Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5E895D4C3FE011EDB3D768BFF1222468.roa
File: 5E895D4C3FE011EDB3D768BFF1222468.roa (raw, json)
Hash identifier: m/fdfEl/yuMJ/8ncskXIqx7FW1fkAYsbaXCHQuJu/uk=
Subject key identifier: 29:EA:83:CE:55:F1:51:C4:3B:42:EF:BE:CE:3D:E9:29:13:2C:9B:E7
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 09D0
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5E895D4C3FE011EDB3D768BFF1222468.roa
Signing time: Thu 29 Sep 2022 10:20:41 +0000
ROA not before: Thu 29 Sep 2022 10:20:37 +0000
ROA not after: Sun 29 Sep 2024 10:20:37 +0000
asID: 34773
IP address blocks: 154.16.23.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2512 (0x9d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 29 10:20:37 2022 GMT
Not After : Sep 29 10:20:37 2024 GMT
Subject: CN=63357179-cf90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:43:00:c6:ed:c4:47:46:e6:40:2e:9d:f4:
ce:c1:6c:c3:7e:0f:f8:2d:f2:a5:5b:61:c8:75:1d:
db:44:14:bc:59:80:29:7e:fd:d1:1e:62:e4:af:f0:
af:29:18:7f:a0:c6:cf:94:c9:a0:0b:c3:fe:aa:15:
33:f4:13:34:db:4d:05:f1:f9:0a:27:13:be:e2:cd:
ec:a6:6f:69:df:30:02:f3:4c:61:e7:1c:bf:5b:d3:
ac:dc:66:62:cb:6b:f8:34:8e:48:09:a6:34:8c:d6:
12:fd:87:5b:4f:ca:06:38:44:9f:0d:6a:7a:c3:dc:
83:4f:5a:c3:af:9e:94:52:44:00:b4:9a:fb:3c:84:
2c:26:c5:fe:07:a3:0b:3c:49:fc:99:52:9b:41:54:
07:2e:ac:b9:35:6d:c7:24:61:45:f4:54:9d:4c:24:
c5:a1:c0:c1:da:05:a4:2b:20:77:a2:2d:6e:6d:b6:
1a:63:6b:6d:38:4b:b0:cb:f9:a3:6d:cf:b9:85:98:
97:3f:10:02:3d:17:87:e6:96:54:4a:42:db:6a:82:
7d:a7:08:93:e3:cf:ba:56:ff:ec:60:6b:74:54:9d:
19:56:36:35:1a:fb:44:98:e1:79:45:82:33:ea:71:
10:0b:db:b1:69:33:e5:5a:ee:c8:cd:02:8c:05:dd:
bb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EA:83:CE:55:F1:51:C4:3B:42:EF:BE:CE:3D:E9:29:13:2C:9B:E7
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5E895D4C3FE011EDB3D768BFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.23.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:7a:7e:6e:9c:3a:f2:80:a8:5b:ce:16:ab:26:dc:e4:ec:6a:
f8:45:58:72:d2:50:07:00:96:cb:c0:ee:4a:16:50:5b:f3:cf:
f6:7d:90:16:52:41:9a:ce:a0:15:96:c3:85:86:ca:85:13:f7:
f8:72:10:c1:1a:37:8e:e4:73:89:1f:b4:32:fd:3b:dd:34:15:
8c:83:b9:16:2b:aa:a3:64:87:45:2d:fb:94:cf:f7:32:b7:c0:
3b:df:bf:77:a4:40:fb:db:ab:d3:58:30:43:a3:52:64:15:aa:
3e:d0:07:ba:57:22:61:8d:33:86:e5:df:50:b6:4f:10:07:b2:
80:03:eb:f4:df:87:9d:75:7d:98:34:22:87:00:42:42:fb:e1:
0f:aa:a5:87:f6:5c:07:10:ae:57:e1:c6:47:dd:36:5e:f0:48:
08:70:83:93:21:dd:2c:08:c7:74:9b:c4:72:9a:0a:78:6f:e8:
0f:3a:7c:04:cf:26:a8:2b:58:71:f0:29:15:a1:86:00:cb:bb:
9a:97:e8:7d:78:03:6b:1a:0d:2c:40:52:7b:e8:f8:ed:7e:a8:
81:0a:db:8e:38:90:31:b7:a7:4b:ed:aa:d6:1a:7c:34:52:2f:
4f:33:e1:6a:07:5c:80:a4:e7:9b:d7:59:67:69:30:53:7d:3c:
af:be:e4:7a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCdAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMjA5MjkxMDIwMzdaFw0yNDA5MjkxMDIwMzdaMBgxFjAU
BgNVBAMMDTYzMzU3MTc5LWNmOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6X0MAxu3ER0bmQC6d9M7BbMN+D/gt8qVbYch1HdtEFLxZgCl+/dEeYuSv
8K8pGH+gxs+UyaALw/6qFTP0EzTbTQXx+QonE77izeymb2nfMALzTGHnHL9b06zc
ZmLLa/g0jkgJpjSM1hL9h1tPygY4RJ8NanrD3INPWsOvnpRSRAC0mvs8hCwmxf4H
ows8SfyZUptBVAcurLk1bcckYUX0VJ1MJMWhwMHaBaQrIHeiLW5tthpja204S7DL
+aNtz7mFmJc/EAI9F4fmllRKQttqgn2nCJPjz7pW/+xga3RUnRlWNjUa+0SY4XlF
gjPqcRAL27FpM+Va7sjNAowF3buDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUKeqD
zlXxUcQ7Qu++zj3pKRMsm+cwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzVFODk1RDRDM0ZFMDExRURCM0Q3NjhCRkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEBcwDQYJKoZIhvcNAQEL
BQADggEBADp6fm6cOvKAqFvOFqsm3OTsavhFWHLSUAcAlsvA7koWUFvzz/Z9kBZS
QZrOoBWWw4WGyoUT9/hyEMEaN47kc4kftDL9O900FYyDuRYrqqNkh0Ut+5TP9zK3
wDvfv3ekQPvbq9NYMEOjUmQVqj7QB7pXImGNM4bl31C2TxAHsoAD6/Tfh511fZg0
IocAQkL74Q+qpYf2XAcQrlfhxkfdNl7wSAhwg5Mh3SwIx3SbxHKaCnhv6A86fATP
JqgrWHHwKRWhhgDLu5qX6H14A2saDSxAUnvo+O1+qIEK2444kDG3p0vtqtYafDRS
L08z4WoHXICk55vXWWdpMFN9PK++5Ho=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org