Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/954AB016A54B11EEA5B7633CD25BE465.roa
File: 954AB016A54B11EEA5B7633CD25BE465.roa (raw, json)
Hash identifier: PrV4WDq93jrU0TX2fBggT/gasXGgvN8rjHeaF++Llos=
Subject key identifier: B7:91:92:78:B9:1E:B5:0C:96:5A:A4:E9:17:2E:54:F9:00:7C:C6:65
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 140F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/954AB016A54B11EEA5B7633CD25BE465.roa
Signing time: Thu 28 Dec 2023 06:37:34 +0000
ROA not before: Thu 28 Dec 2023 06:37:31 +0000
ROA not after: Sun 28 Dec 2025 06:37:31 +0000
asID: 3320
IP address blocks: 154.16.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5135 (0x140f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Dec 28 06:37:31 2023 GMT
Not After : Dec 28 06:37:31 2025 GMT
Subject: CN=658d17ae-e92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:57:03:24:a7:05:33:48:89:78:a9:cc:6e:46:
de:ce:6b:84:08:24:6a:4b:ce:81:aa:a6:41:26:db:
54:e9:7b:00:33:87:e9:e2:f7:39:13:57:b3:0f:4d:
a2:f8:06:53:d4:5b:ea:d8:c0:92:5b:09:18:9d:55:
d1:d4:e4:40:e4:92:2d:5c:d4:b8:8a:e2:2e:4e:42:
37:23:c2:ab:21:dc:bc:57:64:68:9e:87:2f:9c:20:
c1:fc:fc:18:8f:63:23:c1:20:f1:79:a2:3d:34:4f:
87:23:c4:87:a2:4c:a2:9e:7d:1e:6e:22:af:fd:91:
ea:19:17:2a:f8:92:76:3c:82:a7:1c:07:1c:04:e9:
65:68:04:74:4f:8d:c2:d5:bb:a8:3b:32:19:96:7c:
cf:29:50:c1:b7:a4:bf:d4:c7:20:7d:6c:82:ac:7f:
13:fa:d6:ff:8d:7a:ad:b2:ad:b8:49:41:39:3f:cf:
97:73:a9:ca:c1:e2:0a:8b:03:37:16:ac:de:51:db:
78:0f:0e:83:b2:09:91:d3:e7:5c:ab:ce:0d:a2:ac:
11:56:04:4b:4e:53:fd:33:10:f0:63:00:be:e8:1d:
4f:ca:a1:2b:6e:5d:c7:d7:54:cd:33:67:2c:d3:9c:
9d:26:ad:1a:42:18:0b:d5:78:a0:db:ba:7f:9b:c3:
70:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:91:92:78:B9:1E:B5:0C:96:5A:A4:E9:17:2E:54:F9:00:7C:C6:65
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/954AB016A54B11EEA5B7633CD25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.225.0/24
Signature Algorithm: sha256WithRSAEncryption
38:d2:e4:88:32:b6:2a:2e:27:9d:30:87:95:83:22:0b:c4:09:
f3:d0:85:f8:df:cd:84:54:5f:3b:68:3d:25:99:20:97:31:bf:
ef:6e:06:83:93:f8:a8:86:d7:7c:7e:8d:0a:4d:5d:51:ea:79:
19:0e:90:ff:6d:e4:48:d8:01:dd:a2:70:cc:65:0d:e6:48:c9:
1a:e8:f7:2b:ce:2a:cf:24:fd:9f:e2:9c:37:53:45:85:cf:3d:
a9:40:b9:c8:40:15:9c:1f:9d:92:58:9c:3f:df:82:b4:ac:c9:
09:b8:38:5b:1f:4e:cd:bf:8a:eb:52:cc:cb:76:a1:3d:c6:dc:
2d:ed:fd:16:84:02:c8:91:b5:af:71:d2:2c:f9:65:33:91:32:
c1:a5:ee:ea:96:3f:d3:6a:8f:cb:66:68:90:1d:e8:8c:28:79:
ed:9d:96:e5:37:f8:4a:69:aa:0c:1a:37:60:13:f4:0d:ad:1b:
25:6a:19:28:cc:2a:e9:f2:85:c2:de:47:b9:32:dc:d0:fc:e9:
cd:e3:30:43:0d:c0:36:4e:7a:4c:59:c5:42:7e:64:2f:51:22:
3c:1c:b4:41:2a:1c:46:fc:3a:97:62:6e:d4:24:71:e5:dd:bf:
c5:94:7c:27:2f:8f:d7:eb:91:a5:d7:33:b0:fd:6d:89:8d:df:
96:05:11:22
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFA8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzEyMjgwNjM3MzFaFw0yNTEyMjgwNjM3MzFaMBgxFjAU
BgNVBAMTDTY1OGQxN2FlLWU5MmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/VwMkpwUzSIl4qcxuRt7Oa4QIJGpLzoGqpkEm21TpewAzh+ni9zkTV7MP
TaL4BlPUW+rYwJJbCRidVdHU5EDkki1c1LiK4i5OQjcjwqsh3LxXZGiehy+cIMH8
/BiPYyPBIPF5oj00T4cjxIeiTKKefR5uIq/9keoZFyr4knY8gqccBxwE6WVoBHRP
jcLVu6g7MhmWfM8pUMG3pL/UxyB9bIKsfxP61v+Neq2yrbhJQTk/z5dzqcrB4gqL
AzcWrN5R23gPDoOyCZHT51yrzg2irBFWBEtOU/0zEPBjAL7oHU/KoStuXcfXVM0z
ZyzTnJ0mrRpCGAvVeKDbun+bw3DRAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUt5GS
eLketQyWWqTpFy5U+QB8xmUwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4Lzk1NEFCMDE2QTU0QjExRUVBNUI3NjMzQ0QyNUJFNDY1LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEOEwDQYJKoZIhvcNAQEL
BQADggEBADjS5IgytiouJ50wh5WDIgvECfPQhfjfzYRUXztoPSWZIJcxv+9uBoOT
+KiG13x+jQpNXVHqeRkOkP9t5EjYAd2icMxlDeZIyRro9yvOKs8k/Z/inDdTRYXP
PalAuchAFZwfnZJYnD/fgrSsyQm4OFsfTs2/iutSzMt2oT3G3C3t/RaEAsiRta9x
0iz5ZTORMsGl7uqWP9Nqj8tmaJAd6Iwoee2dluU3+EppqgwaN2AT9A2tGyVqGSjM
KunyhcLeR7ky3ND86c3jMEMNwDZOekxZxUJ+ZC9RIjwctEEqHEb8OpdibtQkceXd
v8WUfCcvj9frkaXXM7D9bYmN35YFESI=
-----END CERTIFICATE-----
Generated at Fri Dec 29 08:55:15 2023 by rpki-client on console-ams.rpki-client.org