Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A33307908ED511EF8456BD4A762E951A.roa
File: A33307908ED511EF8456BD4A762E951A.roa (raw, json)
Hash identifier: /+FrD5vYthk1ONd9bEBuf4fMH/7Ilc1Dn96eDnzBvbQ=
Subject key identifier: B4:55:98:CA:F4:6F:83:B9:27:96:4E:10:85:9A:44:0F:8E:50:CF:88
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1868
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A33307908ED511EF8456BD4A762E951A.roa
Signing time: Sun 20 Oct 2024 11:22:49 +0000
ROA not before: Sun 20 Oct 2024 11:22:45 +0000
ROA not after: Tue 20 Oct 2026 11:22:45 +0000
asID: 834
IP address blocks: 154.16.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Oct 2024 07:08:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6248 (0x1868)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Oct 20 11:22:45 2024 GMT
Not After : Oct 20 11:22:45 2026 GMT
Subject: CN=6714e809-9417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:46:d5:e9:14:28:2f:eb:34:a0:51:20:d8:86:
d9:fe:ff:87:c2:34:a2:ce:49:0f:e6:5b:b2:0f:59:
b0:5d:23:07:51:fd:f2:10:01:3b:47:69:b0:3d:af:
c8:2b:82:12:2e:3d:fe:da:07:b9:71:96:7a:b0:0b:
35:cf:96:36:e4:e3:14:95:08:c2:8d:a8:4c:27:4d:
34:86:d9:a4:d1:f7:3b:99:bf:60:00:ee:47:a4:32:
e3:79:4c:f9:70:3f:98:54:c2:63:8c:20:3e:2a:4e:
9c:cc:79:5c:bc:34:a1:d8:a7:52:e6:1b:99:c7:04:
21:0f:14:7e:1b:06:79:8e:a7:a3:0e:a6:fd:fd:84:
5d:88:87:d6:60:a6:92:cb:4d:8a:dd:a7:b0:4b:78:
86:55:ad:12:ba:3f:54:70:2c:6a:1d:7f:bf:f2:1d:
f4:db:8b:6d:9c:9f:4d:c6:86:f3:d1:83:95:11:41:
b7:85:f5:4c:cc:6c:2d:9a:0b:34:ab:06:fa:28:a5:
0e:7a:80:55:2e:c6:d4:b4:c3:57:20:1d:83:e1:25:
6e:54:ee:ef:e1:be:dd:c1:ae:45:5b:d3:0a:32:df:
6d:74:3d:fd:0a:ff:e7:43:70:91:28:8b:6d:d5:26:
cf:3f:84:3c:61:7f:91:d9:ac:95:4d:48:3b:b0:1e:
d9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:55:98:CA:F4:6F:83:B9:27:96:4E:10:85:9A:44:0F:8E:50:CF:88
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A33307908ED511EF8456BD4A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.156.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:1a:13:4a:fc:c0:e1:b7:5a:7a:84:f8:17:d3:8a:c5:e0:a9:
17:93:9a:ec:ba:1b:6c:48:6c:f7:bb:6b:45:70:1a:84:d2:89:
a1:15:76:16:a4:2b:1a:a0:e3:97:d0:30:78:30:a5:07:c9:67:
3b:6c:97:d5:0a:44:74:d1:23:35:8c:4b:60:43:a3:2e:52:e3:
52:b4:37:89:d3:4c:06:88:cb:0b:40:3b:72:31:6d:d7:b7:d2:
62:75:80:3e:6a:4a:5e:38:61:0e:52:b0:a0:fd:d6:4b:96:03:
94:b8:83:32:05:ae:64:81:52:73:8d:2f:ed:65:49:35:03:51:
cb:2b:5a:23:e1:03:24:51:0f:6e:2e:a6:65:19:df:02:63:71:
89:27:e3:bf:ea:a4:6b:30:4e:b9:d2:9e:b7:e9:2b:84:e8:ad:
db:85:a6:5b:1a:88:4d:71:f4:e8:cf:dc:76:dc:93:20:8c:f5:
9b:34:40:8e:cc:56:b2:d8:d7:65:39:6a:20:45:86:1f:0d:fe:
fb:fa:7f:8b:b9:4f:79:91:e1:d5:b4:8f:d0:2c:32:a3:be:1b:
07:13:8d:45:0d:11:9a:78:16:9d:cf:a5:7f:c5:5c:82:a6:5a:
dc:3c:04:4f:aa:78:a0:69:cd:92:dc:b8:43:63:52:5b:85:53:
2d:7a:43:c5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGGgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNDEwMjAxMTIyNDVaFw0yNjEwMjAxMTIyNDVaMBgxFjAU
BgNVBAMTDTY3MTRlODA5LTk0MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCmRtXpFCgv6zSgUSDYhtn+/4fCNKLOSQ/mW7IPWbBdIwdR/fIQATtHabA9
r8grghIuPf7aB7lxlnqwCzXPljbk4xSVCMKNqEwnTTSG2aTR9zuZv2AA7kekMuN5
TPlwP5hUwmOMID4qTpzMeVy8NKHYp1LmG5nHBCEPFH4bBnmOp6MOpv39hF2Ih9Zg
ppLLTYrdp7BLeIZVrRK6P1RwLGodf7/yHfTbi22cn03GhvPRg5URQbeF9UzMbC2a
CzSrBvoopQ56gFUuxtS0w1cgHYPhJW5U7u/hvt3BrkVb0woy3210Pf0K/+dDcJEo
i23VJs8/hDxhf5HZrJVNSDuwHtmXAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUtFWY
yvRvg7knlk4QhZpED45Qz4gwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0EzMzMwNzkwOEVENTExRUY4NDU2QkQ0QTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEJwwDQYJKoZIhvcNAQEL
BQADggEBAHoaE0r8wOG3WnqE+BfTisXgqReTmuy6G2xIbPe7a0VwGoTSiaEVdhak
Kxqg45fQMHgwpQfJZztsl9UKRHTRIzWMS2BDoy5S41K0N4nTTAaIywtAO3Ixbde3
0mJ1gD5qSl44YQ5SsKD91kuWA5S4gzIFrmSBUnONL+1lSTUDUcsrWiPhAyRRD24u
pmUZ3wJjcYkn47/qpGswTrnSnrfpK4TorduFplsaiE1x9OjP3HbckyCM9Zs0QI7M
VrLY12U5aiBFhh8N/vv6f4u5T3mR4dW0j9AsMqO+GwcTjUUNEZp4Fp3PpX/FXIKm
Wtw8BE+qeKBpzZLcuENjUluFUy16Q8U=
-----END CERTIFICATE-----
Generated at Wed Feb 5 15:01:39 2025 by rpki-client