Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A3EAABF2075E11EEB68BB57A4AD9E6FC.roa
File: A3EAABF2075E11EEB68BB57A4AD9E6FC.roa (raw, json)
Hash identifier: RVyTlQCTIbD+Wa3/rauOXTrjySYZPIXAMlESO03sXLk=
Subject key identifier: 2F:E1:4B:42:49:36:0A:AA:33:6B:31:5E:B1:8C:54:62:A1:5D:C6:D0
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F19
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A3EAABF2075E11EEB68BB57A4AD9E6FC.roa
Signing time: Sat 10 Jun 2023 07:15:55 +0000
ROA not before: Sat 10 Jun 2023 07:15:52 +0000
ROA not after: Tue 10 Jun 2025 07:15:52 +0000
asID: 7018
IP address blocks: 154.16.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3865 (0xf19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 10 07:15:52 2023 GMT
Not After : Jun 10 07:15:52 2025 GMT
Subject: CN=6484232b-550d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:8d:83:90:b9:41:50:69:32:c7:1b:bb:d7:
3e:dd:28:fe:1b:9c:fd:30:f0:44:15:8b:72:b9:fa:
6f:5e:73:65:f8:19:ff:88:f4:4d:93:cd:a2:89:74:
fd:be:f2:81:15:9c:83:8e:01:de:ab:34:03:b6:2f:
b3:48:24:1a:df:00:bf:6d:11:92:a2:2b:bd:52:55:
ab:cd:0d:ee:bd:5e:e9:e5:a0:80:bc:b3:73:fd:ec:
99:47:42:27:47:a0:c1:d5:d8:7d:70:87:6a:8f:f3:
71:83:11:5c:87:88:ee:02:ca:a6:2c:55:cd:61:1d:
26:a8:46:6b:35:44:97:74:61:fd:3e:45:3b:ce:2e:
a6:da:39:38:f9:8a:cc:15:bb:5a:45:a3:d3:d5:d7:
cb:fd:f9:f7:a7:c7:bf:29:7a:87:b0:c1:37:d1:98:
fe:4f:b0:5b:e7:d9:32:7f:5c:3d:18:f3:f7:6f:d3:
0c:fd:34:e7:03:54:3b:0c:eb:4f:ab:20:d6:58:d5:
9e:f1:cb:ce:47:af:cd:8f:f4:ce:d7:9d:51:a1:36:
90:50:a4:83:54:09:07:e8:53:cb:84:be:e7:b3:36:
22:bc:3b:64:2d:c7:d2:1e:9b:28:b1:14:15:76:bf:
e5:ad:87:c9:49:1b:4e:18:fa:c4:34:f6:00:d1:cd:
ca:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E1:4B:42:49:36:0A:AA:33:6B:31:5E:B1:8C:54:62:A1:5D:C6:D0
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A3EAABF2075E11EEB68BB57A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.107.0/24
Signature Algorithm: sha256WithRSAEncryption
63:14:77:62:38:fc:a8:59:d5:71:2b:3d:40:67:d7:d6:fe:31:
93:2a:56:14:8f:51:66:cf:36:9b:b5:9c:41:53:85:8d:5b:4d:
7c:fb:38:0f:57:10:fb:40:50:2b:71:5d:dd:6e:db:e6:9f:d4:
9e:e7:9c:ac:04:08:38:e3:de:7d:71:02:4a:b4:0b:00:03:a8:
1a:f6:14:b8:3a:08:ce:45:9f:5b:d0:38:a0:12:67:98:d4:3d:
52:cc:27:e1:fb:29:09:9d:ca:21:6e:7d:3f:70:6c:df:27:85:
ce:4d:b7:d8:57:78:e7:9e:ee:99:bf:78:26:4e:58:c0:a2:f5:
29:74:d7:65:52:cb:e8:67:73:c6:6c:79:64:75:78:ef:8b:96:
f8:4f:a4:8b:69:a5:76:91:0e:ad:e8:05:a8:34:ae:87:03:2f:
cf:b5:3b:dd:0c:79:ac:5d:b3:bb:70:e7:63:ee:5e:84:8d:12:
f0:a9:b6:dd:f9:e1:20:12:0d:80:bf:87:92:39:4e:d2:07:5a:
ee:54:59:60:ea:60:0c:19:31:af:17:53:1e:3f:1a:97:e5:84:
5c:03:09:e3:79:ee:7d:11:76:2f:2a:28:a6:82:5b:23:b8:21:
1a:77:2c:15:06:f3:a7:fb:77:58:2f:4f:4a:35:2e:0a:b4:9d:
c6:c4:e8:04
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDxkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA2MTAwNzE1NTJaFw0yNTA2MTAwNzE1NTJaMBgxFjAU
BgNVBAMTDTY0ODQyMzJiLTU1MGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3s42DkLlBUGkyxxu71z7dKP4bnP0w8EQVi3K5+m9ec2X4Gf+I9E2TzaKJ
dP2+8oEVnIOOAd6rNAO2L7NIJBrfAL9tEZKiK71SVavNDe69XunloIC8s3P97JlH
QidHoMHV2H1wh2qP83GDEVyHiO4CyqYsVc1hHSaoRms1RJd0Yf0+RTvOLqbaOTj5
iswVu1pFo9PV18v9+fenx78peoewwTfRmP5PsFvn2TJ/XD0Y8/dv0wz9NOcDVDsM
60+rINZY1Z7xy85Hr82P9M7XnVGhNpBQpINUCQfoU8uEvuezNiK8O2Qtx9Iemyix
FBV2v+Wth8lJG04Y+sQ09gDRzcpDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUL+FL
Qkk2CqozazFesYxUYqFdxtAwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0EzRUFBQkYyMDc1RTExRUVCNjhCQjU3QTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEGswDQYJKoZIhvcNAQEL
BQADggEBAGMUd2I4/KhZ1XErPUBn19b+MZMqVhSPUWbPNpu1nEFThY1bTXz7OA9X
EPtAUCtxXd1u2+af1J7nnKwECDjj3n1xAkq0CwADqBr2FLg6CM5Fn1vQOKASZ5jU
PVLMJ+H7KQmdyiFufT9wbN8nhc5Nt9hXeOee7pm/eCZOWMCi9Sl012VSy+hnc8Zs
eWR1eO+LlvhPpItppXaRDq3oBag0rocDL8+1O90Meaxds7tw52PuXoSNEvCptt35
4SASDYC/h5I5TtIHWu5UWWDqYAwZMa8XUx4/GpflhFwDCeN57n0Rdi8qKKaCWyO4
IRp3LBUG86f7d1gvT0o1Lgq0ncbE6AQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org