Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/78B8B246B74D11EDABFF1AEDF1222468.roa
File: 78B8B246B74D11EDABFF1AEDF1222468.roa (raw, json)
Hash identifier: c2uHwJhZMeI2mHW8LUtkJwlBQZFOPu96J1OW1k9ynVU=
Subject key identifier: 1E:D1:75:46:08:EE:D4:0B:98:C8:02:9F:3C:88:70:0A:E4:89:F8:3C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0C8C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/78B8B246B74D11EDABFF1AEDF1222468.roa
Signing time: Tue 28 Feb 2023 09:51:29 +0000
ROA not before: Tue 28 Feb 2023 09:51:25 +0000
ROA not after: Fri 28 Feb 2025 09:51:25 +0000
asID: 61317
IP address blocks: 154.16.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3212 (0xc8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 28 09:51:25 2023 GMT
Not After : Feb 28 09:51:25 2025 GMT
Subject: CN=63fdcea0-9cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ba:4a:35:51:2e:f8:48:07:8d:7d:e4:ba:fb:
64:ee:d4:cd:89:ad:30:aa:62:05:97:ea:f4:d0:ed:
ef:f2:55:61:26:41:99:3c:37:61:0b:27:4c:ce:2b:
e5:f1:35:78:4a:c3:39:58:ed:d5:d4:cc:0d:c0:81:
68:98:05:a0:55:e2:4c:c2:ea:2b:e3:77:fc:6f:18:
30:10:ff:bb:8d:eb:19:0a:d7:4b:0e:91:65:9b:db:
e9:02:6f:f3:9b:32:5f:f6:ae:e2:c5:79:99:ba:04:
43:fb:8a:47:07:aa:2e:0f:cc:e6:22:14:45:f9:f1:
98:78:d8:e8:87:3c:57:c3:54:b0:1e:03:9b:3f:44:
4d:20:5f:76:cb:30:4a:92:7c:05:ff:3c:67:28:d9:
c6:1a:85:cd:12:5c:18:ab:6e:c1:36:82:92:f0:7a:
78:54:40:9f:9d:52:b6:09:48:f7:5f:b8:93:4b:16:
0f:c9:b4:f5:98:8d:9a:d1:6c:cb:71:99:6e:41:3a:
93:34:50:30:26:35:7e:1f:83:97:c4:39:71:d3:94:
69:d6:ac:41:e0:a4:ae:ba:f6:22:17:a4:06:08:a4:
fa:c9:b8:dc:b2:aa:68:21:9a:43:77:55:ac:eb:04:
e9:10:fb:8e:31:5e:fd:c8:28:de:be:f5:3d:ae:43:
71:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D1:75:46:08:EE:D4:0B:98:C8:02:9F:3C:88:70:0A:E4:89:F8:3C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/78B8B246B74D11EDABFF1AEDF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.204.0/24
Signature Algorithm: sha256WithRSAEncryption
93:2a:05:51:5c:59:11:6c:01:4e:fe:12:49:7e:ea:d1:0a:d8:
de:bd:7c:ff:3f:5a:4b:59:95:4d:f7:52:be:63:58:2d:a5:bd:
cf:37:f8:e0:7e:c9:21:b7:b3:29:96:61:41:2b:9e:46:ac:8c:
e0:b8:0d:14:07:41:c5:94:5a:71:04:84:f2:9f:ff:1f:19:43:
be:94:d0:7a:39:7c:e6:80:a8:5b:dd:e5:0d:b3:0f:26:c7:4f:
6a:34:ef:ef:81:05:23:ad:40:c3:e4:1e:7b:1d:8d:f5:d1:53:
b0:fa:ce:9c:a4:9f:89:ce:a4:04:27:bf:5b:ec:a6:4c:8d:f8:
c4:87:07:20:56:c8:74:23:d6:22:79:4c:92:0c:2a:0c:5c:ba:
34:6b:ad:2b:92:ed:5e:96:79:7f:de:76:d1:03:4d:0e:0e:45:
c6:9c:0a:ba:76:20:8f:23:57:cb:92:53:50:22:5f:d8:ba:ed:
4b:91:1b:5d:37:db:df:96:72:db:9c:dd:9c:f5:0c:d8:19:20:
d7:09:09:7d:77:55:ba:d7:57:67:ce:aa:86:7c:19:0b:aa:09:
cf:4e:90:18:16:1c:ac:d1:c2:ad:45:2e:46:60:5d:df:f2:a9:
b9:5c:bf:37:b7:41:00:e7:95:58:c2:0d:40:ef:3b:3b:fe:78:
27:82:d8:a8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDIwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzAyMjgwOTUxMjVaFw0yNTAyMjgwOTUxMjVaMBgxFjAU
BgNVBAMMDTYzZmRjZWEwLTljYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQChuko1US74SAeNfeS6+2Tu1M2JrTCqYgWX6vTQ7e/yVWEmQZk8N2ELJ0zO
K+XxNXhKwzlY7dXUzA3AgWiYBaBV4kzC6ivjd/xvGDAQ/7uN6xkK10sOkWWb2+kC
b/ObMl/2ruLFeZm6BEP7ikcHqi4PzOYiFEX58Zh42OiHPFfDVLAeA5s/RE0gX3bL
MEqSfAX/PGco2cYahc0SXBirbsE2gpLwenhUQJ+dUrYJSPdfuJNLFg/JtPWYjZrR
bMtxmW5BOpM0UDAmNX4fg5fEOXHTlGnWrEHgpK669iIXpAYIpPrJuNyyqmghmkN3
VazrBOkQ+44xXv3IKN6+9T2uQ3HLAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUHtF1
Rgju1AuYyAKfPIhwCuSJ+DwwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4Lzc4QjhCMjQ2Qjc0RDExRURBQkZGMUFFREYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEMwwDQYJKoZIhvcNAQEL
BQADggEBAJMqBVFcWRFsAU7+Ekl+6tEK2N69fP8/WktZlU33Ur5jWC2lvc83+OB+
ySG3symWYUErnkasjOC4DRQHQcWUWnEEhPKf/x8ZQ76U0Ho5fOaAqFvd5Q2zDybH
T2o07++BBSOtQMPkHnsdjfXRU7D6zpykn4nOpAQnv1vspkyN+MSHByBWyHQj1iJ5
TJIMKgxcujRrrSuS7V6WeX/edtEDTQ4ORcacCrp2II8jV8uSU1AiX9i67UuRG103
29+Wctuc3Zz1DNgZINcJCX13VbrXV2fOqoZ8GQuqCc9OkBgWHKzRwq1FLkZgXd/y
qblcvze3QQDnlVjCDUDvOzv+eCeC2Kg=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org