Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5E6F2E1242BF11EE867E868B4AD9E6FC.roa
File: 5E6F2E1242BF11EE867E868B4AD9E6FC.roa (raw, json)
Hash identifier: Di/aTv1m95zgKzY80mOfLZfU3i89ZMeUlD2Q1bPPz38=
Subject key identifier: 6B:03:81:FA:D3:9D:9B:36:01:1F:CF:A9:F5:87:7E:4D:D5:DC:D7:8C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 11AB
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5E6F2E1242BF11EE867E868B4AD9E6FC.roa
Signing time: Thu 24 Aug 2023 20:46:59 +0000
ROA not before: Thu 24 Aug 2023 20:46:53 +0000
ROA not after: Sun 25 Aug 2024 20:46:53 +0000
asID: 210907
IP address blocks: 154.16.56.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4523 (0x11ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 24 20:46:53 2023 GMT
Not After : Aug 25 20:46:53 2024 GMT
Subject: CN=64e7c1c2-03c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f1:81:54:0a:b5:3b:9f:ff:5b:4c:bc:ec:7a:
92:26:93:13:a6:c1:5e:35:02:a3:08:ba:8f:9f:88:
a1:a2:e0:18:73:62:24:54:e6:18:e7:c9:ed:f9:03:
58:a3:6f:75:9f:ee:b5:35:10:5f:25:37:38:19:c7:
c6:8b:5b:4f:8f:2b:1b:65:dc:f8:39:ac:80:34:b0:
84:65:96:13:97:ba:4b:c4:69:b4:e3:02:a4:87:08:
72:a6:fc:32:11:6d:16:e0:7c:27:d8:0d:49:fe:1c:
70:f4:fc:6e:5b:a2:96:63:e1:7b:ad:22:8f:b7:31:
da:d9:10:d4:87:bb:22:ba:70:96:87:3b:49:84:58:
43:6a:d2:47:38:98:eb:fa:18:f7:0e:e2:b5:b7:ef:
e7:f9:f2:1d:3a:4e:e8:94:d9:bd:8d:cc:fc:53:51:
5e:c3:00:8b:58:71:6f:50:5c:0a:c3:a2:a0:18:71:
5a:35:59:9c:a2:63:e0:84:4b:cf:15:c1:ad:c6:f4:
bf:33:a4:4a:fc:bd:b7:57:8d:a4:cd:1a:c3:d9:66:
42:57:74:ab:70:72:30:6d:90:16:03:c4:68:31:0f:
bd:9b:cc:fd:fa:ce:2a:73:8f:80:16:78:46:4f:72:
30:44:27:cb:73:21:d6:0c:d4:6b:f6:72:bd:67:26:
55:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:03:81:FA:D3:9D:9B:36:01:1F:CF:A9:F5:87:7E:4D:D5:DC:D7:8C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5E6F2E1242BF11EE867E868B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.56.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:c3:ea:d5:8a:11:76:40:4f:82:bb:d6:46:e4:fa:f2:ea:d8:
0a:90:5e:18:59:34:28:cf:b0:10:39:13:8e:91:ba:87:05:d9:
36:bc:fd:5c:80:fc:3f:70:2a:cf:f5:57:9a:70:32:44:c7:4a:
c1:e6:ac:f4:fc:8f:c5:f6:f6:c8:ed:16:46:b2:c4:81:e2:36:
44:1c:25:65:5f:02:2c:de:37:5d:64:23:b1:83:2d:16:32:85:
42:bb:d3:0e:e9:79:0d:0c:3d:c9:d9:5a:50:e2:29:13:86:cf:
cb:cd:29:1b:40:88:08:af:eb:e8:91:33:f5:8d:14:27:c7:53:
78:0b:01:1d:8f:42:2f:12:50:48:86:e9:3b:39:a5:1e:ca:e5:
79:f3:a5:16:08:ed:4f:12:7f:10:54:76:5b:1b:71:3c:f6:91:
a8:f2:cd:4f:22:e8:5d:21:a2:8a:4a:10:ad:58:91:be:1e:a8:
80:4a:08:57:66:23:32:0c:46:51:e7:0d:15:c8:df:fc:40:a7:
85:5b:60:f0:e9:d8:c6:50:fe:f4:ef:c1:ab:be:b3:cf:ea:7c:
68:f2:44:b4:c2:37:64:2d:49:17:12:34:17:95:39:19:f4:79:
52:bf:96:7f:ad:d8:f9:11:86:07:f0:20:95:41:30:e1:cc:c7:
c5:7a:d9:3c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEaswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA4MjQyMDQ2NTNaFw0yNDA4MjUyMDQ2NTNaMBgxFjAU
BgNVBAMTDTY0ZTdjMWMyLTAzYzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+8YFUCrU7n/9bTLzsepImkxOmwV41AqMIuo+fiKGi4BhzYiRU5hjnye35
A1ijb3Wf7rU1EF8lNzgZx8aLW0+PKxtl3Pg5rIA0sIRllhOXukvEabTjAqSHCHKm
/DIRbRbgfCfYDUn+HHD0/G5bopZj4XutIo+3MdrZENSHuyK6cJaHO0mEWENq0kc4
mOv6GPcO4rW37+f58h06TuiU2b2NzPxTUV7DAItYcW9QXArDoqAYcVo1WZyiY+CE
S88Vwa3G9L8zpEr8vbdXjaTNGsPZZkJXdKtwcjBtkBYDxGgxD72bzP36zipzj4AW
eEZPcjBEJ8tzIdYM1Gv2cr1nJlVlAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUawOB
+tOdmzYBH8+p9Yd+TdXc14wwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzVFNkYyRTEyNDJCRjExRUU4NjdFODY4QjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEDgwDQYJKoZIhvcNAQEL
BQADggEBAG3D6tWKEXZAT4K71kbk+vLq2AqQXhhZNCjPsBA5E46RuocF2Ta8/VyA
/D9wKs/1V5pwMkTHSsHmrPT8j8X29sjtFkayxIHiNkQcJWVfAizeN11kI7GDLRYy
hUK70w7peQ0MPcnZWlDiKROGz8vNKRtAiAiv6+iRM/WNFCfHU3gLAR2PQi8SUEiG
6Ts5pR7K5XnzpRYI7U8SfxBUdlsbcTz2kajyzU8i6F0hoopKEK1Ykb4eqIBKCFdm
IzIMRlHnDRXI3/xAp4VbYPDp2MZQ/vTvwau+s8/qfGjyRLTCN2QtSRcSNBeVORn0
eVK/ln+t2PkRhgfwIJVBMOHMx8V62Tw=
-----END CERTIFICATE-----
Generated at Sun Dec 24 14:45:31 2023 by rpki-client on console-ams.rpki-client.org