Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5EC7A92A0AB111EEBB6A206E4AD9E6FC.roa
File: 5EC7A92A0AB111EEBB6A206E4AD9E6FC.roa (raw, json)
Hash identifier: QHUQo76igFC8SlVZ2M8JzkqZNh8lg56H39d4+GyhgEw=
Subject key identifier: F7:44:86:F1:1C:93:C7:44:8D:09:71:4D:A3:38:52:3F:9D:DA:88:22
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F5E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5EC7A92A0AB111EEBB6A206E4AD9E6FC.roa
Signing time: Wed 14 Jun 2023 12:45:41 +0000
ROA not before: Wed 14 Jun 2023 12:45:37 +0000
ROA not after: Tue 10 Jun 2025 12:45:37 +0000
asID: 55286
IP address blocks: 154.16.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3934 (0xf5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 14 12:45:37 2023 GMT
Not After : Jun 10 12:45:37 2025 GMT
Subject: CN=6489b675-6cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:81:b9:25:30:a2:0d:d6:f6:9c:42:c4:d2:21:
81:c5:c8:44:7d:5b:1f:6c:54:8a:2e:2c:db:28:e4:
de:dd:57:6c:9c:5f:d8:d4:cd:46:61:24:1e:f1:ef:
d7:c6:ff:98:41:dc:93:7e:39:98:a1:76:06:3e:6c:
5a:00:d5:e4:5c:b3:d4:3a:5e:f0:c2:a5:dc:5b:20:
a2:9d:d9:c5:b7:80:10:62:5a:46:48:18:23:e7:cd:
4f:7a:4c:27:33:76:b4:ef:c2:4a:94:1b:d3:05:3b:
df:0f:2c:38:3a:61:c8:59:1f:dc:0c:93:a0:89:24:
d9:b9:d0:07:46:27:46:e4:e7:67:4a:88:1c:59:96:
87:20:14:85:af:0e:ba:80:f3:9f:dd:51:20:be:09:
1c:14:97:f6:f5:83:83:7a:09:ca:bd:24:64:a1:0b:
93:d4:9b:c6:d5:13:8a:93:c5:09:70:5a:08:ad:4a:
18:f8:d9:d5:52:f4:14:04:60:4f:7f:76:cb:c0:83:
40:0c:9b:ef:41:45:b5:6e:17:25:bf:2e:d8:4b:51:
01:1f:5f:db:44:88:7c:41:cb:85:18:a3:ce:7e:2d:
eb:af:ec:3f:d0:42:4c:c8:ca:63:7a:e5:54:32:97:
4f:be:bc:f2:49:64:e0:61:10:d1:4f:e0:7b:60:95:
67:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:44:86:F1:1C:93:C7:44:8D:09:71:4D:A3:38:52:3F:9D:DA:88:22
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5EC7A92A0AB111EEBB6A206E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.60.0/24
Signature Algorithm: sha256WithRSAEncryption
99:07:c9:de:c0:61:26:7b:de:aa:15:dd:aa:b3:65:c0:c8:ba:
f0:d5:82:42:3e:4a:0a:3e:84:ab:bd:53:ee:de:1a:b7:0f:6b:
13:08:dd:97:70:29:c9:6c:60:ba:a5:25:ba:e7:7b:c3:0d:2c:
50:57:4c:5c:e9:f4:65:90:8c:6d:a2:d8:77:35:e5:59:e4:c7:
65:80:35:20:cd:94:28:02:23:74:ee:63:2c:9a:4a:e4:f9:c8:
d4:ee:03:55:14:04:83:e4:ee:c1:a4:69:f1:93:97:91:36:80:
20:c8:3d:3d:16:9e:a6:80:e7:7d:3e:3d:01:36:92:83:ec:67:
50:a1:6e:bf:35:bd:c2:2c:b3:9a:4b:de:f0:70:19:15:92:98:
06:33:28:7e:97:c5:03:5c:52:0c:e8:6b:f1:46:a2:6c:e2:a6:
0a:29:26:08:f1:14:d3:a1:de:08:2a:5a:1b:e9:cb:b1:0e:3a:
02:a7:60:b0:7a:c9:57:a3:ad:dc:64:5a:26:b9:f3:5e:07:52:
26:c6:5c:78:31:d6:2f:4b:a1:8f:78:ec:bf:3c:d1:0a:e6:05:
8c:f9:5e:42:03:35:44:9c:29:b6:77:b5:21:45:a3:c5:bd:08:
3c:f3:9f:70:35:fe:38:92:e9:bd:da:59:59:91:0a:4b:59:0b:
42:62:b9:09
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICD14wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA2MTQxMjQ1MzdaFw0yNTA2MTAxMjQ1MzdaMBgxFjAU
BgNVBAMTDTY0ODliNjc1LTZjZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLgbklMKIN1vacQsTSIYHFyER9Wx9sVIouLNso5N7dV2ycX9jUzUZhJB7x
79fG/5hB3JN+OZihdgY+bFoA1eRcs9Q6XvDCpdxbIKKd2cW3gBBiWkZIGCPnzU96
TCczdrTvwkqUG9MFO98PLDg6YchZH9wMk6CJJNm50AdGJ0bk52dKiBxZlocgFIWv
DrqA85/dUSC+CRwUl/b1g4N6Ccq9JGShC5PUm8bVE4qTxQlwWgitShj42dVS9BQE
YE9/dsvAg0AMm+9BRbVuFyW/LthLUQEfX9tEiHxBy4UYo85+Leuv7D/QQkzIymN6
5VQyl0++vPJJZOBhENFP4HtglWcvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU90SG
8RyTx0SNCXFNozhSP53aiCIwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzVFQzdBOTJBMEFCMTExRUVCQjZBMjA2RTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEDwwDQYJKoZIhvcNAQEL
BQADggEBAJkHyd7AYSZ73qoV3aqzZcDIuvDVgkI+Sgo+hKu9U+7eGrcPaxMI3Zdw
KclsYLqlJbrne8MNLFBXTFzp9GWQjG2i2Hc15Vnkx2WANSDNlCgCI3TuYyyaSuT5
yNTuA1UUBIPk7sGkafGTl5E2gCDIPT0WnqaA530+PQE2koPsZ1Chbr81vcIss5pL
3vBwGRWSmAYzKH6XxQNcUgzoa/FGomzipgopJgjxFNOh3ggqWhvpy7EOOgKnYLB6
yVejrdxkWia5814HUibGXHgx1i9LoY947L880QrmBYz5XkIDNUScKbZ3tSFFo8W9
CDzzn3A1/jiS6b3aWVmRCktZC0JiuQk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org