Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/772F80D8005111EEBEAE1B874AD9E6FC.roa
File: 772F80D8005111EEBEAE1B874AD9E6FC.roa (raw, json)
Hash identifier: OW7tv9Xq25cOjkOIbllj6yJqKylriTFB8MLWAO5AVSY=
Subject key identifier: E8:D2:D6:62:F0:5D:93:03:FC:0F:8D:A2:0E:0D:2A:51:3E:B9:B7:5E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0E83
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/772F80D8005111EEBEAE1B874AD9E6FC.roa
Signing time: Thu 01 Jun 2023 07:53:59 +0000
ROA not before: Thu 01 Jun 2023 07:53:55 +0000
ROA not after: Sun 01 Jun 2025 07:53:55 +0000
asID: 834
IP address blocks: 154.16.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Jun 2023 18:23:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3715 (0xe83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 1 07:53:55 2023 GMT
Not After : Jun 1 07:53:55 2025 GMT
Subject: CN=64784e97-996c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:82:e2:29:a0:7e:20:e2:17:7b:22:ae:5b:49:
d4:c5:5f:b0:86:82:f4:67:fc:af:c4:fb:40:87:6a:
15:ed:85:e7:80:7d:65:a0:98:92:5b:a8:29:2f:f9:
79:da:f2:43:e7:57:0b:48:80:ae:35:6b:e7:81:15:
7b:ed:b1:d5:f2:c7:25:71:5d:6f:76:8f:fe:1d:aa:
36:11:27:1b:81:13:37:ec:39:d1:2a:92:89:9a:08:
7d:84:b2:e5:2d:0b:cb:6f:0a:50:2c:ef:df:2d:79:
1e:f8:87:25:59:13:d1:fe:98:e9:ed:40:4f:03:22:
98:e5:0a:8b:da:e9:3b:42:86:d3:6d:6d:d9:f3:e3:
79:1b:db:e7:4f:f5:5e:93:37:28:ed:1f:4c:ad:ea:
d1:c0:73:66:6f:d1:fc:10:c2:57:9d:d0:8a:dd:34:
a2:bc:2a:2b:ac:a7:b1:cc:0b:d7:5e:2f:ae:21:8a:
78:16:f9:4b:80:79:b2:bb:ac:3e:3c:45:55:31:63:
f3:46:04:28:62:c5:c9:67:91:7a:f6:d7:70:f2:fc:
4f:31:ca:c6:b9:29:c2:24:74:ba:40:70:dd:8d:fb:
fa:aa:ae:2d:8f:32:c5:14:06:23:fd:52:8f:f2:20:
88:5a:19:3f:19:6a:90:54:80:58:3c:0b:25:a0:e0:
97:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D2:D6:62:F0:5D:93:03:FC:0F:8D:A2:0E:0D:2A:51:3E:B9:B7:5E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/772F80D8005111EEBEAE1B874AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.85.0/24
Signature Algorithm: sha256WithRSAEncryption
82:fb:c2:5e:66:6f:80:1d:63:d7:ab:1d:0b:5a:ae:56:bb:d4:
7d:e5:0b:47:f2:5e:f9:96:eb:f5:7e:5f:da:f9:3e:0c:c1:69:
72:bb:35:6b:c2:23:d4:10:31:24:dd:00:e4:46:54:91:93:7a:
a4:a3:0e:d1:ec:c4:2b:55:93:45:ac:28:70:2e:3a:d2:bc:b8:
74:f0:9c:d4:8b:57:87:ad:2e:6c:36:e3:4b:74:50:d5:e2:fb:
69:d3:6f:05:be:37:6a:e5:c5:9e:67:f3:90:48:0e:58:dd:e8:
9e:45:24:66:ae:af:42:fd:04:8d:99:b5:e0:5d:15:10:ae:71:
ee:d2:6b:5a:c2:de:2c:e8:47:c2:e0:65:58:77:57:1b:b6:1e:
cd:08:db:18:4c:7f:d7:37:0c:2a:25:2c:4d:b6:41:80:55:df:
fa:f9:47:9e:ae:a1:6f:b1:ae:8f:4b:eb:f5:b2:a3:4b:34:c9:
db:6d:bb:1e:fc:24:22:cd:8e:22:59:66:54:36:15:8c:6a:3f:
4f:c7:76:37:86:da:86:84:d2:3d:29:68:ff:8e:78:6e:e8:79:
b7:eb:59:3d:a7:5b:fc:e6:3b:76:f6:23:5d:35:c9:93:e8:54:
53:4f:19:81:bd:1c:77:21:12:32:78:a9:5e:d3:d8:a4:93:5a:
c2:97:1c:a7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDoMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA2MDEwNzUzNTVaFw0yNTA2MDEwNzUzNTVaMBgxFjAU
BgNVBAMTDTY0Nzg0ZTk3LTk5NmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDaguIpoH4g4hd7Iq5bSdTFX7CGgvRn/K/E+0CHahXtheeAfWWgmJJbqCkv
+Xna8kPnVwtIgK41a+eBFXvtsdXyxyVxXW92j/4dqjYRJxuBEzfsOdEqkomaCH2E
suUtC8tvClAs798teR74hyVZE9H+mOntQE8DIpjlCova6TtChtNtbdnz43kb2+dP
9V6TNyjtH0yt6tHAc2Zv0fwQwled0IrdNKK8Kiusp7HMC9deL64hingW+UuAebK7
rD48RVUxY/NGBChixclnkXr213Dy/E8xysa5KcIkdLpAcN2N+/qqri2PMsUUBiP9
Uo/yIIhaGT8ZapBUgFg8CyWg4JfZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU6NLW
YvBdkwP8D42iDg0qUT65t14wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4Lzc3MkY4MEQ4MDA1MTExRUVCRUFFMUI4NzRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEFUwDQYJKoZIhvcNAQEL
BQADggEBAIL7wl5mb4AdY9erHQtarla71H3lC0fyXvmW6/V+X9r5PgzBaXK7NWvC
I9QQMSTdAORGVJGTeqSjDtHsxCtVk0WsKHAuOtK8uHTwnNSLV4etLmw240t0UNXi
+2nTbwW+N2rlxZ5n85BIDljd6J5FJGaur0L9BI2ZteBdFRCuce7Sa1rC3izoR8Lg
ZVh3Vxu2Hs0I2xhMf9c3DColLE22QYBV3/r5R56uoW+xro9L6/Wyo0s0ydttux78
JCLNjiJZZlQ2FYxqP0/HdjeG2oaE0j0paP+OeG7oebfrWT2nW/zmO3b2I101yZPo
VFNPGYG9HHchEjJ4qV7T2KSTWsKXHKc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:38 2024 by rpki-client on console-ams.rpki-client.org