Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/929A65128E8211EEAB555FDB7D84E21B.roa
File: 929A65128E8211EEAB555FDB7D84E21B.roa (raw, json)
Hash identifier: zh7UoLEDhw/aEMO+U5qlhiG4yvj7OEwKYMqbfInJaVM=
Subject key identifier: 5A:06:F4:A5:87:9C:4A:B1:F2:BD:DD:02:06:84:9F:2D:92:99:D1:49
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 139F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/929A65128E8211EEAB555FDB7D84E21B.roa
Signing time: Wed 29 Nov 2023 06:43:15 +0000
ROA not before: Wed 29 Nov 2023 06:43:12 +0000
ROA not after: Sat 29 Nov 2025 06:43:12 +0000
asID: 3356
IP address blocks: 154.16.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5023 (0x139f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 29 06:43:12 2023 GMT
Not After : Nov 29 06:43:12 2025 GMT
Subject: CN=6566dd83-8a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:8a:40:a5:e3:8a:c1:cf:1e:97:17:4e:05:
5c:75:7f:96:3b:0c:10:34:12:5d:04:be:91:34:4b:
fe:5f:2e:70:47:e7:bb:fa:5d:6b:9b:f3:fd:ec:62:
8b:24:39:8d:ff:08:3d:23:78:bc:b2:52:fc:ad:77:
67:ed:35:e3:64:3f:be:41:bb:59:d1:ad:d2:fb:14:
43:6d:b8:cc:28:15:ba:5c:1f:76:1a:a8:f6:92:a2:
42:6c:d3:09:c3:36:df:76:b9:c5:28:02:4d:d7:7f:
c8:84:d6:8b:47:fe:14:0e:71:4b:7b:28:a7:f6:8b:
4b:0e:ed:5d:4a:e2:06:04:2f:72:d5:63:a6:b0:32:
c7:d8:14:d7:63:ab:3f:84:91:eb:d5:65:09:88:df:
7b:67:4e:20:07:b8:1a:e2:0a:be:66:8c:6e:99:ad:
cf:6f:26:ef:d3:b7:9f:49:31:45:cb:87:86:27:7d:
28:45:4f:1c:64:86:80:3f:99:e0:22:08:dc:ce:67:
8e:e4:02:24:b4:e5:67:b3:c2:5b:73:f2:56:01:e0:
bf:fe:81:38:d5:24:e8:7f:dc:e7:6c:f1:e1:86:85:
26:1f:3d:a6:d4:59:1f:6a:58:ac:43:3a:c1:bb:06:
21:e9:70:ee:7b:9c:50:ff:c8:d3:a7:60:3f:a1:89:
ac:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:06:F4:A5:87:9C:4A:B1:F2:BD:DD:02:06:84:9F:2D:92:99:D1:49
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/929A65128E8211EEAB555FDB7D84E21B.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.207.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:85:60:8c:0d:ef:ce:0f:03:25:4f:85:c1:b5:f4:60:ad:c1:
fd:af:6e:88:d9:c1:40:02:c1:7b:33:e5:1e:1f:e1:68:bc:22:
fb:f7:b6:b5:e3:3c:24:6f:db:43:f3:3d:87:69:c4:13:24:4c:
76:99:f3:06:0e:c9:04:f4:cc:e0:d6:6c:cf:8a:55:3f:87:38:
63:48:80:1f:84:73:7f:ff:98:ae:d7:7d:fc:bb:72:c3:ed:2e:
fd:14:45:bc:ce:5e:0a:c0:42:a5:4d:7b:51:96:90:57:21:76:
25:6c:15:7a:c0:3f:82:17:fb:ed:63:ee:a2:0e:c6:3f:30:25:
62:92:9b:e7:16:51:74:14:5f:d0:98:83:76:79:8f:2b:4f:ce:
a9:a6:14:ea:5d:c0:c0:1d:33:4f:45:e3:25:7b:84:36:9f:99:
b4:d3:50:c4:43:e8:eb:62:e0:6a:e9:71:c3:69:36:71:c6:69:
fd:3a:7c:4f:89:bc:d2:d4:04:39:36:0c:18:5d:63:e7:70:2b:
a9:c7:93:13:3d:1c:90:77:31:cf:c9:cd:a8:ee:aa:47:0d:6d:
0a:13:93:6c:5b:61:b4:ed:6c:d5:fc:9c:70:e4:f1:34:d6:e5:
70:bc:fb:1d:f0:0a:2b:84:67:95:b5:bf:dc:d7:a7:b9:88:e8:
12:79:bc:d2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICE58wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzExMjkwNjQzMTJaFw0yNTExMjkwNjQzMTJaMBgxFjAU
BgNVBAMTDTY1NjZkZDgzLThhNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6YIpApeOKwc8elxdOBVx1f5Y7DBA0El0EvpE0S/5fLnBH57v6XWub8/3s
YoskOY3/CD0jeLyyUvytd2ftNeNkP75Bu1nRrdL7FENtuMwoFbpcH3YaqPaSokJs
0wnDNt92ucUoAk3Xf8iE1otH/hQOcUt7KKf2i0sO7V1K4gYEL3LVY6awMsfYFNdj
qz+EkevVZQmI33tnTiAHuBriCr5mjG6Zrc9vJu/Tt59JMUXLh4YnfShFTxxkhoA/
meAiCNzOZ47kAiS05Wezwltz8lYB4L/+gTjVJOh/3Ods8eGGhSYfPabUWR9qWKxD
OsG7BiHpcO57nFD/yNOnYD+hiawlAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUWgb0
pYecSrHyvd0CBoSfLZKZ0UkwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzkyOUE2NTEyOEU4MjExRUVBQjU1NUZEQjdEODRFMjFCLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEM8wDQYJKoZIhvcNAQEL
BQADggEBAF+FYIwN784PAyVPhcG19GCtwf2vbojZwUACwXsz5R4f4Wi8Ivv3trXj
PCRv20PzPYdpxBMkTHaZ8wYOyQT0zODWbM+KVT+HOGNIgB+Ec3//mK7Xffy7csPt
Lv0URbzOXgrAQqVNe1GWkFchdiVsFXrAP4IX++1j7qIOxj8wJWKSm+cWUXQUX9CY
g3Z5jytPzqmmFOpdwMAdM09F4yV7hDafmbTTUMRD6Oti4GrpccNpNnHGaf06fE+J
vNLUBDk2DBhdY+dwK6nHkxM9HJB3Mc/JzajuqkcNbQoTk2xbYbTtbNX8nHDk8TTW
5XC8+x3wCiuEZ5W1v9zXp7mI6BJ5vNI=
-----END CERTIFICATE-----
Generated at Tue Dec 5 11:49:37 2023 by rpki-client on console-fra.rpki-client.org