Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/96DEB022104411EEA5AB81564AD9E6FC.roa
File: 96DEB022104411EEA5AB81564AD9E6FC.roa (raw, json)
Hash identifier: UAm0jUYolsDLUNO4df1ycb+qsAW44Zc7VWYCxz7vmkk=
Subject key identifier: F2:5B:90:27:11:EA:7B:74:48:03:15:CF:82:78:1B:57:92:17:38:4C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0FE7
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/96DEB022104411EEA5AB81564AD9E6FC.roa
Signing time: Wed 21 Jun 2023 15:02:07 +0000
ROA not before: Wed 21 Jun 2023 15:02:02 +0000
ROA not after: Fri 20 Jun 2025 15:02:02 +0000
asID: 20473
IP address blocks: 154.16.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4071 (0xfe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 21 15:02:02 2023 GMT
Not After : Jun 20 15:02:02 2025 GMT
Subject: CN=649310ef-25ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f5:b9:ca:e2:8f:07:34:a0:ce:d2:b6:c7:ae:
83:a0:88:ed:0b:62:07:38:85:31:1c:34:b2:6c:67:
12:b4:17:62:c3:0d:fd:de:5f:77:60:ec:89:43:3a:
c1:de:ac:5f:40:8f:90:c3:f7:fb:88:5a:c4:b6:b0:
7b:40:34:4f:21:af:bf:7c:ee:18:54:de:25:fb:3b:
65:96:96:ae:d9:4a:18:70:c6:f4:2c:62:41:b2:26:
18:08:17:c2:24:63:2e:3e:bd:17:1b:06:47:d5:e5:
29:f9:b9:42:09:10:91:0b:23:97:17:9c:f5:62:54:
2d:04:dd:e7:7b:81:fa:ff:f9:64:05:5d:2a:19:b2:
45:f1:a4:e9:5e:1d:05:d4:7d:d4:7f:31:07:fd:48:
23:ba:81:47:e2:23:f2:ae:82:1e:60:b3:b0:ee:82:
18:ef:f6:d8:7d:b7:78:7e:99:a7:a5:37:54:15:de:
fe:48:0a:29:2b:40:6b:4f:ca:2d:9d:8e:93:56:9c:
2a:51:14:80:ce:2a:3f:06:b6:c6:8e:e4:a3:da:d9:
99:ab:7b:77:06:d6:1e:66:ec:43:a0:f3:99:6f:24:
13:46:4a:8a:cb:59:11:28:61:87:6b:fb:1d:15:01:
f7:ec:d1:93:71:7a:dc:d1:bb:de:7d:d7:73:7b:4a:
d7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5B:90:27:11:EA:7B:74:48:03:15:CF:82:78:1B:57:92:17:38:4C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/96DEB022104411EEA5AB81564AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.61.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:83:50:5f:ba:4f:ac:c9:ce:cc:73:22:35:9b:a8:ee:9e:f5:
51:eb:e9:32:5b:6a:1e:9d:09:cb:b4:42:e6:63:89:b6:73:7a:
f6:dc:b6:68:69:f9:38:6e:a3:b2:17:e9:ae:7c:a2:65:b3:f1:
9c:b3:05:5c:37:91:43:3f:95:7e:19:96:a8:c6:5a:42:7d:84:
9c:d0:07:77:65:ba:24:93:f8:79:c9:6b:11:3d:5e:f4:e0:dd:
db:94:fb:05:f3:3e:04:a9:de:26:40:de:d6:1f:80:f7:11:75:
f3:1b:b3:a5:09:fd:e2:b7:f8:f1:a9:26:3e:23:b3:15:e1:6d:
fd:26:2e:8d:e4:38:20:38:56:33:b8:af:82:e8:f6:b8:7f:ec:
bd:ce:b0:88:85:5b:f0:48:42:ce:b3:00:c5:51:75:bb:32:05:
9d:d6:87:54:c5:ed:a3:59:02:1b:f2:2c:d9:50:38:7e:83:44:
4d:66:d0:ca:2e:c7:dd:3c:6c:85:df:a9:3e:f1:d8:14:e0:d7:
71:89:5a:71:7c:ab:fa:04:4b:db:80:17:aa:c6:c4:a3:ed:2f:
0e:a3:89:b9:2a:a8:b6:57:4f:47:5d:2a:26:69:77:66:50:e8:
77:2e:b3:3b:0b:fc:15:f5:fa:e4:28:d6:39:6b:a3:4c:fb:a6:
ce:b8:12:cb
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICD+cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA2MjExNTAyMDJaFw0yNTA2MjAxNTAyMDJaMBgxFjAU
BgNVBAMTDTY0OTMxMGVmLTI1Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDP9bnK4o8HNKDO0rbHroOgiO0LYgc4hTEcNLJsZxK0F2LDDf3eX3dg7IlD
OsHerF9Aj5DD9/uIWsS2sHtANE8hr7987hhU3iX7O2WWlq7ZShhwxvQsYkGyJhgI
F8IkYy4+vRcbBkfV5Sn5uUIJEJELI5cXnPViVC0E3ed7gfr/+WQFXSoZskXxpOle
HQXUfdR/MQf9SCO6gUfiI/Kugh5gs7Dughjv9th9t3h+maelN1QV3v5ICikrQGtP
yi2djpNWnCpRFIDOKj8GtsaO5KPa2Zmre3cG1h5m7EOg85lvJBNGSorLWREoYYdr
+x0VAffs0ZNxetzRu95913N7StdLAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU8luQ
JxHqe3RIAxXPgngbV5IXOEwwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4Lzk2REVCMDIyMTA0NDExRUVBNUFCODE1NjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaED0wDQYJKoZIhvcNAQEL
BQADggEBAH+DUF+6T6zJzsxzIjWbqO6e9VHr6TJbah6dCcu0QuZjibZzevbctmhp
+Thuo7IX6a58omWz8ZyzBVw3kUM/lX4ZlqjGWkJ9hJzQB3dluiST+HnJaxE9XvTg
3duU+wXzPgSp3iZA3tYfgPcRdfMbs6UJ/eK3+PGpJj4jsxXhbf0mLo3kOCA4VjO4
r4Lo9rh/7L3OsIiFW/BIQs6zAMVRdbsyBZ3Wh1TF7aNZAhvyLNlQOH6DRE1m0Mou
x908bIXfqT7x2BTg13GJWnF8q/oES9uAF6rGxKPtLw6jibkqqLZXT0ddKiZpd2ZQ
6HcuszsL/BX1+uQo1jlro0z7ps64Ess=
-----END CERTIFICATE-----
Generated at Fri Jul 21 01:05:14 2023 by rpki-client on console-fra.rpki-client.org