Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/58D75DFC0EB311EE9D3FAF144AD9E6FC.roa
File: 58D75DFC0EB311EE9D3FAF144AD9E6FC.roa (raw, json)
Hash identifier: zX07aSBCvVeIFkBTykfSBOqwSO0tLxiKJ4U6naaFj/o=
Subject key identifier: 63:D7:96:C7:BC:52:47:F8:2A:E6:7C:FA:BE:2E:FB:7B:D1:DA:D5:68
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0FB8
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/58D75DFC0EB311EE9D3FAF144AD9E6FC.roa
Signing time: Mon 19 Jun 2023 15:09:55 +0000
ROA not before: Mon 19 Jun 2023 15:09:51 +0000
ROA not after: Wed 18 Jun 2025 15:09:51 +0000
asID: 834
IP address blocks: 154.16.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4024 (0xfb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 19 15:09:51 2023 GMT
Not After : Jun 18 15:09:51 2025 GMT
Subject: CN=64906fc3-20a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6b:76:52:0b:f2:45:d6:d7:e7:28:84:82:0e:
b7:5f:16:f3:37:59:89:35:2f:8e:4f:4a:9a:a1:f7:
d4:b0:bc:50:75:83:51:38:3e:b5:4c:15:ce:3d:ec:
34:d8:0d:c9:ac:e4:b7:67:b5:3d:94:cb:2e:28:c7:
84:e2:14:07:d6:9c:05:b7:3f:be:9d:b9:71:65:39:
59:3c:85:51:c1:7f:b4:87:fa:cc:c7:10:5a:b1:5c:
ab:e6:11:9f:38:f3:69:ea:74:b0:fc:68:62:3a:15:
eb:35:0b:63:44:c8:b9:db:ba:59:0b:88:5e:be:ca:
bc:21:2d:28:c8:eb:54:4a:54:8b:36:67:54:dd:1c:
f7:c0:0f:fa:42:a0:b2:5d:58:0b:1f:92:38:0d:42:
f4:e5:e2:42:e7:b2:88:a7:3c:30:18:85:b6:d9:c0:
c6:73:1e:fc:b9:67:fc:73:58:32:00:81:87:26:15:
ea:b9:1d:24:71:f7:8c:46:0e:d6:7c:4e:5a:4c:dc:
d3:19:c6:57:09:f2:ac:94:7e:5a:be:2b:28:3c:56:
8c:9c:97:56:52:6b:cd:df:ef:3c:72:94:82:c2:ce:
24:0c:d9:5b:00:87:49:ed:ac:be:73:23:ca:ed:f0:
6d:99:82:a2:74:9b:dc:cf:b3:1c:f4:d4:34:ad:5b:
ff:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D7:96:C7:BC:52:47:F8:2A:E6:7C:FA:BE:2E:FB:7B:D1:DA:D5:68
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/58D75DFC0EB311EE9D3FAF144AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.91.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:5b:20:10:69:52:b9:8a:ac:98:dd:8f:49:6f:48:cd:af:c5:
23:83:7a:cf:0d:08:2f:ec:ab:fb:eb:ab:ca:8e:01:08:74:3b:
dd:0d:b2:c7:2b:25:aa:2e:ff:d4:14:f8:83:e3:55:9f:09:78:
8e:b8:ee:aa:b6:cc:5d:bb:6c:c2:b8:77:87:f4:ec:60:b3:bd:
b8:61:ac:fe:88:7a:39:4d:c8:18:f8:39:15:51:86:16:f2:57:
de:5e:c1:5c:e2:99:b5:83:e5:ef:c8:e2:00:3d:9d:9b:3e:d0:
5a:16:35:21:a3:ee:6e:24:e6:f6:51:0a:bf:37:56:11:9f:d0:
53:a0:b3:4f:e9:b6:62:da:c8:4d:1a:6e:ae:65:78:63:92:99:
82:ce:ff:12:b1:39:35:65:e5:d9:d2:ea:62:ac:43:db:7e:77:
00:86:c3:04:c0:17:f2:f2:45:72:29:40:47:a5:1a:f3:53:0e:
db:63:41:81:1a:0a:d2:cc:26:ff:dd:9f:65:18:3f:35:39:18:
30:3e:14:42:e2:61:53:7a:2d:9f:ad:4d:c9:1c:fa:a0:ca:1f:
d8:52:ea:34:35:22:dc:04:73:9d:0d:34:53:f0:52:aa:1a:14:
6b:a1:2a:5a:16:1f:2b:c5:7a:89:c6:48:e0:91:da:de:d8:82:
54:7b:30:37
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICD7gwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA2MTkxNTA5NTFaFw0yNTA2MTgxNTA5NTFaMBgxFjAU
BgNVBAMTDTY0OTA2ZmMzLTIwYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDaa3ZSC/JF1tfnKISCDrdfFvM3WYk1L45PSpqh99SwvFB1g1E4PrVMFc49
7DTYDcms5LdntT2Uyy4ox4TiFAfWnAW3P76duXFlOVk8hVHBf7SH+szHEFqxXKvm
EZ8482nqdLD8aGI6Fes1C2NEyLnbulkLiF6+yrwhLSjI61RKVIs2Z1TdHPfAD/pC
oLJdWAsfkjgNQvTl4kLnsoinPDAYhbbZwMZzHvy5Z/xzWDIAgYcmFeq5HSRx94xG
DtZ8TlpM3NMZxlcJ8qyUflq+Kyg8Voycl1ZSa83f7zxylILCziQM2VsAh0ntrL5z
I8rt8G2ZgqJ0m9zPsxz01DStW/+NAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUY9eW
x7xSR/gq5nz6vi77e9Ha1WgwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzU4RDc1REZDMEVCMzExRUU5RDNGQUYxNDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEFswDQYJKoZIhvcNAQEL
BQADggEBAJtbIBBpUrmKrJjdj0lvSM2vxSODes8NCC/sq/vrq8qOAQh0O90Nsscr
Jaou/9QU+IPjVZ8JeI647qq2zF27bMK4d4f07GCzvbhhrP6IejlNyBj4ORVRhhby
V95ewVzimbWD5e/I4gA9nZs+0FoWNSGj7m4k5vZRCr83VhGf0FOgs0/ptmLayE0a
bq5leGOSmYLO/xKxOTVl5dnS6mKsQ9t+dwCGwwTAF/LyRXIpQEelGvNTDttjQYEa
CtLMJv/dn2UYPzU5GDA+FELiYVN6LZ+tTckc+qDKH9hS6jQ1ItwEc50NNFPwUqoa
FGuhKloWHyvFeonGSOCR2t7YglR7MDc=
-----END CERTIFICATE-----
Generated at Mon Jul 31 07:03:16 2023 by rpki-client on console-fra.rpki-client.org