Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B72F9496B74C11EDB637D6EAF1222468.roa
File: B72F9496B74C11EDB637D6EAF1222468.roa (raw, json)
Hash identifier: c+BNamNzPODwOr1mXvcOhYvbYOCsJFZsGl8z4PuH81k=
Subject key identifier: B7:FE:D4:B0:3C:FA:5C:12:D7:E7:D5:2C:10:B2:6B:8C:69:4F:E9:04
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0C81
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B72F9496B74C11EDB637D6EAF1222468.roa
Signing time: Tue 28 Feb 2023 09:46:04 +0000
ROA not before: Tue 28 Feb 2023 09:46:00 +0000
ROA not after: Fri 28 Feb 2025 09:46:00 +0000
asID: 61317
IP address blocks: 154.16.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 07:26:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3201 (0xc81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 28 09:46:00 2023 GMT
Not After : Feb 28 09:46:00 2025 GMT
Subject: CN=63fdcd5c-2bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:de:ec:28:15:3e:07:bb:17:d3:de:92:b0:66:
ce:12:6c:46:55:6a:72:82:f8:fa:e3:dd:15:b9:94:
2c:97:76:50:9a:3b:4a:bf:e2:a8:43:b4:9c:e8:51:
a5:a6:05:d8:93:2a:44:fc:5e:78:d6:2b:0a:1b:76:
5f:8f:91:f5:26:4c:72:e6:db:07:e6:2c:13:b9:30:
54:da:3a:1e:e6:61:a5:49:b0:b4:60:a4:dd:26:ee:
0c:93:f5:3f:38:5d:d3:e0:4a:06:6b:f2:13:9e:fe:
a9:fd:01:01:e5:64:63:df:03:e8:2e:82:47:83:e7:
99:03:50:b7:b7:77:e2:c1:33:4f:f8:09:a9:c1:1e:
d4:ab:78:ba:2e:22:bf:2f:17:e7:4d:d4:00:73:b9:
77:8e:e4:e1:96:84:6b:3a:56:22:ca:d6:ee:ee:60:
bc:0b:d1:0e:bd:f1:8b:8b:94:dc:cc:b2:f4:cc:73:
a4:35:28:41:55:5c:61:a5:0e:4d:8c:f5:d6:89:d3:
85:e3:bd:7a:f2:95:73:9c:26:0c:16:8b:9f:f2:53:
d9:3a:42:8f:09:f7:f9:29:41:be:d0:16:0d:b6:a6:
30:75:7f:23:84:3f:a3:e7:85:c3:fa:3a:00:81:01:
f1:99:59:40:63:a5:f8:98:56:d9:cf:d3:01:ad:ce:
b6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FE:D4:B0:3C:FA:5C:12:D7:E7:D5:2C:10:B2:6B:8C:69:4F:E9:04
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B72F9496B74C11EDB637D6EAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.179.0/24
Signature Algorithm: sha256WithRSAEncryption
83:b5:ae:6c:e9:80:d7:4a:fc:e6:49:3b:ef:d1:0d:9b:58:4c:
71:f7:9d:c2:cb:44:ec:96:d8:ed:43:34:2b:68:e7:ca:75:2a:
ff:fa:c1:0a:b0:49:95:6d:08:de:cf:52:2c:51:4f:73:f0:77:
9e:ae:04:e9:26:d5:e3:a4:9e:b5:53:49:9f:b5:21:f1:16:0e:
2d:43:c3:76:bb:8e:76:c4:35:3d:a3:71:6a:3e:96:a9:23:91:
33:b6:c2:35:23:be:44:80:b9:cf:64:ad:97:ea:46:92:0c:22:
62:c9:53:6c:a7:72:9b:88:23:30:2a:27:11:ed:e5:13:9e:03:
3e:a8:27:b3:08:45:dc:bd:fe:2c:3e:a2:48:5d:33:e9:29:68:
f3:f8:4a:fb:99:94:c7:e3:34:50:38:d0:e4:6e:67:97:5b:e3:
cf:51:c4:98:f9:c2:40:63:b9:a9:0d:81:b5:42:ae:a8:8a:00:
df:6e:9f:fc:92:87:eb:93:ca:1d:4b:57:50:ca:31:77:9c:25:
c3:2f:b8:bd:f0:85:5e:80:9d:14:8c:bc:d8:d5:f2:64:19:95:
56:71:ef:1b:83:f5:6c:37:06:25:bd:c7:61:3e:f2:01:ae:d2:
7a:8f:6b:91:dc:d2:9f:cf:ac:95:e0:4b:56:df:95:0d:90:14:
eb:cb:f2:29
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDIEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzAyMjgwOTQ2MDBaFw0yNTAyMjgwOTQ2MDBaMBgxFjAU
BgNVBAMMDTYzZmRjZDVjLTJiZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCs3uwoFT4HuxfT3pKwZs4SbEZVanKC+Prj3RW5lCyXdlCaO0q/4qhDtJzo
UaWmBdiTKkT8XnjWKwobdl+PkfUmTHLm2wfmLBO5MFTaOh7mYaVJsLRgpN0m7gyT
9T84XdPgSgZr8hOe/qn9AQHlZGPfA+gugkeD55kDULe3d+LBM0/4CanBHtSreLou
Ir8vF+dN1ABzuXeO5OGWhGs6ViLK1u7uYLwL0Q698YuLlNzMsvTMc6Q1KEFVXGGl
Dk2M9daJ04XjvXrylXOcJgwWi5/yU9k6Qo8J9/kpQb7QFg22pjB1fyOEP6PnhcP6
OgCBAfGZWUBjpfiYVtnP0wGtzraPAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUt/7U
sDz6XBLX59UsELJrjGlP6QQwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0I3MkY5NDk2Qjc0QzExRURCNjM3RDZFQUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaELMwDQYJKoZIhvcNAQEL
BQADggEBAIO1rmzpgNdK/OZJO+/RDZtYTHH3ncLLROyW2O1DNCto58p1Kv/6wQqw
SZVtCN7PUixRT3Pwd56uBOkm1eOknrVTSZ+1IfEWDi1Dw3a7jnbENT2jcWo+lqkj
kTO2wjUjvkSAuc9krZfqRpIMImLJU2yncpuIIzAqJxHt5ROeAz6oJ7MIRdy9/iw+
okhdM+kpaPP4SvuZlMfjNFA40ORuZ5db489RxJj5wkBjuakNgbVCrqiKAN9un/yS
h+uTyh1LV1DKMXecJcMvuL3whV6AnRSMvNjV8mQZlVZx7xuD9Ww3BiW9x2E+8gGu
0nqPa5Hc0p/PrJXgS1bflQ2QFOvL8ik=
-----END CERTIFICATE-----
Generated at Fri Mar 1 08:14:49 2024 by rpki-client on console-ams.rpki-client.org