Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8EAC19B20C1611EEA1A3B02E4AD9E6FC.roa
File: 8EAC19B20C1611EEA1A3B02E4AD9E6FC.roa (raw, json)
Hash identifier: 7MexQOus75qprApbm8awGL9Pje25bTtKuEKXzrJtb6k=
Subject key identifier: 08:18:BD:BF:B4:C4:1B:30:C0:4D:45:9C:28:3C:E1:FB:54:BC:40:59
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F95
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8EAC19B20C1611EEA1A3B02E4AD9E6FC.roa
Signing time: Fri 16 Jun 2023 07:22:32 +0000
ROA not before: Fri 16 Jun 2023 07:22:28 +0000
ROA not after: Sun 15 Jun 2025 07:22:28 +0000
asID: 140155
IP address blocks: 154.16.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Jul 2023 20:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3989 (0xf95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Jun 16 07:22:28 2023 GMT
Not After : Jun 15 07:22:28 2025 GMT
Subject: CN=648c0db8-bdbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:a2:02:73:a8:bc:7e:03:6c:2b:8b:b6:fb:
de:74:99:3d:41:14:1b:73:b8:68:62:55:df:42:2f:
a9:03:07:0c:21:66:7f:41:15:66:78:bc:05:30:c1:
04:70:ab:67:a2:cf:68:42:b1:e9:29:f7:a9:fe:7c:
51:59:fa:32:99:f2:98:75:ea:27:49:b1:d0:3c:65:
22:88:fa:98:8d:2e:d5:37:ac:a6:c1:a4:65:1b:21:
5f:41:79:79:5b:ae:7b:85:7a:4b:0a:cb:3b:9c:a4:
b6:3b:12:dc:ed:21:ce:89:86:1a:31:17:1a:74:74:
72:39:29:af:b7:43:2c:2e:33:f4:57:0d:40:64:31:
74:96:4f:b0:23:f3:14:bc:57:49:7f:24:39:68:0a:
e8:5c:81:59:c5:4e:66:2a:4e:48:c1:4c:eb:45:13:
4f:53:17:06:ab:37:40:df:51:9c:81:6a:b3:0f:f4:
b8:98:0a:9e:6a:81:c3:5b:4d:82:b9:7e:2a:c2:23:
2f:e6:4c:6c:dc:f2:93:db:d1:1b:7a:d9:28:45:36:
df:dc:fe:d8:8d:d2:74:0b:92:29:2d:69:39:7a:9e:
a6:b9:bb:51:1b:7f:a2:d7:cd:5b:6c:6e:3a:8a:3c:
33:89:dd:c4:47:ce:13:c4:ef:7d:b0:11:f0:01:42:
b4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:18:BD:BF:B4:C4:1B:30:C0:4D:45:9C:28:3C:E1:FB:54:BC:40:59
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8EAC19B20C1611EEA1A3B02E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.183.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:7f:8d:f9:a9:d3:07:06:6d:2c:c1:cd:6b:50:e4:cd:f3:2c:
91:13:0b:c0:f5:73:7f:6a:73:e4:58:51:4f:ff:4b:b8:be:21:
3a:46:66:3a:d0:6d:46:42:ed:db:f9:a8:b8:e8:c8:3e:02:ac:
ee:c8:c7:89:51:16:f2:a2:2e:55:bf:f4:ce:1d:61:54:6c:86:
f6:c9:3f:06:3c:1a:db:83:36:06:08:3e:f7:a3:9c:92:38:25:
43:45:77:d4:d4:0b:d5:4f:4b:7c:34:d6:bc:8b:2e:b7:5c:cd:
26:aa:3d:84:4f:f8:8e:48:35:4d:01:2c:70:12:e6:80:ab:22:
d8:88:8d:fe:b7:d6:7a:22:18:8f:7a:63:80:66:f7:aa:1c:1a:
ba:9c:cb:05:17:de:52:cd:c9:a5:df:96:45:c5:ec:a6:e7:98:
70:f0:8e:be:d6:7b:12:87:c5:dc:58:a8:74:2b:60:c4:9d:4e:
e8:37:30:d9:ce:9f:e1:7c:ec:f0:fa:ec:53:b8:ee:07:e4:08:
f0:ff:9c:e8:31:eb:e7:50:a7:55:3e:7d:bf:9a:13:e3:dc:ab:
a9:e0:ab:89:ed:fb:a2:00:4c:d0:9c:09:6a:55:d5:2a:04:c4:
56:33:57:8b:ba:f3:06:23:23:82:47:0f:e5:f0:67:17:83:31:
e7:ab:47:80
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICD5UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA2MTYwNzIyMjhaFw0yNTA2MTUwNzIyMjhaMBgxFjAU
BgNVBAMTDTY0OGMwZGI4LWJkYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4p6ICc6i8fgNsK4u2+950mT1BFBtzuGhiVd9CL6kDBwwhZn9BFWZ4vAUw
wQRwq2eiz2hCsekp96n+fFFZ+jKZ8ph16idJsdA8ZSKI+piNLtU3rKbBpGUbIV9B
eXlbrnuFeksKyzucpLY7EtztIc6JhhoxFxp0dHI5Ka+3QywuM/RXDUBkMXSWT7Aj
8xS8V0l/JDloCuhcgVnFTmYqTkjBTOtFE09TFwarN0DfUZyBarMP9LiYCp5qgcNb
TYK5firCIy/mTGzc8pPb0Rt62ShFNt/c/tiN0nQLkiktaTl6nqa5u1Ebf6LXzVts
bjqKPDOJ3cRHzhPE732wEfABQrQXAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUCBi9
v7TEGzDATUWcKDzh+1S8QFkwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzhFQUMxOUIyMEMxNjExRUVBMUEzQjAyRTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaELcwDQYJKoZIhvcNAQEL
BQADggEBAKl/jfmp0wcGbSzBzWtQ5M3zLJETC8D1c39qc+RYUU//S7i+ITpGZjrQ
bUZC7dv5qLjoyD4CrO7Ix4lRFvKiLlW/9M4dYVRshvbJPwY8GtuDNgYIPvejnJI4
JUNFd9TUC9VPS3w01ryLLrdczSaqPYRP+I5INU0BLHAS5oCrItiIjf631noiGI96
Y4Bm96ocGrqcywUX3lLNyaXflkXF7KbnmHDwjr7WexKHxdxYqHQrYMSdTug3MNnO
n+F87PD67FO47gfkCPD/nOgx6+dQp1U+fb+aE+Pcq6ngq4nt+6IATNCcCWpV1SoE
xFYzV4u68wYjI4JHD+XwZxeDMeerR4A=
-----END CERTIFICATE-----
Generated at Wed Feb 5 14:58:39 2025 by rpki-client