Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6BCFB002B8F611EDA0D012EFF1222468.roa
File: 6BCFB002B8F611EDA0D012EFF1222468.roa (raw, json)
Hash identifier: t/vSk3A22aWr1+mDtKbUs7hMCPCJAM97qVDIF2QFQ1A=
Subject key identifier: D9:DE:9E:33:47:7E:19:E2:FF:57:D7:FD:2F:18:CF:23:EE:15:32:7F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0C99
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6BCFB002B8F611EDA0D012EFF1222468.roa
Signing time: Thu 02 Mar 2023 12:33:23 +0000
ROA not before: Thu 02 Mar 2023 12:33:19 +0000
ROA not after: Sat 01 Mar 2025 12:33:19 +0000
asID: 61317
IP address blocks: 154.16.213.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3225 (0xc99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 2 12:33:19 2023 GMT
Not After : Mar 1 12:33:19 2025 GMT
Subject: CN=64009793-067c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:8f:48:34:d8:f9:bb:b2:87:18:a8:da:c4:
40:60:9c:f7:da:13:31:0e:ad:80:d1:46:b1:ce:d6:
81:9f:96:29:1b:30:ee:39:ac:2b:50:5b:f7:d1:d9:
a0:48:df:a1:f6:32:1e:04:7d:97:f2:b0:20:fd:ce:
17:1d:8c:c1:bb:a9:38:0f:a0:db:bf:ed:14:9d:ae:
17:78:a7:d8:08:73:e9:60:0b:d7:9d:5e:58:03:99:
49:d9:f1:c6:aa:98:81:af:88:56:1e:77:60:27:d9:
fe:54:b7:4f:80:a7:c2:0c:49:91:f3:fb:33:2d:75:
92:5f:55:1f:6e:55:07:91:23:02:c5:65:b2:8f:57:
c9:75:da:b0:a0:4c:6c:80:d2:93:c7:d1:42:cf:77:
7a:e2:62:1a:80:71:38:22:92:d9:1c:3b:53:60:0d:
81:80:09:cf:09:7a:56:9b:59:29:f1:9d:b7:19:b1:
a7:26:1c:14:1c:b8:18:c9:ce:16:a4:ea:5b:60:a5:
ae:f3:59:05:27:f0:aa:58:94:2f:64:3c:a1:d5:d7:
28:36:d0:3a:ca:b4:52:a1:f4:65:70:e9:9b:dc:67:
b5:8b:2e:45:77:ed:d2:7b:d5:d3:69:51:f7:83:7b:
fc:37:b3:8c:e9:2a:d8:78:23:50:fb:aa:d6:40:82:
0c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DE:9E:33:47:7E:19:E2:FF:57:D7:FD:2F:18:CF:23:EE:15:32:7F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6BCFB002B8F611EDA0D012EFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.213.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:a5:d9:63:b9:24:3a:e8:9e:66:77:f2:1b:05:c6:f7:86:69:
02:5d:9a:9c:5a:e5:7a:b7:2c:56:f3:6f:5a:ba:33:29:f7:02:
fd:d1:e7:e1:41:a3:13:e5:5d:79:4a:9b:1e:d6:4c:fe:55:b0:
e5:b2:37:c5:21:af:db:03:82:8d:7f:ed:6a:91:ba:8a:d3:f9:
9d:aa:a5:a7:ba:3c:d5:03:83:b7:6d:84:38:f9:4e:89:65:2e:
6f:d1:47:d1:6c:17:4c:7f:68:cb:de:f8:3f:4a:40:60:8a:d7:
69:31:b5:1c:cd:5d:2e:ab:c0:8c:63:f2:6a:38:60:c9:4d:d7:
bb:da:26:bb:97:7e:68:cc:78:76:cc:10:dc:f7:72:2b:87:75:
79:87:77:92:e6:89:bc:6a:7a:8c:53:46:26:a5:b4:9d:c7:d0:
d6:6f:f6:b7:28:34:49:ef:11:cd:96:f6:61:d5:dc:d6:12:03:
39:d7:31:86:29:6e:47:24:0a:cf:2c:c2:98:70:51:41:27:46:
d3:43:08:b9:7d:97:51:6e:57:ce:65:b4:e9:35:ab:48:00:78:
77:da:ac:8b:a3:02:75:7c:ed:4e:1f:d1:ca:22:b9:a2:7a:f0:
cf:61:77:a9:c3:e6:10:45:4c:68:5d:26:4d:e7:3a:92:3a:88:
59:ed:38:54
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDJkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzAzMDIxMjMzMTlaFw0yNTAzMDExMjMzMTlaMBgxFjAU
BgNVBAMMDTY0MDA5NzkzLTA2N2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwm49INNj5u7KHGKjaxEBgnPfaEzEOrYDRRrHO1oGflikbMO45rCtQW/fR
2aBI36H2Mh4EfZfysCD9zhcdjMG7qTgPoNu/7RSdrhd4p9gIc+lgC9edXlgDmUnZ
8caqmIGviFYed2An2f5Ut0+Ap8IMSZHz+zMtdZJfVR9uVQeRIwLFZbKPV8l12rCg
TGyA0pPH0ULPd3riYhqAcTgiktkcO1NgDYGACc8JelabWSnxnbcZsacmHBQcuBjJ
zhak6ltgpa7zWQUn8KpYlC9kPKHV1yg20DrKtFKh9GVw6ZvcZ7WLLkV37dJ71dNp
UfeDe/w3s4zpKth4I1D7qtZAggxvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU2d6e
M0d+GeL/V9f9LxjPI+4VMn8wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzZCQ0ZCMDAyQjhGNjExRURBMEQwMTJFRkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaENUwDQYJKoZIhvcNAQEL
BQADggEBAJ2l2WO5JDronmZ38hsFxveGaQJdmpxa5Xq3LFbzb1q6Myn3Av3R5+FB
oxPlXXlKmx7WTP5VsOWyN8Uhr9sDgo1/7WqRuorT+Z2qpae6PNUDg7dthDj5Toll
Lm/RR9FsF0x/aMve+D9KQGCK12kxtRzNXS6rwIxj8mo4YMlN17vaJruXfmjMeHbM
ENz3ciuHdXmHd5LmibxqeoxTRialtJ3H0NZv9rcoNEnvEc2W9mHV3NYSAznXMYYp
bkckCs8swphwUUEnRtNDCLl9l1FuV85ltOk1q0gAeHfarIujAnV87U4f0coiuaJ6
8M9hd6nD5hBFTGhdJk3nOpI6iFntOFQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org