:24:7e:29:f8:da:38:c0:
ff:8f:ad:ce:b6:a1:0e:d2:ca:64:d6:fd:d5:1a:fb:e3:62:28:
12:67:f9:94:0d:59:a4:69:83:3a:2b:8c:42:3f:ea:0b:a4:42:
fb:ba:c3:d8:48:f2:96:7e:3d:07:93:17:43:64:93:02:6e:15:
ac:d0:49:5b:08:af:a7:88:4b:59:b5:bc:6e:5f:e9:ee:44:b2:
6f:82:c2:a4:d5:57:0c:b2:0b:33:c8:c0:39:38:b9:b7:3a:c6:
e4:80:44:d6:40:35:6d:a1:77:4a:d4:cc:1a:a9:d5:90:a9:d9:
7e:15:a8:02:f1:1c:60:00:da:a7:0d:8d:57:5c:f6:5a:6b:3d:
91:f8:ff:4e:6a:ce:83:1d:6e:a7:08:46:54:ae:69:25:f7:9a:
3f:9e:06:53:fc:a8:63:d3:96:71:e2:1a:c0:9c:81:33:9f:f3:
da:81:1d:6f:bd:8e:67:25:48:f9:72:23:cc:16:e6:9b:f4:33:
c5:51:8f:e1:dc:6b:a3:4f:5f:40:dd:1c:a3:96:99:b4:32:24:
f0:12:29:ea
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCagwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMjA5MTkwODAxNTFaFw0yNDA5MjEwODAxNTFaMBgxFjAU
BgNVBAMMDTYzMjgyMWYzLTJjYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDscQR8v7uDtGC1NgGvhkY6cz7R6UBsR2DlqWu6gXOXDhljOHqcUGqqYRU0
ev0vzbHUuaKcwjiAcc3ltBJ8OXEoiadRNC0YU2g+Xw2210hreoaz+/vyMuE2/P6J
GIAs/JzgJUoXkS1OfcuvW9HKrhF1USa49seNQi/UQDkIzMx49KidUGUxdu80JzyW
KLgU+Kes9V7As04omz63vTCXwn+DPCYVaO0Er1CjPgV8ihfL1rVxugSeakEmzF9W
DAfR5i2LS7qJPu3saxPCDHbPQfYZABhPyFVpBNpepe8hwbXOKt0ruUepRezL86W8
pD9nNudEnl3AQOte1J44QgN4p3T/AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUaw6H
SsFtTxJ4sY6LuDmeUXcHCW8wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzUzQjdENjZBMzdGMTExRURCNTU3NTBEQUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEAkwDQYJKoZIhvcNAQEL
BQADggEBAAEcD6Yludt1dfAV271D3HLpaRXjyiCzkppqYcurRN8lZt1LWnLDZ0lN
cwNQeGBJJH4p+No4wP+Prc62oQ7SymTW/dUa++NiKBJn+ZQNWaRpgzorjEI/6guk
Qvu6w9hI8pZ+PQeTF0NkkwJuFazQSVsIr6eIS1m1vG5f6e5Esm+CwqTVVwyyCzPI
wDk4ubc6xuSARNZANW2hd0rUzBqp1ZCp2X4VqALxHGAA2qcNjVdc9lprPZH4/05q
zoMdbqcIRlSuaSX3mj+eBlP8qGPTlnHiGsCcgTOf89qBHW+9jmclSPlyI8wW5pv0
M8VRj+Hca6NPX0DdHKOWmbQyJPASKeo=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org