Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/56213906FFD711EDAA8B940E4AD9E6FC.roa
File: 56213906FFD711EDAA8B940E4AD9E6FC.roa (raw, json)
Hash identifier: vqXmlnVs2Rn+ANestFaxsn2uTl9fBUqEY/T5lTeEL4E=
Subject key identifier: 56:FD:AA:0D:AE:9E:FC:2E:58:25:1F:16:D2:35:BC:1E:5E:A9:A6:0D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0E43
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/56213906FFD711EDAA8B940E4AD9E6FC.roa
Signing time: Wed 31 May 2023 17:19:45 +0000
ROA not before: Wed 31 May 2023 17:19:41 +0000
ROA not after: Sat 31 May 2025 17:19:41 +0000
asID: 834
IP address blocks: 154.16.12.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3651 (0xe43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 31 17:19:41 2023 GMT
Not After : May 31 17:19:41 2025 GMT
Subject: CN=647781b1-37c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5e:ec:46:b5:f1:ac:4f:19:d7:a1:8a:57:27:
97:fc:5d:47:04:9a:6a:a5:c2:b8:d2:6b:c9:f6:09:
39:0f:d7:b9:52:9e:df:ba:20:26:76:e3:32:a3:a1:
72:4c:54:0a:67:c6:bb:f3:04:ee:b7:6d:4a:27:47:
b8:60:65:1d:68:0b:25:59:14:6d:c5:f0:c9:7d:69:
f5:68:20:48:21:18:5e:2b:74:25:8b:08:5c:04:68:
63:2e:2a:9f:cc:0e:ec:e3:2e:2f:93:da:2f:8e:c0:
b7:17:11:1d:54:0c:f0:b6:b7:63:8c:d9:fd:fc:83:
ce:cb:d3:3e:2e:15:b8:72:01:dd:ab:59:84:be:e1:
1e:82:5a:6a:97:db:89:55:8e:de:ad:6a:60:6e:65:
65:76:23:2d:59:ba:6e:6e:a5:57:d7:70:9a:27:b2:
8b:90:6c:14:f1:69:41:5c:6b:d8:8d:f7:7e:87:03:
86:06:fa:30:2d:4b:97:ac:54:22:9e:c2:0c:e8:81:
ae:69:46:c0:e9:f7:75:4a:be:2f:57:52:4c:ed:33:
10:07:a8:42:4f:d5:f3:a6:da:2b:47:5b:47:25:7b:
e8:be:8c:7c:1b:c3:1f:2f:6f:19:4f:a2:f4:f3:e8:
5e:11:24:9b:fa:3c:28:f5:60:40:c1:d9:97:dc:cd:
31:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FD:AA:0D:AE:9E:FC:2E:58:25:1F:16:D2:35:BC:1E:5E:A9:A6:0D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/56213906FFD711EDAA8B940E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.12.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:e0:c6:49:1e:3e:6d:64:10:97:f3:66:13:f7:3f:f7:26:35:
0a:cd:78:bb:45:51:bf:64:4b:77:f2:c8:b0:8a:1e:68:d3:82:
f3:74:30:2f:6a:9e:90:5d:7f:8b:27:18:ca:5d:17:92:8a:6f:
57:d4:b9:e5:dc:26:e5:13:12:8d:51:ec:41:98:d2:51:42:e9:
a6:5e:a2:23:ee:62:23:0d:f1:1a:11:12:40:34:1c:32:db:b8:
b8:c4:47:3f:be:62:5c:0d:fc:39:52:b5:fc:69:af:14:f7:e3:
63:d5:c5:f2:55:49:bd:8f:e8:0b:5a:4f:db:bc:47:4a:63:cc:
7a:d1:5d:10:1c:aa:cb:c4:ac:14:7c:01:52:fd:85:eb:8b:bc:
85:15:f8:a1:33:01:43:94:16:3a:67:ab:42:29:bb:61:7c:f7:
d6:e0:c5:5d:df:0d:e2:dd:c4:7e:26:1e:0f:ca:4c:fd:3e:e6:
97:06:bf:74:f6:ed:b3:8e:83:1d:6a:d2:1c:89:72:0b:a3:09:
73:2c:9e:3f:75:db:3c:d4:6b:79:c0:9c:c0:02:1e:ec:a6:26:
04:d3:d3:94:b3:42:74:77:04:43:43:b5:bf:70:4d:a6:03:4f:
e6:03:e2:f4:f1:92:d1:8f:5a:06:f5:d2:e1:13:18:cd:f2:c9:
e1:df:0f:cb
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDkMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA1MzExNzE5NDFaFw0yNTA1MzExNzE5NDFaMBgxFjAU
BgNVBAMTDTY0Nzc4MWIxLTM3YzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPXuxGtfGsTxnXoYpXJ5f8XUcEmmqlwrjSa8n2CTkP17lSnt+6ICZ24zKj
oXJMVApnxrvzBO63bUonR7hgZR1oCyVZFG3F8Ml9afVoIEghGF4rdCWLCFwEaGMu
Kp/MDuzjLi+T2i+OwLcXER1UDPC2t2OM2f38g87L0z4uFbhyAd2rWYS+4R6CWmqX
24lVjt6tamBuZWV2Iy1Zum5upVfXcJonsouQbBTxaUFca9iN936HA4YG+jAtS5es
VCKewgzoga5pRsDp93VKvi9XUkztMxAHqEJP1fOm2itHW0cle+i+jHwbwx8vbxlP
ovTz6F4RJJv6PCj1YEDB2ZfczTGZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUVv2q
Da6e/C5YJR8W0jW8Hl6ppg0wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzU2MjEzOTA2RkZENzExRURBQThCOTQwRTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEAwwDQYJKoZIhvcNAQEL
BQADggEBAM7gxkkePm1kEJfzZhP3P/cmNQrNeLtFUb9kS3fyyLCKHmjTgvN0MC9q
npBdf4snGMpdF5KKb1fUueXcJuUTEo1R7EGY0lFC6aZeoiPuYiMN8RoREkA0HDLb
uLjERz++YlwN/DlStfxprxT342PVxfJVSb2P6AtaT9u8R0pjzHrRXRAcqsvErBR8
AVL9heuLvIUV+KEzAUOUFjpnq0Ipu2F899bgxV3fDeLdxH4mHg/KTP0+5pcGv3T2
7bOOgx1q0hyJcgujCXMsnj912zzUa3nAnMACHuymJgTT05SzQnR3BENDtb9wTaYD
T+YD4vTxktGPWgb10uETGM3yyeHfD8s=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org