Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9A0A071A3AA611EE97D39E284AD9E6FC.roa
File: 9A0A071A3AA611EE97D39E284AD9E6FC.roa (raw, json)
Hash identifier: CA8DP+2RRdkZtyfEK8JKL1tr7/sD6sG7cqVHfq2ZcFk=
Subject key identifier: 5C:CF:DE:10:E0:3D:FE:0A:66:67:0E:EC:F3:78:CE:AE:E7:87:B4:CF
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1156
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9A0A071A3AA611EE97D39E284AD9E6FC.roa
Signing time: Mon 14 Aug 2023 13:29:32 +0000
ROA not before: Mon 14 Aug 2023 13:29:29 +0000
ROA not after: Wed 13 Aug 2025 13:29:29 +0000
asID: 398465
IP address blocks: 154.16.78.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4438 (0x1156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 14 13:29:29 2023 GMT
Not After : Aug 13 13:29:29 2025 GMT
Subject: CN=64da2c3c-67eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f9:29:ff:81:67:38:33:96:32:26:f8:d1:b7:
f7:36:8f:63:84:ed:1d:4b:68:e7:cd:b5:c5:3f:ac:
5e:ca:4b:b1:09:66:f6:83:06:2c:e1:a0:1c:50:f9:
9a:15:b5:f2:73:68:7a:e6:07:f3:42:8c:a1:6c:2e:
ef:40:4e:71:1b:ac:68:1b:6e:99:75:1b:63:e7:70:
d7:97:e9:34:ca:e3:4b:7b:b7:fe:92:6a:24:fd:c4:
61:8d:72:d7:83:72:33:a1:d1:2b:f0:3d:66:ad:94:
64:89:0b:34:39:ca:2f:d5:a1:c4:99:30:98:fb:b3:
ba:30:9a:0b:90:95:04:e1:c5:7a:de:31:ae:14:ea:
a1:d3:0d:af:33:a6:ec:4c:09:31:1a:21:3a:34:5d:
0b:e9:4b:8f:32:dc:f0:4d:89:90:94:fc:e7:7a:71:
3f:bc:08:24:de:64:e9:05:db:1c:48:22:a3:aa:97:
32:7c:f3:c5:40:30:54:12:05:48:72:c5:f3:15:4e:
03:bf:e4:af:e6:f9:5b:fc:ce:42:01:36:06:db:9c:
ac:db:3a:ac:a0:80:71:b5:aa:5e:00:f6:79:25:44:
34:d4:1f:fc:ea:5c:6a:22:85:7a:c3:b2:18:b2:b1:
a3:bf:0e:4c:fa:6b:54:55:06:98:ee:85:24:fb:e9:
05:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CF:DE:10:E0:3D:FE:0A:66:67:0E:EC:F3:78:CE:AE:E7:87:B4:CF
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9A0A071A3AA611EE97D39E284AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.78.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:2b:93:7a:be:3c:4e:f1:31:4f:49:05:29:94:6b:14:32:12:
56:e3:31:11:ca:9a:55:28:82:06:cd:16:bc:fd:27:91:13:cc:
e6:1d:17:86:9b:5e:46:e1:5b:c0:1b:b4:98:2f:89:4c:0b:57:
c5:0a:96:4d:5b:f7:b5:9f:54:02:38:34:00:87:fb:b8:07:bd:
fd:30:a1:9a:0f:b6:62:fa:69:54:9f:89:a3:61:98:e0:9b:be:
e6:ba:60:80:91:7c:c4:f8:4a:e1:ed:ca:11:fe:bb:31:37:bd:
e1:2d:87:2d:e4:b5:31:fb:f6:ac:96:26:c4:8f:73:69:4a:a7:
9b:90:c4:e1:4e:ba:6f:71:6a:ba:b0:9a:e5:7f:0a:83:b9:6c:
20:32:2d:12:58:07:13:1f:5a:df:5f:41:79:44:aa:75:3e:9f:
0f:24:2b:68:3a:1c:ed:1d:ae:af:d9:5b:66:c4:5e:31:dd:3e:
b0:bf:b9:f1:39:da:33:d7:80:f8:60:98:f4:81:40:30:02:4f:
8f:b1:c5:4c:6d:8f:08:c9:60:8c:6d:66:5c:11:6f:16:94:56:
ed:8a:df:a9:23:69:ff:a1:6e:74:aa:92:40:e5:2d:3f:17:a5:
cf:90:72:8e:f9:3d:aa:3d:87:c9:26:30:05:f1:01:3f:b0:74:
a7:6f:d5:30
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEVYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA4MTQxMzI5MjlaFw0yNTA4MTMxMzI5MjlaMBgxFjAU
BgNVBAMTDTY0ZGEyYzNjLTY3ZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDb+Sn/gWc4M5YyJvjRt/c2j2OE7R1LaOfNtcU/rF7KS7EJZvaDBizhoBxQ
+ZoVtfJzaHrmB/NCjKFsLu9ATnEbrGgbbpl1G2PncNeX6TTK40t7t/6SaiT9xGGN
cteDcjOh0SvwPWatlGSJCzQ5yi/VocSZMJj7s7owmguQlQThxXreMa4U6qHTDa8z
puxMCTEaITo0XQvpS48y3PBNiZCU/Od6cT+8CCTeZOkF2xxIIqOqlzJ888VAMFQS
BUhyxfMVTgO/5K/m+Vv8zkIBNgbbnKzbOqyggHG1ql4A9nklRDTUH/zqXGoihXrD
shiysaO/Dkz6a1RVBpjuhST76QUvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUXM/e
EOA9/gpmZw7s83jOrueHtM8wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzlBMEEwNzFBM0FBNjExRUU5N0QzOUUyODRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEE4wDQYJKoZIhvcNAQEL
BQADggEBAKArk3q+PE7xMU9JBSmUaxQyElbjMRHKmlUoggbNFrz9J5ETzOYdF4ab
XkbhW8AbtJgviUwLV8UKlk1b97WfVAI4NACH+7gHvf0woZoPtmL6aVSfiaNhmOCb
vua6YICRfMT4SuHtyhH+uzE3veEthy3ktTH79qyWJsSPc2lKp5uQxOFOum9xarqw
muV/CoO5bCAyLRJYBxMfWt9fQXlEqnU+nw8kK2g6HO0drq/ZW2bEXjHdPrC/ufE5
2jPXgPhgmPSBQDACT4+xxUxtjwjJYIxtZlwRbxaUVu2K36kjaf+hbnSqkkDlLT8X
pc+Qco75Pao9h8kmMAXxAT+wdKdv1TA=
-----END CERTIFICATE-----
Generated at Tue Aug 22 12:40:43 2023 by rpki-client on console-fra.rpki-client.org