Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8BA1FE04B74C11ED8F603CEAF1222468.roa
File: 8BA1FE04B74C11ED8F603CEAF1222468.roa (raw, json)
Hash identifier: 9KybZpF0epjQiJfMnCZvgSl/DtH2Kx9TDK8efPo1sZc=
Subject key identifier: 39:23:30:3F:A8:F0:60:1C:F3:61:44:19:27:AA:F8:B6:F1:0B:5E:06
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0C7D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8BA1FE04B74C11ED8F603CEAF1222468.roa
Signing time: Tue 28 Feb 2023 09:44:51 +0000
ROA not before: Tue 28 Feb 2023 09:44:47 +0000
ROA not after: Fri 28 Feb 2025 09:44:47 +0000
asID: 61317
IP address blocks: 154.16.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 07:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3197 (0xc7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 28 09:44:47 2023 GMT
Not After : Feb 28 09:44:47 2025 GMT
Subject: CN=63fdcd13-b81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6f:c0:9f:4f:e2:64:d8:36:2d:44:37:e6:2e:
c2:4a:56:6d:7e:b9:4c:07:5f:68:3f:26:16:1a:f2:
f3:91:7a:92:97:c4:12:45:bd:cf:d1:d4:1e:91:c3:
b2:c2:a2:70:9f:1f:77:f9:35:f9:49:70:04:a1:84:
3f:46:fd:88:87:ca:be:73:d8:13:a9:ce:ab:91:37:
49:7b:a6:cb:cb:20:62:0f:22:0c:55:7b:e0:1b:a5:
27:b6:a1:a6:0e:68:fd:ef:dc:0d:57:71:56:96:12:
7f:0f:46:f4:ce:9e:c5:29:95:36:b7:1a:91:87:8e:
56:77:6a:3e:4a:86:5f:10:a5:2a:e0:5f:c3:ca:64:
a2:44:79:10:a3:e2:a5:24:d6:28:c9:73:67:78:84:
2b:f0:4a:7d:68:f8:30:f1:56:a0:c4:4e:28:ff:87:
38:58:45:a0:ef:ea:c6:43:52:45:c1:cd:e1:be:56:
79:43:43:5d:84:4a:6c:5b:52:24:43:04:1b:34:4c:
f9:e6:64:39:80:ce:4d:35:91:98:24:61:19:c5:61:
bc:b1:84:62:97:88:68:82:97:76:c2:2b:c4:2c:06:
72:83:d4:62:b4:1c:95:d3:43:4d:8d:00:25:c9:ff:
21:32:d9:c8:a3:d4:e8:e7:ad:cd:58:0d:07:64:91:
4c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:23:30:3F:A8:F0:60:1C:F3:61:44:19:27:AA:F8:B6:F1:0B:5E:06
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8BA1FE04B74C11ED8F603CEAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.166.0/24
Signature Algorithm: sha256WithRSAEncryption
40:c5:29:07:2d:3c:da:de:6c:24:db:f2:e3:42:68:42:9b:21:
4d:49:27:fd:e9:ba:0a:c6:6e:b8:43:5d:b7:05:75:9c:64:55:
ab:aa:df:7a:11:c4:2d:2e:84:88:25:0a:4a:88:b8:9d:25:fe:
c5:58:00:54:c7:5b:36:c3:29:d3:79:6c:cf:6c:16:55:c1:47:
c7:1e:8d:65:63:8a:37:4a:5f:e8:f0:2f:cb:bb:3c:49:50:68:
92:1e:62:95:bf:90:b7:4d:ca:6c:e4:e0:8b:f2:13:f9:4b:d5:
e1:29:57:58:e5:7a:06:3c:51:92:5a:1c:31:ef:50:2f:1c:3c:
a1:62:06:f5:fc:a4:40:e8:9d:73:f1:76:63:4d:c7:47:98:0d:
4b:70:a7:01:a4:7e:77:b0:0c:b7:cb:45:ed:e7:48:31:9f:4b:
be:a4:1a:0b:70:ee:54:c9:cc:f6:45:27:63:f9:25:ec:3d:84:
92:a6:4f:e9:0e:cc:c4:9d:cf:87:43:26:78:ff:3d:86:2d:da:
37:9e:d5:36:46:a7:0d:80:7f:15:88:a4:de:39:2b:d2:fb:56:
ab:16:01:df:1c:f4:a7:91:eb:de:c7:e2:94:0a:9c:ca:11:2e:
75:06:1c:f3:19:08:fd:bf:ac:e2:5f:9e:f6:4d:68:06:62:bd:
c2:b4:31:52
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDH0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzAyMjgwOTQ0NDdaFw0yNTAyMjgwOTQ0NDdaMBgxFjAU
BgNVBAMMDTYzZmRjZDEzLWI4MWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+b8CfT+Jk2DYtRDfmLsJKVm1+uUwHX2g/JhYa8vORepKXxBJFvc/R1B6R
w7LConCfH3f5NflJcAShhD9G/YiHyr5z2BOpzquRN0l7psvLIGIPIgxVe+AbpSe2
oaYOaP3v3A1XcVaWEn8PRvTOnsUplTa3GpGHjlZ3aj5Khl8QpSrgX8PKZKJEeRCj
4qUk1ijJc2d4hCvwSn1o+DDxVqDETij/hzhYRaDv6sZDUkXBzeG+VnlDQ12ESmxb
UiRDBBs0TPnmZDmAzk01kZgkYRnFYbyxhGKXiGiCl3bCK8QsBnKD1GK0HJXTQ02N
ACXJ/yEy2cij1Ojnrc1YDQdkkUzDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUOSMw
P6jwYBzzYUQZJ6r4tvELXgYwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzhCQTFGRTA0Qjc0QzExRUQ4RjYwM0NFQUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEKYwDQYJKoZIhvcNAQEL
BQADggEBAEDFKQctPNrebCTb8uNCaEKbIU1JJ/3pugrGbrhDXbcFdZxkVauq33oR
xC0uhIglCkqIuJ0l/sVYAFTHWzbDKdN5bM9sFlXBR8cejWVjijdKX+jwL8u7PElQ
aJIeYpW/kLdNymzk4IvyE/lL1eEpV1jlegY8UZJaHDHvUC8cPKFiBvX8pEDonXPx
dmNNx0eYDUtwpwGkfnewDLfLRe3nSDGfS76kGgtw7lTJzPZFJ2P5Jew9hJKmT+kO
zMSdz4dDJnj/PYYt2jee1TZGpw2AfxWIpN45K9L7VqsWAd8c9KeR697H4pQKnMoR
LnUGHPMZCP2/rOJfnvZNaAZivcK0MVI=
-----END CERTIFICATE-----
Generated at Fri Mar 1 08:14:49 2024 by rpki-client on console-ams.rpki-client.org