Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A27301ECD9EC11ED86A2900F306D8C1D.roa
File: A27301ECD9EC11ED86A2900F306D8C1D.roa (raw, json)
Hash identifier: hdCnV2ikR+dcZla1BcQwy1B8m8Aep8L91uL8tkdc6oo=
Subject key identifier: 64:29:2C:E8:35:AD:0D:9D:E6:32:7E:90:1E:8A:0A:73:25:63:8D:C9
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0D5D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A27301ECD9EC11ED86A2900F306D8C1D.roa
Signing time: Thu 13 Apr 2023 11:16:28 +0000
ROA not before: Thu 13 Apr 2023 11:16:25 +0000
ROA not after: Sat 12 Apr 2025 11:16:25 +0000
asID: 834
IP address blocks: 154.16.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3421 (0xd5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 13 11:16:25 2023 GMT
Not After : Apr 12 11:16:25 2025 GMT
Subject: CN=6437e48c-7908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c6:b0:a5:c8:6a:8d:7c:3f:cd:f5:e4:3c:f7:
c4:fe:44:4c:67:3f:d6:0e:00:00:dc:9f:e3:78:e7:
bb:44:af:97:bd:3c:76:ac:f8:74:63:7c:8d:dd:d4:
36:b5:c8:39:c6:bb:ee:6d:12:85:2e:e9:5b:90:12:
26:e2:b5:dd:e8:30:04:cc:90:22:dc:f4:33:1c:e4:
c3:b4:ca:db:53:77:d4:a8:e8:ed:5f:20:82:84:e4:
27:01:3a:eb:83:54:93:9e:44:f8:0b:77:be:0c:7e:
82:17:91:1e:be:f6:ce:6c:5d:d7:3b:13:55:fa:7d:
2b:ac:0d:48:d9:22:96:4f:c4:7c:b7:29:3b:be:d2:
9e:91:09:ef:16:30:7c:65:70:74:0f:20:b7:4c:1f:
a4:c7:8b:66:a6:f2:ce:51:60:55:72:6d:41:fa:0d:
b7:d1:bf:51:a0:e8:ad:ba:27:1e:58:ee:2f:4f:2e:
0a:3b:6a:c4:1e:92:12:f2:9f:0c:2e:cd:95:02:8a:
62:6c:98:5c:54:ab:a0:3c:59:ec:6a:ff:99:05:b5:
4d:89:3d:73:e9:8f:51:a9:ca:3e:77:93:c7:41:80:
b1:ed:1a:a7:9d:0e:49:bb:7a:0b:a4:55:cf:9f:cf:
dc:12:ff:4e:ba:90:51:e8:c0:ab:7d:98:8a:a0:f5:
90:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:29:2C:E8:35:AD:0D:9D:E6:32:7E:90:1E:8A:0A:73:25:63:8D:C9
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A27301ECD9EC11ED86A2900F306D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.9.0/24
Signature Algorithm: sha256WithRSAEncryption
77:d0:6a:ce:4c:1a:87:d1:da:1c:70:af:d2:30:04:89:f3:4f:
10:67:55:4d:1c:26:77:8c:8e:13:8f:9e:69:09:e6:49:d8:51:
72:e8:b4:26:b2:75:a6:bc:22:63:68:e6:a7:4b:f3:13:0d:4f:
6c:cf:1f:e9:f3:51:b8:62:76:c2:45:a1:36:3c:6f:d8:36:0d:
32:2a:c1:8e:0b:07:7b:de:34:4a:1f:f8:db:22:58:1c:75:98:
b0:2a:37:51:c3:9e:8b:ba:70:a2:36:93:50:e5:21:1a:6a:8b:
13:15:d2:83:ad:70:0e:f6:9c:22:f0:ee:4d:69:d0:d0:b1:54:
ce:6e:e0:d7:35:b3:9c:60:24:f7:67:30:f2:4e:7b:92:c7:42:
31:c3:f6:a4:2a:62:a3:ab:27:c3:7d:fd:21:76:d4:5a:1b:94:
0d:9e:6f:ad:f6:0a:be:53:d5:1e:55:db:bf:de:fd:bd:dd:9e:
68:12:b5:c4:bc:15:a3:c7:5e:30:ab:72:87:4a:d6:30:67:4f:
0a:86:10:b4:78:9d:ba:e0:7c:d9:17:5d:0f:9a:4e:55:08:25:
e7:93:73:9c:e4:01:9a:cd:23:d7:1a:84:e8:41:2c:26:42:42:
8f:a4:6d:6e:f5:0b:99:02:a5:f7:d5:1f:2a:96:bf:d7:5b:32:
88:bc:92:44
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDV0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA0MTMxMTE2MjVaFw0yNTA0MTIxMTE2MjVaMBgxFjAU
BgNVBAMMDTY0MzdlNDhjLTc5MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/xrClyGqNfD/N9eQ898T+RExnP9YOAADcn+N457tEr5e9PHas+HRjfI3d
1Da1yDnGu+5tEoUu6VuQEibitd3oMATMkCLc9DMc5MO0yttTd9So6O1fIIKE5CcB
OuuDVJOeRPgLd74MfoIXkR6+9s5sXdc7E1X6fSusDUjZIpZPxHy3KTu+0p6RCe8W
MHxlcHQPILdMH6THi2am8s5RYFVybUH6DbfRv1Gg6K26Jx5Y7i9PLgo7asQekhLy
nwwuzZUCimJsmFxUq6A8Wexq/5kFtU2JPXPpj1Gpyj53k8dBgLHtGqedDkm7eguk
Vc+fz9wS/066kFHowKt9mIqg9ZDHAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUZCks
6DWtDZ3mMn6QHooKcyVjjckwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0EyNzMwMUVDRDlFQzExRUQ4NkEyOTAwRjMwNkQ4QzFELnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEAkwDQYJKoZIhvcNAQEL
BQADggEBAHfQas5MGofR2hxwr9IwBInzTxBnVU0cJneMjhOPnmkJ5knYUXLotCay
daa8ImNo5qdL8xMNT2zPH+nzUbhidsJFoTY8b9g2DTIqwY4LB3veNEof+NsiWBx1
mLAqN1HDnou6cKI2k1DlIRpqixMV0oOtcA72nCLw7k1p0NCxVM5u4Nc1s5xgJPdn
MPJOe5LHQjHD9qQqYqOrJ8N9/SF21FoblA2eb632Cr5T1R5V27/e/b3dnmgStcS8
FaPHXjCrcodK1jBnTwqGELR4nbrgfNkXXQ+aTlUIJeeTc5zkAZrNI9cahOhBLCZC
Qo+kbW71C5kCpffVHyqWv9dbMoi8kkQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org