Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/649906060C0E11EE94B44D174AD9E6FC.roa
File: 649906060C0E11EE94B44D174AD9E6FC.roa (raw, json)
Hash identifier: WDfUjaagWGesdRLdKVgG63dHaSm8CQ56PEY9wz/sdp0=
Subject key identifier: 2E:06:90:E5:F9:71:1B:62:56:60:92:FB:A3:8B:4B:17:D9:A1:4D:B3
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F8D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/649906060C0E11EE94B44D174AD9E6FC.roa
Signing time: Fri 16 Jun 2023 06:24:05 +0000
ROA not before: Fri 16 Jun 2023 06:24:02 +0000
ROA not after: Sun 15 Jun 2025 06:24:02 +0000
asID: 49999
IP address blocks: 154.16.53.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3981 (0xf8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 16 06:24:02 2023 GMT
Not After : Jun 15 06:24:02 2025 GMT
Subject: CN=648c0005-1300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:b9:98:6f:c7:9b:8a:ec:5c:d3:ee:e8:9a:
e2:55:a0:55:59:5f:b1:b2:1c:cc:05:0d:4b:d5:25:
59:c6:b5:c4:82:4e:66:bd:53:df:bc:f7:42:b9:63:
f3:67:64:d5:0c:6d:3d:19:d7:1f:c1:ee:78:ce:7e:
1e:22:df:ab:7b:1d:dc:14:70:03:77:49:08:ac:83:
58:a2:9e:c8:e7:80:b0:61:1d:2c:0d:a2:16:70:a8:
0d:e4:29:c6:f9:5f:71:1f:ec:16:83:1b:86:78:c5:
c4:9d:22:ce:5b:12:b1:79:cc:93:28:0e:5d:53:bf:
a4:41:b1:ec:89:32:75:1d:52:eb:76:db:17:df:f2:
59:f5:ba:ac:e9:c4:19:6a:9f:83:24:5d:a2:14:c6:
7f:a0:e2:a6:c3:a9:2a:e4:51:f2:2c:fb:00:35:5b:
c9:36:f4:fd:1c:98:4b:ee:4a:3a:14:c6:c2:a4:53:
49:54:29:8c:e7:5d:c1:0a:cd:a9:c3:3a:b8:ba:c3:
0e:2d:02:9a:0c:9d:aa:9a:83:48:3a:d5:78:25:2e:
29:fa:d6:4e:cd:9d:eb:4d:3b:a7:b1:44:7d:63:8d:
c6:6f:c0:01:02:3f:2a:6d:3b:41:28:e0:b8:02:05:
d4:cc:fb:fd:ed:e0:d0:84:dd:32:ff:ae:57:fb:74:
32:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:06:90:E5:F9:71:1B:62:56:60:92:FB:A3:8B:4B:17:D9:A1:4D:B3
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/649906060C0E11EE94B44D174AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.53.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:31:d7:c0:5a:48:c7:25:c7:a1:14:ac:bb:c7:b2:38:e1:12:
f0:8d:86:44:a6:8d:54:d7:32:81:71:a5:84:68:85:89:9e:fe:
42:17:5e:7e:13:ef:1f:82:87:03:13:da:da:a0:a7:75:fe:f5:
2a:ac:18:f9:db:a5:a0:72:0d:1e:11:55:2b:9e:0a:0f:b0:f8:
4e:53:cc:c2:28:8f:47:ab:5b:25:5b:27:0f:ae:14:cb:5d:aa:
34:0d:49:97:c9:30:79:c1:92:85:7f:ba:be:da:a5:ed:b1:36:
40:0f:8a:22:5c:50:43:6d:c1:54:e8:3e:e0:88:3d:f8:5b:e6:
b8:f4:2b:a4:13:8c:ad:d3:69:0b:ec:3e:cb:c6:ed:61:a7:a2:
76:a3:19:56:e9:b5:96:65:d5:f6:95:b0:65:2a:d5:73:17:f2:
75:5d:9f:d0:3d:f6:fa:cf:fb:de:4d:57:86:b8:35:fc:d5:79:
f8:95:4b:fc:ca:a0:08:7c:7a:83:bb:b6:a6:43:5e:34:e8:ae:
66:37:72:c3:58:4a:9c:54:bb:de:0a:24:99:ca:62:8f:12:01:
64:4c:56:aa:a1:53:d5:ea:da:83:d2:e2:36:29:09:13:87:7c:
89:bd:9d:1b:7b:6e:9c:d2:e7:32:88:8c:5a:a0:ba:96:05:e4:
d4:45:f5:38
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICD40wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA2MTYwNjI0MDJaFw0yNTA2MTUwNjI0MDJaMBgxFjAU
BgNVBAMTDTY0OGMwMDA1LTEzMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCqYrmYb8ebiuxc0+7omuJVoFVZX7GyHMwFDUvVJVnGtcSCTma9U9+890K5
Y/NnZNUMbT0Z1x/B7njOfh4i36t7HdwUcAN3SQisg1iinsjngLBhHSwNohZwqA3k
Kcb5X3Ef7BaDG4Z4xcSdIs5bErF5zJMoDl1Tv6RBseyJMnUdUut22xff8ln1uqzp
xBlqn4MkXaIUxn+g4qbDqSrkUfIs+wA1W8k29P0cmEvuSjoUxsKkU0lUKYznXcEK
zanDOri6ww4tApoMnaqag0g61XglLin61k7NnetNO6exRH1jjcZvwAECPyptO0Eo
4LgCBdTM+/3t4NCE3TL/rlf7dDILAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQULgaQ
5flxG2JWYJL7o4tLF9mhTbMwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzY0OTkwNjA2MEMwRTExRUU5NEI0NEQxNzRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEDUwDQYJKoZIhvcNAQEL
BQADggEBALkx18BaSMclx6EUrLvHsjjhEvCNhkSmjVTXMoFxpYRohYme/kIXXn4T
7x+ChwMT2tqgp3X+9SqsGPnbpaByDR4RVSueCg+w+E5TzMIoj0erWyVbJw+uFMtd
qjQNSZfJMHnBkoV/ur7ape2xNkAPiiJcUENtwVToPuCIPfhb5rj0K6QTjK3TaQvs
PsvG7WGnonajGVbptZZl1faVsGUq1XMX8nVdn9A99vrP+95NV4a4NfzVefiVS/zK
oAh8eoO7tqZDXjTormY3csNYSpxUu94KJJnKYo8SAWRMVqqhU9Xq2oPS4jYpCROH
fIm9nRt7bpzS5zKIjFqgupYF5NRF9Tg=
-----END CERTIFICATE-----
Generated at Mon Aug 7 11:27:30 2023 by rpki-client on console-fra.rpki-client.org