Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9BADA850B43D11EDAA3734ABF1222468.roa
File: 9BADA850B43D11EDAA3734ABF1222468.roa (raw, json)
Hash identifier: AaC3PbzLb4mbHofWZTZAO7mohgcSrIeaqJP0fJ47aJI=
Subject key identifier: 0F:B2:81:6C:10:DB:4D:D7:E3:5C:89:C5:EC:D7:07:54:B9:33:50:33
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0C11
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9BADA850B43D11EDAA3734ABF1222468.roa
Signing time: Fri 24 Feb 2023 12:20:22 +0000
ROA not before: Fri 24 Feb 2023 12:20:18 +0000
ROA not after: Sat 22 Feb 2025 12:20:18 +0000
asID: 61317
IP address blocks: 154.16.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3089 (0xc11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 24 12:20:18 2023 GMT
Not After : Feb 22 12:20:18 2025 GMT
Subject: CN=63f8ab86-49d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6a:00:de:52:6f:69:d7:5b:07:2b:2c:d4:5b:
bc:5c:56:d3:16:6c:70:13:0d:d9:9f:b7:ff:36:bf:
b1:5f:40:b6:9d:ce:df:ce:fa:46:6f:95:72:b4:04:
3e:c4:9b:0e:cd:25:e6:b1:f6:b9:e6:23:4f:6c:18:
c5:5e:7f:34:a5:71:8d:77:8b:95:28:a5:6c:61:9f:
78:da:f6:29:1f:ac:a5:35:85:86:36:ce:84:f0:0d:
bc:4c:65:4a:b4:3e:76:a6:1f:6e:87:04:9b:45:b1:
d6:70:72:96:41:30:a8:ae:71:3a:7e:06:bb:16:cd:
99:01:9c:d6:12:54:f8:85:aa:7f:ff:79:45:63:71:
cb:1b:09:e6:a3:27:1c:22:fc:76:eb:8e:9b:d3:b5:
a6:04:e4:f1:af:bb:bf:0a:86:c2:35:aa:0f:5b:4c:
4d:90:43:17:69:67:09:f5:05:5b:51:21:ce:81:b7:
30:cc:44:95:cd:47:e2:19:8b:38:3a:83:0c:97:fa:
b9:44:33:1d:bd:51:8f:4a:a7:f0:38:53:3b:25:e3:
8f:d7:9f:cd:24:76:a6:4f:85:f2:7e:07:f8:e4:ae:
ee:1d:a6:35:06:98:52:8e:74:11:48:f7:e2:c0:8b:
1f:fc:3c:d9:c0:fd:71:aa:dd:73:d2:fb:ad:55:c8:
6f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B2:81:6C:10:DB:4D:D7:E3:5C:89:C5:EC:D7:07:54:B9:33:50:33
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9BADA850B43D11EDAA3734ABF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.46.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:83:5a:2b:db:96:f9:94:c7:e4:f9:2d:2c:40:44:bf:36:dc:
fc:a1:6d:fc:22:5d:3f:a1:cc:d1:43:e8:db:60:6d:24:9b:8d:
5a:76:72:89:a2:8c:07:d3:71:08:a2:0f:71:27:b3:d2:6e:ec:
68:fe:5f:6f:a3:ef:aa:24:07:64:f3:8b:88:8a:85:db:b0:fd:
4d:24:e8:11:4b:4d:19:d1:3a:6c:c0:dd:e0:d5:80:c4:e8:89:
f6:01:5d:35:7b:c6:bd:b0:82:2c:0b:cd:93:66:22:ee:56:5e:
71:ac:7c:e7:8f:b7:5c:01:f8:1f:b3:12:3b:58:7e:9e:a5:7a:
73:5d:2a:fb:8e:11:e2:3b:01:99:86:e1:d7:7b:b2:97:fc:bb:
03:6c:19:3c:7b:af:d5:fc:01:29:97:18:15:a0:ab:84:69:9b:
9c:9b:83:c3:2a:9f:39:c6:2c:12:12:25:67:ac:78:72:b9:20:
00:02:6e:bf:19:12:7b:b2:35:99:6f:45:07:e3:21:36:1e:f3:
0f:63:ae:4a:76:5f:bf:11:6f:79:41:61:b2:57:de:e5:02:da:
4a:16:c0:00:86:6f:89:19:b3:36:88:2b:a5:d3:49:a2:35:34:
87:7f:32:9c:3e:5c:d4:21:76:b8:ce:3f:2a:3c:0b:bd:43:1f:
67:7c:a5:a8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDBEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzAyMjQxMjIwMThaFw0yNTAyMjIxMjIwMThaMBgxFjAU
BgNVBAMMDTYzZjhhYjg2LTQ5ZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCagDeUm9p11sHKyzUW7xcVtMWbHATDdmft/82v7FfQLadzt/O+kZvlXK0
BD7Emw7NJeax9rnmI09sGMVefzSlcY13i5UopWxhn3ja9ikfrKU1hYY2zoTwDbxM
ZUq0PnamH26HBJtFsdZwcpZBMKiucTp+BrsWzZkBnNYSVPiFqn//eUVjccsbCeaj
Jxwi/HbrjpvTtaYE5PGvu78KhsI1qg9bTE2QQxdpZwn1BVtRIc6BtzDMRJXNR+IZ
izg6gwyX+rlEMx29UY9Kp/A4Uzsl44/Xn80kdqZPhfJ+B/jkru4dpjUGmFKOdBFI
9+LAix/8PNnA/XGq3XPS+61VyG9dAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUD7KB
bBDbTdfjXInF7NcHVLkzUDMwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzlCQURBODUwQjQzRDExRURBQTM3MzRBQkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEC4wDQYJKoZIhvcNAQEL
BQADggEBAH6DWivblvmUx+T5LSxARL823PyhbfwiXT+hzNFD6NtgbSSbjVp2comi
jAfTcQiiD3Ens9Ju7Gj+X2+j76okB2Tzi4iKhduw/U0k6BFLTRnROmzA3eDVgMTo
ifYBXTV7xr2wgiwLzZNmIu5WXnGsfOePt1wB+B+zEjtYfp6lenNdKvuOEeI7AZmG
4dd7spf8uwNsGTx7r9X8ASmXGBWgq4Rpm5ybg8MqnznGLBISJWeseHK5IAACbr8Z
EnuyNZlvRQfjITYe8w9jrkp2X78Rb3lBYbJX3uUC2koWwACGb4kZszaIK6XTSaI1
NId/Mpw+XNQhdrjOPyo8C71DH2d8pag=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org