Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8135DAFE586811EE8C5EC0234AD9E6FC.roa
File: 8135DAFE586811EE8C5EC0234AD9E6FC.roa (raw, json)
Hash identifier: HLcmztELe0jUFFPD+83P8T0IcRaO9Qr50AHWeHAhnvg=
Subject key identifier: F3:B2:8F:41:C4:61:E6:A8:AF:49:BB:EA:52:BB:8A:78:FA:79:5C:06
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1257
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8135DAFE586811EE8C5EC0234AD9E6FC.roa
Signing time: Thu 21 Sep 2023 10:20:36 +0000
ROA not before: Thu 21 Sep 2023 10:20:33 +0000
ROA not after: Wed 25 Sep 2024 10:20:33 +0000
asID: 213060
IP address blocks: 154.16.24.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4695 (0x1257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 21 10:20:33 2023 GMT
Not After : Sep 25 10:20:33 2024 GMT
Subject: CN=650c18f4-d012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4b:08:d1:69:47:fc:e1:2f:49:7b:cc:f2:cc:
d4:76:52:c1:5a:f6:06:c0:ef:df:aa:63:5d:35:43:
c3:cb:a9:ba:b3:46:33:bb:2b:d8:87:da:52:4b:ac:
3f:77:86:24:8b:80:1d:3f:d6:a4:d0:97:19:d5:be:
b6:de:18:17:d5:22:9b:23:56:1d:8e:e3:e8:5b:2b:
bd:a0:cb:a1:2f:de:19:a6:1a:d4:28:64:a1:53:48:
f0:53:f0:4d:06:f1:9b:fa:e7:30:22:71:37:69:d7:
30:8c:72:3f:09:98:2a:6b:99:0f:1c:ff:4b:b4:d4:
99:03:0b:88:34:37:12:34:8d:a7:5c:c7:8d:3b:9b:
09:98:db:40:4d:ea:c4:bb:f6:c7:38:b3:17:7c:34:
85:c7:b1:bf:44:27:b8:2b:54:c5:99:00:22:41:6b:
cc:d9:ad:f3:0f:a7:ac:86:05:2d:99:a3:34:8a:c5:
99:9c:4b:05:6e:4c:b4:d5:b6:f3:81:cd:65:60:65:
f4:90:bb:a0:8c:3d:6e:25:44:58:31:da:8f:29:db:
1b:6c:e7:3d:81:99:0c:0d:82:70:17:f9:bb:b8:57:
d7:12:62:0b:67:b9:d8:fd:e0:37:b3:5c:5a:df:f2:
54:ae:75:1d:7c:e0:23:33:43:7f:23:84:6c:3d:42:
9d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B2:8F:41:C4:61:E6:A8:AF:49:BB:EA:52:BB:8A:78:FA:79:5C:06
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8135DAFE586811EE8C5EC0234AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.24.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:a9:81:9c:1b:ee:52:d2:42:88:75:a4:62:98:92:c8:a9:0a:
56:0b:e2:3a:d6:c8:5e:57:e1:39:54:73:71:06:05:18:96:89:
f8:c1:79:b2:e5:11:48:f5:f2:89:af:d2:a1:c3:ca:dc:43:28:
ce:b9:00:8e:ed:0c:51:8a:a7:41:28:96:76:9a:c1:03:5a:9a:
48:84:20:cc:33:81:64:94:51:81:b8:28:df:fa:33:3d:b6:cd:
3d:34:bb:61:c1:1e:96:3d:af:6b:83:f4:aa:97:4e:06:8a:14:
ac:98:9d:d2:ae:7b:10:c9:e4:62:6f:e7:f6:1f:c4:80:74:11:
df:63:7f:1e:1b:76:7e:c4:c2:c7:d4:0d:50:b5:a7:6a:b8:8b:
17:ea:a0:58:1b:25:55:a8:a8:0f:cb:90:17:d9:63:a7:ca:e3:
62:11:0e:5d:e6:35:9c:d2:1f:f6:78:2f:67:ba:d0:5a:38:1f:
30:97:5a:d8:c3:10:59:2d:b4:90:3c:29:2a:46:0e:f5:09:d6:
c8:56:6e:d8:cc:52:02:9b:75:a1:7f:1a:71:01:36:8e:f6:99:
0a:2b:bb:ec:2d:90:26:6e:7a:48:47:58:01:a7:e4:21:45:69:
cc:35:7f:0d:d5:2e:ef:39:6a:5b:4c:af:bc:1d:1e:50:f0:87:
91:9f:c0:84
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICElcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA5MjExMDIwMzNaFw0yNDA5MjUxMDIwMzNaMBgxFjAU
BgNVBAMTDTY1MGMxOGY0LWQwMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDZSwjRaUf84S9Je8zyzNR2UsFa9gbA79+qY101Q8PLqbqzRjO7K9iH2lJL
rD93hiSLgB0/1qTQlxnVvrbeGBfVIpsjVh2O4+hbK72gy6Ev3hmmGtQoZKFTSPBT
8E0G8Zv65zAicTdp1zCMcj8JmCprmQ8c/0u01JkDC4g0NxI0jadcx407mwmY20BN
6sS79sc4sxd8NIXHsb9EJ7grVMWZACJBa8zZrfMPp6yGBS2ZozSKxZmcSwVuTLTV
tvOBzWVgZfSQu6CMPW4lRFgx2o8p2xts5z2BmQwNgnAX+bu4V9cSYgtnudj94Dez
XFrf8lSudR184CMzQ38jhGw9Qp2LAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU87KP
QcRh5qivSbvqUruKePp5XAYwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzgxMzVEQUZFNTg2ODExRUU4QzVFQzAyMzRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGaEBgwDQYJKoZIhvcNAQEL
BQADggEBAB2pgZwb7lLSQoh1pGKYksipClYL4jrWyF5X4TlUc3EGBRiWifjBebLl
EUj18omv0qHDytxDKM65AI7tDFGKp0EolnaawQNamkiEIMwzgWSUUYG4KN/6Mz22
zT00u2HBHpY9r2uD9KqXTgaKFKyYndKuexDJ5GJv5/YfxIB0Ed9jfx4bdn7EwsfU
DVC1p2q4ixfqoFgbJVWoqA/LkBfZY6fK42IRDl3mNZzSH/Z4L2e60Fo4HzCXWtjD
EFkttJA8KSpGDvUJ1shWbtjMUgKbdaF/GnEBNo72mQoru+wtkCZuekhHWAGn5CFF
acw1fw3VLu85altMr7wdHlDwh5GfwIQ=
-----END CERTIFICATE-----
Generated at Thu Sep 28 11:46:38 2023 by rpki-client on console-fra.rpki-client.org