Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7B833BDC77C711EE825533314AD9E6FC.roa
File: 7B833BDC77C711EE825533314AD9E6FC.roa (raw, json)
Hash identifier: JOju4ZbYR3LB3JzFjcWWBlp0fW7ef9CuiCf6TnRon2w=
Subject key identifier: 8E:27:EB:CC:9D:20:BB:B2:8A:31:7E:12:C5:59:AB:D7:92:B0:9B:D8
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 12FB
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7B833BDC77C711EE825533314AD9E6FC.roa
Signing time: Tue 31 Oct 2023 08:28:35 +0000
ROA not before: Tue 31 Oct 2023 08:28:32 +0000
ROA not after: Fri 31 Oct 2025 08:28:32 +0000
asID: 834
IP address blocks: 154.16.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4859 (0x12fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 31 08:28:32 2023 GMT
Not After : Oct 31 08:28:32 2025 GMT
Subject: CN=6540bab3-deb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:13:b9:84:de:6b:d2:d3:8a:41:59:a1:6c:6f:
31:3c:23:d2:46:97:80:9a:db:d9:7b:6f:dd:cd:76:
de:b4:2a:ea:4b:31:63:0e:8c:fa:7a:99:7d:3b:af:
eb:10:47:7c:b1:26:0b:ab:2d:6f:b9:3f:c4:3a:25:
c0:06:57:0a:a3:fa:82:7a:e0:8e:a0:61:d9:0b:70:
5f:0e:ce:6d:ae:73:c6:d9:e0:64:4d:1d:81:cf:e0:
26:2c:41:52:2e:b9:6e:7b:85:ef:bb:0c:87:26:9c:
1d:e7:1d:63:cb:02:bd:15:55:52:40:35:e6:06:5f:
53:10:dc:02:cc:de:44:4d:0e:12:9e:c6:4d:f3:15:
22:aa:66:a1:2a:d0:08:32:a5:e4:f5:41:ed:e7:df:
40:79:f2:85:5c:42:d5:e4:98:a1:24:ef:fd:09:7a:
b1:f8:4f:a7:26:41:3f:42:f8:58:19:8d:17:12:cd:
29:e7:cb:8c:43:1b:69:29:86:ec:14:d3:df:8a:27:
cc:16:39:f4:a1:dd:21:7d:31:02:9c:64:a7:15:8d:
6a:b7:46:c4:f9:17:a0:84:d3:dd:79:f6:f3:33:0f:
ee:26:72:66:5b:e0:a4:58:94:a5:82:21:72:49:6d:
66:cf:99:bb:48:fa:9a:ba:24:3e:7f:75:04:29:99:
2f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:27:EB:CC:9D:20:BB:B2:8A:31:7E:12:C5:59:AB:D7:92:B0:9B:D8
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7B833BDC77C711EE825533314AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.76.0/24
Signature Algorithm: sha256WithRSAEncryption
20:14:7a:7c:fd:20:91:ba:cf:9b:ef:1a:a9:39:75:d8:7d:db:
d0:35:8f:0d:7b:8a:2d:43:c7:f3:c9:f8:34:fb:f0:c1:f4:ca:
d8:5c:d3:c7:93:4b:6d:59:05:7a:d2:44:1c:50:72:76:9e:a9:
82:ca:9a:f5:89:df:4a:42:60:1d:d5:9c:b6:55:96:63:7e:d4:
75:97:d0:7b:54:10:0a:58:66:9c:fb:73:86:95:cc:96:ae:4a:
1b:d4:de:c2:0b:83:c8:93:f0:bb:1d:54:27:c4:d6:d4:38:e7:
1b:dc:fd:8c:ac:44:58:b9:f3:68:89:78:3c:c0:ca:32:18:58:
cf:7f:57:5c:97:2c:f6:50:8f:3e:e4:aa:f0:4d:4a:36:6e:a3:
c4:c9:77:56:4c:97:83:55:07:dc:b4:91:0c:f1:f6:7a:72:ae:
3d:84:83:ba:c1:ce:03:a3:b3:0c:e6:0c:c6:98:7c:32:5b:6e:
70:37:3c:38:17:1d:a9:68:fa:a9:b4:ee:e3:9d:be:2d:cf:93:
c3:54:12:a4:8d:ba:0d:48:e5:a4:af:5c:83:53:2c:bc:ed:b3:
5a:56:7b:dd:09:62:a6:37:2c:14:fc:37:34:db:f0:47:01:33:
82:74:59:50:49:ba:21:46:96:2f:e2:fc:1d:b1:86:78:0a:c7:
31:b9:7c:d7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEvswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzEwMzEwODI4MzJaFw0yNTEwMzEwODI4MzJaMBgxFjAU
BgNVBAMTDTY1NDBiYWIzLWRlYjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRE7mE3mvS04pBWaFsbzE8I9JGl4Ca29l7b93Ndt60KupLMWMOjPp6mX07
r+sQR3yxJgurLW+5P8Q6JcAGVwqj+oJ64I6gYdkLcF8Ozm2uc8bZ4GRNHYHP4CYs
QVIuuW57he+7DIcmnB3nHWPLAr0VVVJANeYGX1MQ3ALM3kRNDhKexk3zFSKqZqEq
0AgypeT1Qe3n30B58oVcQtXkmKEk7/0JerH4T6cmQT9C+FgZjRcSzSnny4xDG2kp
huwU09+KJ8wWOfSh3SF9MQKcZKcVjWq3RsT5F6CE09159vMzD+4mcmZb4KRYlKWC
IXJJbWbPmbtI+pq6JD5/dQQpmS/VAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUjifr
zJ0gu7KKMX4SxVmr15Kwm9gwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzdCODMzQkRDNzdDNzExRUU4MjU1MzMzMTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEEwwDQYJKoZIhvcNAQEL
BQADggEBACAUenz9IJG6z5vvGqk5ddh929A1jw17ii1Dx/PJ+DT78MH0ythc08eT
S21ZBXrSRBxQcnaeqYLKmvWJ30pCYB3VnLZVlmN+1HWX0HtUEApYZpz7c4aVzJau
ShvU3sILg8iT8LsdVCfE1tQ45xvc/YysRFi582iJeDzAyjIYWM9/V1yXLPZQjz7k
qvBNSjZuo8TJd1ZMl4NVB9y0kQzx9npyrj2Eg7rBzgOjswzmDMaYfDJbbnA3PDgX
Halo+qm07uOdvi3Pk8NUEqSNug1I5aSvXINTLLzts1pWe90JYqY3LBT8NzTb8EcB
M4J0WVBJuiFGli/i/B2xhngKxzG5fNc=
-----END CERTIFICATE-----
Generated at Fri Nov 10 12:00:14 2023 by rpki-client on console-fra.rpki-client.org