Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6DEF45EA1F2C11EEAB08BD204AD9E6FC.roa
File: 6DEF45EA1F2C11EEAB08BD204AD9E6FC.roa (raw, json)
Hash identifier: sCBN9BZPyPkbaOb4Bdmm79rGTaV6oHN2G4NfVNYJmbk=
Subject key identifier: AB:6F:2B:69:C5:47:58:9C:82:84:8C:4D:D9:53:1E:75:E8:42:AD:9A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1067
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6DEF45EA1F2C11EEAB08BD204AD9E6FC.roa
Signing time: Mon 10 Jul 2023 14:16:58 +0000
ROA not before: Mon 10 Jul 2023 14:16:54 +0000
ROA not after: Thu 10 Jul 2025 14:16:54 +0000
asID: 834
IP address blocks: 154.16.28.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4199 (0x1067)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 10 14:16:54 2023 GMT
Not After : Jul 10 14:16:54 2025 GMT
Subject: CN=64ac12da-1ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:69:2e:1b:2e:25:3a:49:8f:e4:23:9b:39:ed:
02:65:88:38:69:90:71:44:b8:89:fe:4e:dd:36:d4:
aa:08:fd:5e:07:ae:e9:1b:56:c8:02:65:a4:e4:4d:
8f:6a:24:f8:2d:4e:a8:c3:26:97:a2:59:9b:cb:aa:
5b:73:22:26:e3:81:96:82:16:ed:c7:b2:87:b4:35:
14:a2:06:dc:e1:4a:bb:3f:5d:52:1a:5c:3f:ee:de:
4f:6a:53:16:8e:d3:22:05:5e:81:df:70:6d:78:ff:
a0:65:e0:ff:7a:e8:c4:df:c1:2f:77:4e:0a:9e:39:
08:ee:d7:62:d7:b7:4b:50:75:13:b4:f8:8e:fb:54:
fd:c0:c0:d8:f8:80:d7:c6:8c:4f:ea:43:94:4f:33:
ad:04:2d:75:29:b3:58:dc:1a:c7:99:db:71:86:98:
aa:41:61:d6:c7:cd:63:1a:37:b1:a2:04:05:61:dc:
7e:10:87:66:22:6e:92:05:e6:95:38:05:41:16:36:
78:63:7c:d7:9d:0c:b9:ff:4f:6a:29:97:94:94:d3:
5a:42:7e:22:c5:a6:9a:a6:9e:6e:18:8b:c5:7e:7d:
68:04:b3:fc:53:b1:08:a3:54:95:69:81:63:d8:34:
6e:6d:b5:d4:a9:90:be:0e:5e:49:f0:fb:e8:4c:aa:
79:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6F:2B:69:C5:47:58:9C:82:84:8C:4D:D9:53:1E:75:E8:42:AD:9A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6DEF45EA1F2C11EEAB08BD204AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.28.0/24
Signature Algorithm: sha256WithRSAEncryption
15:41:b3:f2:d9:88:b3:9c:a4:07:8b:58:8f:90:f4:ad:f5:09:
df:85:1d:dc:09:14:99:df:a9:92:84:b6:1b:bc:33:69:ab:4f:
e1:ae:9a:15:f8:f5:86:8c:a9:6f:60:3d:ef:4c:d7:f9:8f:eb:
09:bb:df:87:a7:c9:dc:76:05:1f:52:1b:7d:49:2c:14:8d:e9:
b5:ca:87:34:db:ce:3c:e5:05:97:6c:d9:64:4e:20:6a:00:6a:
54:3a:d0:90:c2:5b:8b:44:b9:df:6d:cf:8c:1f:41:24:df:b6:
d4:1e:47:05:86:5c:fc:64:98:3e:d4:dd:8a:f4:03:d0:ff:1e:
ec:f1:28:61:df:02:51:04:8d:91:53:65:eb:06:fa:2a:c5:93:
8b:16:57:e1:9b:50:4d:5d:52:89:c2:e7:aa:2e:1f:99:36:49:
60:73:0b:4e:a1:ad:67:f1:41:b4:fa:36:61:9b:27:e0:1b:48:
af:3f:8e:3d:5c:38:da:ae:18:dc:74:e6:6f:af:26:1a:72:29:
8a:f6:cc:1d:1c:8d:ca:65:b3:c7:c5:75:82:fb:f0:26:ea:26:
0a:56:f4:23:c8:4a:96:2f:36:82:46:49:65:7e:7f:a1:18:1a:
1b:2b:09:9b:28:30:7e:d6:10:0a:31:ba:6f:f5:cc:7c:6e:59:
04:81:09:98
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEGcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA3MTAxNDE2NTRaFw0yNTA3MTAxNDE2NTRaMBgxFjAU
BgNVBAMTDTY0YWMxMmRhLTFjY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCiaS4bLiU6SY/kI5s57QJliDhpkHFEuIn+Tt021KoI/V4HrukbVsgCZaTk
TY9qJPgtTqjDJpeiWZvLqltzIibjgZaCFu3Hsoe0NRSiBtzhSrs/XVIaXD/u3k9q
UxaO0yIFXoHfcG14/6Bl4P966MTfwS93TgqeOQju12LXt0tQdRO0+I77VP3AwNj4
gNfGjE/qQ5RPM60ELXUps1jcGseZ23GGmKpBYdbHzWMaN7GiBAVh3H4Qh2YibpIF
5pU4BUEWNnhjfNedDLn/T2opl5SU01pCfiLFppqmnm4Yi8V+fWgEs/xTsQijVJVp
gWPYNG5ttdSpkL4OXknw++hMqnnRAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUq28r
acVHWJyChIxN2VMedehCrZowHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzZERUY0NUVBMUYyQzExRUVBQjA4QkQyMDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEBwwDQYJKoZIhvcNAQEL
BQADggEBABVBs/LZiLOcpAeLWI+Q9K31Cd+FHdwJFJnfqZKEthu8M2mrT+GumhX4
9YaMqW9gPe9M1/mP6wm734enydx2BR9SG31JLBSN6bXKhzTbzjzlBZds2WROIGoA
alQ60JDCW4tEud9tz4wfQSTfttQeRwWGXPxkmD7U3Yr0A9D/HuzxKGHfAlEEjZFT
ZesG+irFk4sWV+GbUE1dUonC56ouH5k2SWBzC06hrWfxQbT6NmGbJ+AbSK8/jj1c
ONquGNx05m+vJhpyKYr2zB0cjcpls8fFdYL78CbqJgpW9CPISpYvNoJGSWV+f6EY
GhsrCZsoMH7WEAoxum/1zHxuWQSBCZg=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org