Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5C223A928E8111EE82A4C5D77D84E21B.roa
File: 5C223A928E8111EE82A4C5D77D84E21B.roa (raw, json)
Hash identifier: 2hqOtORLx/bn6YuneR9FODGJowmbl6deuozpGoYl7b4=
Subject key identifier: FF:25:DC:C6:77:1B:E1:1E:98:FA:88:9C:8A:57:0F:75:DC:80:D3:35
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1393
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5C223A928E8111EE82A4C5D77D84E21B.roa
Signing time: Wed 29 Nov 2023 06:34:34 +0000
ROA not before: Wed 29 Nov 2023 06:34:31 +0000
ROA not after: Sat 29 Nov 2025 06:34:31 +0000
asID: 984
IP address blocks: 154.16.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5011 (0x1393)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 29 06:34:31 2023 GMT
Not After : Nov 29 06:34:31 2025 GMT
Subject: CN=6566db7a-c826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3a:b6:34:68:13:72:34:21:46:84:b9:a1:93:
45:ef:3a:3e:32:bb:e1:75:aa:b5:a6:6e:ab:00:47:
30:63:45:62:6c:9a:bf:3d:79:a3:f3:da:4d:3d:1a:
38:94:0f:52:c9:7f:13:4d:a0:56:4f:71:46:41:f6:
82:29:ab:e0:a5:d3:c9:c9:c2:eb:40:01:96:e7:10:
51:55:70:b1:dd:0e:8c:e0:1a:1a:97:cc:70:85:71:
73:53:62:17:37:9e:f6:6f:cd:de:c4:16:2b:53:77:
1a:a6:a2:9e:79:8f:13:05:3a:5c:b8:e1:7c:7b:6d:
ec:7e:ae:4a:23:a8:f8:26:e8:84:8f:1b:98:6d:8d:
b9:b2:37:71:cd:e7:d9:a6:60:fe:67:67:0c:b1:76:
ae:94:7a:e0:1d:46:22:2c:d5:25:94:e5:70:8c:2f:
74:cb:ef:71:1b:8f:aa:a0:a2:4f:eb:12:e9:07:0e:
64:a9:1f:01:92:80:3e:50:27:17:15:85:ab:f9:cd:
0d:16:a3:2b:1f:27:38:bb:2f:8b:9b:68:80:5f:41:
f1:ab:38:8b:d6:b6:e8:5d:d8:97:08:e6:04:fb:d2:
b6:27:88:1a:da:c3:f5:cf:2b:9a:26:08:fb:a6:dd:
c9:f4:29:96:0e:b2:31:c7:20:bb:fc:57:6d:18:e4:
d5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:25:DC:C6:77:1B:E1:1E:98:FA:88:9C:8A:57:0F:75:DC:80:D3:35
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5C223A928E8111EE82A4C5D77D84E21B.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.230.0/24
Signature Algorithm: sha256WithRSAEncryption
92:16:61:81:e0:24:1c:a2:81:2a:28:2d:da:9f:27:84:5b:84:
87:89:33:3c:f1:f3:9c:04:4c:ec:ab:85:90:68:74:d5:a3:db:
a8:4d:ec:cd:8b:3c:2d:e6:19:a2:32:54:5b:c0:b5:ad:3d:55:
c8:f2:59:15:1d:2f:b5:5b:20:f0:19:d6:bf:c6:ea:a9:dc:77:
e6:60:4f:93:47:18:d9:c4:67:8e:27:8e:97:61:4a:c0:4f:cd:
41:0a:f4:20:33:f2:42:71:ad:6e:5c:6a:d6:c5:24:67:fb:6c:
b5:e7:96:2a:48:43:9f:db:80:0b:dd:f9:e6:11:02:c1:3e:cb:
13:7c:df:ef:3d:c0:ac:38:a2:fa:39:d7:85:9a:b2:20:86:fd:
ab:25:3c:c0:51:81:f4:0c:ea:4d:d2:09:ed:1c:6e:d3:07:21:
97:13:8f:21:cd:fd:cb:64:c0:ff:03:4e:ed:97:d1:db:ae:8f:
a2:55:5f:d6:b9:bc:4d:41:7d:dd:6e:ec:09:dd:af:c1:1f:94:
f4:95:fb:3a:2e:06:a0:ce:b2:cc:ce:ab:0e:27:16:5d:eb:87:
48:de:fc:32:22:64:e7:53:ce:ec:b7:7e:1b:60:b4:f5:d9:42:
6e:36:dd:93:9a:f4:bb:33:fc:2f:0c:6e:ae:5a:4c:90:72:32:
0f:86:4c:bf
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICE5MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzExMjkwNjM0MzFaFw0yNTExMjkwNjM0MzFaMBgxFjAU
BgNVBAMTDTY1NjZkYjdhLWM4MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCiOrY0aBNyNCFGhLmhk0XvOj4yu+F1qrWmbqsARzBjRWJsmr89eaPz2k09
GjiUD1LJfxNNoFZPcUZB9oIpq+Cl08nJwutAAZbnEFFVcLHdDozgGhqXzHCFcXNT
Yhc3nvZvzd7EFitTdxqmop55jxMFOly44Xx7bex+rkojqPgm6ISPG5htjbmyN3HN
59mmYP5nZwyxdq6UeuAdRiIs1SWU5XCML3TL73Ebj6qgok/rEukHDmSpHwGSgD5Q
JxcVhav5zQ0WoysfJzi7L4ubaIBfQfGrOIvWtuhd2JcI5gT70rYniBraw/XPK5om
CPum3cn0KZYOsjHHILv8V20Y5NUvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU/yXc
xncb4R6Y+oicilcPddyA0zUwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzVDMjIzQTkyOEU4MTExRUU4MkE0QzVENzdEODRFMjFCLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEOYwDQYJKoZIhvcNAQEL
BQADggEBAJIWYYHgJByigSooLdqfJ4RbhIeJMzzx85wETOyrhZBodNWj26hN7M2L
PC3mGaIyVFvAta09VcjyWRUdL7VbIPAZ1r/G6qncd+ZgT5NHGNnEZ44njpdhSsBP
zUEK9CAz8kJxrW5catbFJGf7bLXnlipIQ5/bgAvd+eYRAsE+yxN83+89wKw4ovo5
14WasiCG/aslPMBRgfQM6k3SCe0cbtMHIZcTjyHN/ctkwP8DTu2X0duuj6JVX9a5
vE1Bfd1u7Andr8EflPSV+zouBqDOsszOqw4nFl3rh0je/DIiZOdTzuy3fhtgtPXZ
Qm423ZOa9Lsz/C8Mbq5aTJByMg+GTL8=
-----END CERTIFICATE-----
Generated at Fri Dec 29 08:25:40 2023 by rpki-client on console-fra.rpki-client.org