Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9DDDF5325D3211EEBA6AD76E4AD9E6FC.roa
File: 9DDDF5325D3211EEBA6AD76E4AD9E6FC.roa (raw, json)
Hash identifier: 7S+Ht8X4mgZ6SS9EQgi1/Vl02A4stPTHDKa4NyNuw7Y=
Subject key identifier: E1:94:C6:DE:81:BB:CD:7C:BA:BC:45:B1:58:F9:90:05:70:2A:0E:1C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 128A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9DDDF5325D3211EEBA6AD76E4AD9E6FC.roa
Signing time: Wed 27 Sep 2023 12:37:27 +0000
ROA not before: Wed 27 Sep 2023 12:37:24 +0000
ROA not after: Fri 27 Sep 2024 12:37:24 +0000
asID: 213060
IP address blocks: 154.16.100.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4746 (0x128a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 27 12:37:24 2023 GMT
Not After : Sep 27 12:37:24 2024 GMT
Subject: CN=65142207-bdf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:2a:a6:99:21:55:5a:0c:d4:72:40:37:02:21:
ab:bd:73:d4:37:a5:76:30:b2:15:69:3d:43:c7:d9:
e1:76:12:e2:38:4d:65:c2:9e:71:90:c3:4f:d5:dc:
4e:e4:ca:3e:5d:85:57:d5:12:d7:85:e1:a6:df:3e:
6e:e3:d8:bf:c5:40:85:80:ff:25:29:19:31:61:62:
d9:a8:a9:bd:6c:b2:45:ac:2c:d8:fc:2b:8c:2a:26:
f3:ac:4b:0c:aa:3f:ee:f1:54:bc:0a:d2:75:aa:40:
cc:bd:b3:1e:45:f6:86:96:34:fa:bf:e8:2a:d5:16:
5f:69:2c:09:ea:bd:27:f8:36:d3:ac:61:18:05:9b:
75:60:27:5a:a1:56:51:1f:33:7b:b5:4d:67:ec:be:
4f:44:b9:4e:d9:b4:14:94:9b:af:cd:46:b7:78:83:
f5:9e:02:34:18:40:a1:7f:c3:49:1c:e6:b4:27:31:
3d:2b:57:92:5f:d3:56:5e:50:76:ab:eb:3c:53:27:
54:1b:99:ec:72:38:6b:2d:91:c7:00:72:4e:e8:11:
ef:35:bb:f4:4a:38:fa:e6:76:37:d6:79:87:71:18:
78:0f:8c:ea:a9:0e:02:0c:58:dd:59:cc:35:43:38:
51:53:2b:85:5a:97:49:b7:40:ce:f4:5a:59:5b:14:
53:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:94:C6:DE:81:BB:CD:7C:BA:BC:45:B1:58:F9:90:05:70:2A:0E:1C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9DDDF5325D3211EEBA6AD76E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.100.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:65:80:35:46:5e:c7:93:e8:1e:0d:f1:5e:39:c2:34:cf:b9:
9f:e3:a1:ca:1d:f7:a6:92:f7:f1:b2:10:81:77:7f:14:ee:8c:
7a:83:84:a8:50:ed:fc:27:8a:14:1a:9d:54:c8:44:27:c8:a7:
a9:03:63:52:10:3e:1b:b1:e9:ab:08:2e:ee:51:75:f9:eb:6b:
cd:99:8d:f0:bb:14:75:ad:80:79:ed:74:ef:46:fd:1e:c2:19:
62:e1:f9:cb:78:b3:d3:6c:81:ff:15:0c:05:71:99:68:b8:b1:
82:d8:e9:fb:a0:1a:b2:b2:4f:90:18:77:0f:5b:c6:c7:78:1a:
97:dc:ab:66:56:46:d9:ba:35:9b:5e:52:99:c2:44:a6:4a:08:
f8:8d:6a:de:ab:06:c8:c9:bc:ff:26:04:8b:e5:45:54:23:e8:
06:37:4c:ec:8f:3a:2f:5d:8f:f9:a5:55:9d:4f:ef:7c:fe:4e:
08:d4:e8:7a:7e:da:73:52:f8:c9:17:d7:fb:d2:ba:ff:e9:b7:
cb:5a:ea:a3:18:ee:9d:a2:3f:82:e3:49:2b:45:8d:b6:ff:f6:
fb:a2:39:af:19:f7:54:b9:b9:3e:4a:8a:c2:07:1a:26:ee:60:
30:26:dc:1b:8e:09:92:57:e2:af:fc:79:d4:a7:9d:b6:09:05:
ca:b3:06:a1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEoowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA5MjcxMjM3MjRaFw0yNDA5MjcxMjM3MjRaMBgxFjAU
BgNVBAMTDTY1MTQyMjA3LWJkZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDyKqaZIVVaDNRyQDcCIau9c9Q3pXYwshVpPUPH2eF2EuI4TWXCnnGQw0/V
3E7kyj5dhVfVEteF4abfPm7j2L/FQIWA/yUpGTFhYtmoqb1sskWsLNj8K4wqJvOs
SwyqP+7xVLwK0nWqQMy9sx5F9oaWNPq/6CrVFl9pLAnqvSf4NtOsYRgFm3VgJ1qh
VlEfM3u1TWfsvk9EuU7ZtBSUm6/NRrd4g/WeAjQYQKF/w0kc5rQnMT0rV5Jf01Ze
UHar6zxTJ1QbmexyOGstkccAck7oEe81u/RKOPrmdjfWeYdxGHgPjOqpDgIMWN1Z
zDVDOFFTK4Val0m3QM70WllbFFNTAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU4ZTG
3oG7zXy6vEWxWPmQBXAqDhwwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzlERERGNTMyNUQzMjExRUVCQTZBRDc2RTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGaEGQwDQYJKoZIhvcNAQEL
BQADggEBAD9lgDVGXseT6B4N8V45wjTPuZ/jocod96aS9/GyEIF3fxTujHqDhKhQ
7fwnihQanVTIRCfIp6kDY1IQPhux6asILu5Rdfnra82ZjfC7FHWtgHntdO9G/R7C
GWLh+ct4s9Nsgf8VDAVxmWi4sYLY6fugGrKyT5AYdw9bxsd4Gpfcq2ZWRtm6NZte
UpnCRKZKCPiNat6rBsjJvP8mBIvlRVQj6AY3TOyPOi9dj/mlVZ1P73z+TgjU6Hp+
2nNS+MkX1/vSuv/pt8ta6qMY7p2iP4LjSStFjbb/9vuiOa8Z91S5uT5KisIHGibu
YDAm3BuOCZJX4q/8edSnnbYJBcqzBqE=
-----END CERTIFICATE-----
Generated at Thu Sep 28 07:17:21 2023 by rpki-client on console-ams.rpki-client.org