Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9F392080047E11EE9084573D4AD9E6FC.roa
File: 9F392080047E11EE9084573D4AD9E6FC.roa (raw, json)
Hash identifier: HlpZd4bgpZ8wgceuSTx4kVOBr0kdPPVQC4OMylRtI7c=
Subject key identifier: A6:0B:57:13:0D:CB:D6:95:F3:58:D7:83:C5:16:60:E9:44:7E:3B:EE
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0ED8
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9F392080047E11EE9084573D4AD9E6FC.roa
Signing time: Tue 06 Jun 2023 15:27:18 +0000
ROA not before: Tue 06 Jun 2023 15:27:14 +0000
ROA not after: Thu 05 Jun 2025 15:27:14 +0000
asID: 399045
IP address blocks: 154.16.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3800 (0xed8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 6 15:27:14 2023 GMT
Not After : Jun 5 15:27:14 2025 GMT
Subject: CN=647f5056-b5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bc:66:84:bb:f4:04:3f:64:b9:44:df:f1:34:
e4:f4:22:d4:b5:aa:53:73:9f:eb:c9:94:c5:02:03:
a5:7b:57:52:53:eb:00:89:45:ba:f7:24:82:08:c3:
e9:e5:21:97:8f:f6:6f:97:f5:23:1f:b6:a6:12:7c:
d0:ed:9b:28:a6:c5:75:72:2e:96:b4:af:24:83:2c:
01:ab:89:bd:87:a5:a0:1e:3c:c5:e5:e4:bd:da:c7:
83:70:48:e4:6c:94:f3:e0:63:21:ae:94:dd:7a:70:
15:d7:f3:ad:ed:7b:da:16:3b:5e:d4:12:49:cd:9a:
a3:e5:ed:9e:13:54:54:29:6a:8a:7f:23:e7:9b:c8:
a8:1e:e3:09:de:2e:e2:bb:80:b1:ab:78:1c:7a:d0:
8e:51:23:17:df:25:38:4d:a2:7b:6c:ff:ae:84:d1:
00:e0:a0:f4:ef:a6:3b:5e:90:a9:f2:75:b1:31:d3:
f4:8d:83:61:ac:c5:eb:3f:6e:45:2e:ae:6a:6f:fb:
5c:ff:97:c4:36:da:f3:70:57:d0:58:c3:df:f4:51:
8e:eb:60:84:22:b4:90:08:0b:94:73:57:58:e9:81:
ed:32:2b:cf:c7:ad:ee:e0:7e:be:03:e5:7e:34:0a:
0c:ed:a6:d7:11:3d:2d:f7:a3:88:2b:af:12:1a:b2:
85:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0B:57:13:0D:CB:D6:95:F3:58:D7:83:C5:16:60:E9:44:7E:3B:EE
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9F392080047E11EE9084573D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.39.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:d8:6e:57:2b:82:15:32:6d:6a:e2:e7:68:22:70:32:da:25:
4a:83:e4:c3:20:99:f4:f2:61:39:ea:34:80:61:e0:54:a0:d0:
65:71:9e:75:d6:69:1b:45:ae:56:67:54:ee:9b:94:60:27:45:
22:4d:4d:41:c2:aa:83:60:62:da:77:3c:3c:9c:0e:4c:6b:19:
37:d8:f6:11:4c:49:c3:d3:50:65:af:6e:6d:1f:bb:36:c7:cd:
c1:42:07:2e:95:4e:77:98:7f:eb:9b:56:94:4c:c4:ef:11:db:
0b:16:24:48:f8:66:8a:8a:ba:05:d1:fb:23:08:45:88:49:0b:
a4:34:05:a1:9f:61:2b:56:7c:44:fc:87:6f:02:65:6c:8b:bc:
60:5c:e8:28:8a:9b:31:09:ea:b3:ff:07:4c:84:43:4c:02:12:
f5:3e:b8:29:01:98:ae:9f:65:18:62:f1:b7:ff:9f:a0:36:95:
84:ab:6e:97:b3:80:92:13:93:73:32:35:8d:8b:c8:d4:27:67:
a0:a3:85:23:d5:56:0f:03:80:45:25:30:64:01:c9:0d:22:67:
de:ed:f2:75:6f:83:d1:66:db:b6:85:78:70:a9:5d:80:3b:a8:
a6:17:4d:15:3c:5f:0e:8e:96:44:25:fa:ec:fa:8f:e4:8e:79:
93:02:17:98
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDtgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA2MDYxNTI3MTRaFw0yNTA2MDUxNTI3MTRaMBgxFjAU
BgNVBAMTDTY0N2Y1MDU2LWI1YjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDivGaEu/QEP2S5RN/xNOT0ItS1qlNzn+vJlMUCA6V7V1JT6wCJRbr3JIII
w+nlIZeP9m+X9SMftqYSfNDtmyimxXVyLpa0rySDLAGrib2HpaAePMXl5L3ax4Nw
SORslPPgYyGulN16cBXX863te9oWO17UEknNmqPl7Z4TVFQpaop/I+ebyKge4wne
LuK7gLGreBx60I5RIxffJThNonts/66E0QDgoPTvpjtekKnydbEx0/SNg2Gsxes/
bkUurmpv+1z/l8Q22vNwV9BYw9/0UY7rYIQitJAIC5RzV1jpge0yK8/Hre7gfr4D
5X40CgztptcRPS33o4grrxIasoWRAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUpgtX
Ew3L1pXzWNeDxRZg6UR+O+4wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzlGMzkyMDgwMDQ3RTExRUU5MDg0NTczRDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaECcwDQYJKoZIhvcNAQEL
BQADggEBAKrYblcrghUybWri52gicDLaJUqD5MMgmfTyYTnqNIBh4FSg0GVxnnXW
aRtFrlZnVO6blGAnRSJNTUHCqoNgYtp3PDycDkxrGTfY9hFMScPTUGWvbm0fuzbH
zcFCBy6VTneYf+ubVpRMxO8R2wsWJEj4ZoqKugXR+yMIRYhJC6Q0BaGfYStWfET8
h28CZWyLvGBc6CiKmzEJ6rP/B0yEQ0wCEvU+uCkBmK6fZRhi8bf/n6A2lYSrbpez
gJITk3MyNY2LyNQnZ6CjhSPVVg8DgEUlMGQByQ0iZ97t8nVvg9Fm27aFeHCpXYA7
qKYXTRU8Xw6OlkQl+uz6j+SOeZMCF5g=
-----END CERTIFICATE-----
Generated at Fri Aug 18 03:43:17 2023 by rpki-client on console-ams.rpki-client.org