Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/66AF7530174711EE85A5F6184AD9E6FC.roa
File: 66AF7530174711EE85A5F6184AD9E6FC.roa (raw, json)
Hash identifier: XUVLU5BD0+7ty779NP16VG1So09urhJ065I+rWrlOaM=
Subject key identifier: 0E:4F:66:1A:30:4E:6E:09:19:50:39:A6:9E:6D:81:25:F5:1B:A2:65
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1037
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/66AF7530174711EE85A5F6184AD9E6FC.roa
Signing time: Fri 30 Jun 2023 13:09:53 +0000
ROA not before: Fri 30 Jun 2023 13:09:50 +0000
ROA not after: Tue 24 Jun 2025 13:09:50 +0000
asID: 147176
IP address blocks: 154.16.55.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4151 (0x1037)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 30 13:09:50 2023 GMT
Not After : Jun 24 13:09:50 2025 GMT
Subject: CN=649ed421-5cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b7:87:eb:bc:a9:0c:d9:b5:ba:c5:d8:dc:45:
d4:35:8d:ac:c6:ed:52:22:9d:66:3c:45:5b:b6:64:
c4:ba:74:fd:45:24:82:9a:24:82:01:00:6d:22:a5:
1c:df:7c:07:99:d0:d3:40:80:4b:49:ee:59:bc:06:
8a:59:f9:bd:ef:9d:d4:20:1d:d0:a5:87:5b:04:29:
6c:3d:90:6e:a3:64:54:0f:dc:6b:38:fc:ba:4e:b7:
d7:17:e1:cf:b1:c2:11:d8:ef:dd:51:49:2b:34:20:
d0:de:e2:f7:e0:6a:65:e7:54:7b:29:f1:80:93:69:
19:87:bf:8a:c2:8a:18:25:cd:81:84:c5:c8:30:e9:
74:dc:3b:99:8e:5d:9d:3b:cd:cc:3c:29:66:22:9a:
d0:d1:a3:6f:02:16:f7:cb:1e:f3:ae:9c:00:c8:c5:
0f:aa:33:c5:8d:a2:84:8c:05:0d:b1:c7:c1:d0:fc:
9f:f7:cb:b5:18:0b:9a:4d:18:d0:1d:31:c1:b1:b0:
25:97:38:9a:24:34:25:10:50:bf:16:0d:ff:9f:be:
a9:c7:8f:ce:ea:9c:8d:a7:0a:ec:92:bc:7d:58:6a:
27:d4:a0:c5:04:aa:40:5e:83:2b:10:d2:0d:c2:1e:
9c:7b:27:6b:c0:1f:4e:da:35:ec:73:fb:f2:18:1e:
35:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4F:66:1A:30:4E:6E:09:19:50:39:A6:9E:6D:81:25:F5:1B:A2:65
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/66AF7530174711EE85A5F6184AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.55.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:8d:e2:0e:c1:d7:88:f8:f7:46:a5:a3:4d:5d:15:f2:fd:14:
77:4b:09:de:e4:94:dc:f9:b3:5d:d4:9e:8a:c7:6e:08:f9:3f:
cf:35:9b:53:7f:74:71:f9:00:11:cc:b0:22:9a:4c:30:94:ce:
57:d6:b7:dd:1d:76:0d:31:50:97:92:81:7d:a5:90:c4:70:9a:
14:9e:69:11:bc:f5:ab:65:4c:f4:e1:07:15:36:ee:c9:c3:f7:
9e:a4:58:64:d4:c1:9e:e9:c0:56:23:09:73:55:8c:75:26:16:
2e:0d:47:ae:07:cb:59:e5:e2:82:6a:04:9c:54:b5:49:af:fc:
c2:e2:b8:9e:1f:c5:29:ff:a3:ec:af:b5:a1:89:93:5b:45:d0:
86:ac:d4:36:86:3d:56:7c:93:79:12:a7:88:0d:95:be:3d:c4:
fa:9d:3b:8f:ed:52:13:86:11:50:2d:57:a4:2d:dd:74:3a:73:
f6:9c:59:25:6c:be:f0:78:31:36:55:fc:44:02:08:d9:89:93:
f1:bd:42:eb:c0:b2:80:b2:7e:61:bf:2c:e3:05:24:f7:0d:42:
2e:75:9d:62:81:78:de:09:d9:d7:a7:1d:06:1c:5e:06:f0:1b:
20:83:c7:2a:c4:5e:f2:e4:fe:c3:b7:ce:c1:c1:65:4b:ca:be:
51:ed:97:9b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEDcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA2MzAxMzA5NTBaFw0yNTA2MjQxMzA5NTBaMBgxFjAU
BgNVBAMTDTY0OWVkNDIxLTVjYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCt4frvKkM2bW6xdjcRdQ1jazG7VIinWY8RVu2ZMS6dP1FJIKaJIIBAG0i
pRzffAeZ0NNAgEtJ7lm8BopZ+b3vndQgHdClh1sEKWw9kG6jZFQP3Gs4/LpOt9cX
4c+xwhHY791RSSs0INDe4vfgamXnVHsp8YCTaRmHv4rCihglzYGExcgw6XTcO5mO
XZ07zcw8KWYimtDRo28CFvfLHvOunADIxQ+qM8WNooSMBQ2xx8HQ/J/3y7UYC5pN
GNAdMcGxsCWXOJokNCUQUL8WDf+fvqnHj87qnI2nCuySvH1YaifUoMUEqkBegysQ
0g3CHpx7J2vAH07aNexz+/IYHjXTAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUDk9m
GjBObgkZUDmmnm2BJfUbomUwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzY2QUY3NTMwMTc0NzExRUU4NUE1RjYxODRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEDcwDQYJKoZIhvcNAQEL
BQADggEBAEyN4g7B14j490alo01dFfL9FHdLCd7klNz5s13UnorHbgj5P881m1N/
dHH5ABHMsCKaTDCUzlfWt90ddg0xUJeSgX2lkMRwmhSeaRG89atlTPThBxU27snD
956kWGTUwZ7pwFYjCXNVjHUmFi4NR64Hy1nl4oJqBJxUtUmv/MLiuJ4fxSn/o+yv
taGJk1tF0Ias1DaGPVZ8k3kSp4gNlb49xPqdO4/tUhOGEVAtV6Qt3XQ6c/acWSVs
vvB4MTZV/EQCCNmJk/G9QuvAsoCyfmG/LOMFJPcNQi51nWKBeN4J2denHQYcXgbw
GyCDxyrEXvLk/sO3zsHBZUvKvlHtl5s=
-----END CERTIFICATE-----
Generated at Wed Nov 29 07:08:20 2023 by rpki-client on console-ams.rpki-client.org