Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/920F501E3AA711EE8811762B4AD9E6FC.roa
File: 920F501E3AA711EE8811762B4AD9E6FC.roa (raw, json)
Hash identifier: DQqDRC6lD3hfedqUchvZanWDLRGBGwT87+Xd5Zr7mUM=
Subject key identifier: B2:B5:04:8B:DC:DB:66:68:D4:4E:B4:7E:82:C4:DC:F1:39:87:60:40
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1162
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/920F501E3AA711EE8811762B4AD9E6FC.roa
Signing time: Mon 14 Aug 2023 13:36:28 +0000
ROA not before: Mon 14 Aug 2023 13:36:25 +0000
ROA not after: Wed 13 Aug 2025 13:36:25 +0000
asID: 398465
IP address blocks: 154.16.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4450 (0x1162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 14 13:36:25 2023 GMT
Not After : Aug 13 13:36:25 2025 GMT
Subject: CN=64da2ddc-1037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fc:1e:69:a8:80:60:ab:85:96:ae:f4:c0:e2:
b8:a8:c3:f7:a1:16:d0:81:47:c4:c6:e6:22:9d:e7:
50:9d:f0:42:8a:e2:f5:85:75:20:73:6f:a8:9f:48:
fb:bd:d8:62:e4:f7:7c:0a:71:e3:52:94:86:18:ef:
c4:1a:38:7e:a7:95:49:5f:76:84:da:11:f2:79:6d:
29:9b:2d:7d:54:78:be:c3:2c:e6:2a:5c:f2:2c:85:
c1:0c:87:7c:1e:b3:82:02:b9:5e:ac:48:4f:17:1e:
61:5f:3c:78:9a:08:de:47:c2:9a:ed:82:c9:bf:c0:
bb:59:19:9d:bb:fe:23:a9:2a:3f:d4:db:c0:ee:2b:
ca:f8:51:34:54:06:15:97:b8:6f:ad:e4:4b:13:0e:
61:57:35:6f:d9:89:2f:5d:20:93:1a:f8:ad:3f:3f:
7f:e7:88:0a:eb:f7:b0:37:29:1c:be:c8:4e:fd:51:
5c:63:c2:92:ac:e9:6d:82:f3:b3:5d:fe:ea:99:03:
27:2d:a0:16:ad:af:54:0f:1e:22:69:7d:52:9a:95:
83:6b:44:8d:b9:f2:2f:48:3b:75:4a:1f:e3:1f:36:
10:17:a8:31:75:1d:82:b3:7c:1c:35:fd:15:d5:58:
1b:2a:fb:e1:ae:cf:ca:9a:3a:88:0d:48:dc:e4:f7:
ca:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B5:04:8B:DC:DB:66:68:D4:4E:B4:7E:82:C4:DC:F1:39:87:60:40
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/920F501E3AA711EE8811762B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.102.0/24
Signature Algorithm: sha256WithRSAEncryption
46:f8:d3:3f:0d:56:6f:96:f5:52:7e:3b:21:01:13:f4:2d:df:
ff:88:05:1f:cd:be:09:4e:22:48:8b:7d:f4:a9:7b:a5:65:db:
3f:12:63:2a:83:25:90:d3:b4:6e:95:48:96:1d:00:96:c5:2f:
32:62:fc:57:f0:ca:e4:9a:f6:0d:41:f3:71:47:3e:dd:cb:aa:
cf:e6:8e:db:a8:91:83:00:1c:06:9c:72:09:ca:c1:fd:8a:34:
e7:32:a8:72:09:79:cb:4d:07:3c:fa:3c:2a:d8:f4:2a:6e:7d:
0f:55:a4:8e:b0:ef:2a:ed:a0:2c:f2:0a:24:a0:29:20:e2:9f:
d8:a6:3a:54:1f:57:a3:b6:56:c0:b4:4f:71:58:ab:d7:ee:95:
f6:eb:67:3d:c7:f1:d4:a2:d5:7f:ae:fd:de:a2:77:36:64:87:
fb:08:e2:da:e4:17:ce:9f:b1:b5:06:99:f5:87:b6:e4:bc:f3:
64:83:e6:d1:4c:02:d9:c2:6f:f5:73:81:c7:c9:75:19:7e:77:
48:4b:bc:1f:ab:43:69:ae:f7:11:81:ef:65:63:18:be:eb:65:
21:4a:73:f7:b8:a3:2d:2e:d6:aa:cf:37:45:b2:81:f1:22:d3:
68:32:15:fc:5c:1f:f8:48:42:c9:97:f8:bd:b0:d5:29:61:94:
e6:b5:80:2a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEWIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA4MTQxMzM2MjVaFw0yNTA4MTMxMzM2MjVaMBgxFjAU
BgNVBAMTDTY0ZGEyZGRjLTEwMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDL/B5pqIBgq4WWrvTA4riow/ehFtCBR8TG5iKd51Cd8EKK4vWFdSBzb6if
SPu92GLk93wKceNSlIYY78QaOH6nlUlfdoTaEfJ5bSmbLX1UeL7DLOYqXPIshcEM
h3wes4ICuV6sSE8XHmFfPHiaCN5Hwprtgsm/wLtZGZ27/iOpKj/U28DuK8r4UTRU
BhWXuG+t5EsTDmFXNW/ZiS9dIJMa+K0/P3/niArr97A3KRy+yE79UVxjwpKs6W2C
87Nd/uqZAyctoBatr1QPHiJpfVKalYNrRI258i9IO3VKH+MfNhAXqDF1HYKzfBw1
/RXVWBsq++Guz8qaOogNSNzk98qRAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUsrUE
i9zbZmjUTrR+gsTc8TmHYEAwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzkyMEY1MDFFM0FBNzExRUU4ODExNzYyQjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEGYwDQYJKoZIhvcNAQEL
BQADggEBAEb40z8NVm+W9VJ+OyEBE/Qt3/+IBR/NvglOIkiLffSpe6Vl2z8SYyqD
JZDTtG6VSJYdAJbFLzJi/FfwyuSa9g1B83FHPt3Lqs/mjtuokYMAHAaccgnKwf2K
NOcyqHIJectNBzz6PCrY9CpufQ9VpI6w7yrtoCzyCiSgKSDin9imOlQfV6O2VsC0
T3FYq9fulfbrZz3H8dSi1X+u/d6idzZkh/sI4trkF86fsbUGmfWHtuS882SD5tFM
AtnCb/VzgcfJdRl+d0hLvB+rQ2mu9xGB72VjGL7rZSFKc/e4oy0u1qrPN0WygfEi
02gyFfxcH/hIQsmX+L2w1SlhlOa1gCo=
-----END CERTIFICATE-----
Generated at Fri Aug 18 03:43:17 2023 by rpki-client on console-ams.rpki-client.org