Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B75A2C9A0FD711EEB0A760124AD9E6FC.roa
File: B75A2C9A0FD711EEB0A760124AD9E6FC.roa (raw, json)
Hash identifier: x9EDHZqGkXkkWTtOBVj1oncsAGedRwOc5dFK8AWF95Q=
Subject key identifier: D4:E9:68:8E:3C:C2:E9:AA:84:26:D8:F5:6F:57:99:91:75:37:E5:42
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0FDE
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B75A2C9A0FD711EEB0A760124AD9E6FC.roa
Signing time: Wed 21 Jun 2023 02:02:46 +0000
ROA not before: Wed 21 Jun 2023 02:02:43 +0000
ROA not after: Tue 25 Jun 2024 02:02:43 +0000
asID: 834
IP address blocks: 154.16.78.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4062 (0xfde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 21 02:02:43 2023 GMT
Not After : Jun 25 02:02:43 2024 GMT
Subject: CN=64925a46-1960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3f:e3:71:49:03:3a:1d:f9:aa:92:90:4e:59:
af:4e:57:d4:5e:8c:53:97:6c:9f:9b:87:07:6b:80:
6a:ef:d3:f1:bb:19:ea:f3:c3:83:1a:82:74:4c:37:
01:cc:50:f0:17:73:1e:8c:8f:ac:d1:83:16:14:4a:
20:cd:ce:20:c5:6b:0f:60:c2:a3:52:35:d3:6c:17:
de:49:7e:48:d3:a3:57:00:9f:30:d1:b0:5b:21:51:
63:f3:24:fc:1e:ab:56:f6:99:b4:62:54:1f:34:53:
13:eb:6b:1b:e9:7d:ae:53:8b:b6:d3:2e:ba:02:2a:
db:7e:95:d4:bf:e6:51:b9:63:75:d6:50:e5:e3:29:
f7:2f:e4:59:36:15:96:87:75:2e:fc:d6:02:14:c4:
8b:e7:93:25:a7:cc:49:82:cd:58:9f:d7:55:1e:a7:
68:b2:62:72:17:04:5f:f0:fd:3e:d3:c9:de:25:12:
e8:32:b9:ef:68:d0:cd:f1:3c:a3:56:8c:3b:b5:7e:
b2:73:b5:5f:a8:d8:e5:12:a0:0f:4a:5d:ca:9d:65:
80:5f:b0:ce:c8:fd:7e:26:79:df:28:6e:92:34:57:
4e:9c:e5:2b:83:d1:40:1d:af:06:53:74:fc:08:06:
57:bb:06:4c:22:b5:74:80:68:1f:72:81:27:5f:fb:
0a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E9:68:8E:3C:C2:E9:AA:84:26:D8:F5:6F:57:99:91:75:37:E5:42
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B75A2C9A0FD711EEB0A760124AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.78.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:2f:55:91:15:65:97:5c:a8:9d:e9:d3:99:49:52:d1:aa:2b:
80:cf:89:6f:ef:fc:5c:1b:12:33:8e:26:53:9d:77:75:e5:eb:
c9:70:ec:ed:23:e3:40:03:b2:22:08:86:e9:c8:57:f0:27:b3:
00:0f:cd:e8:dd:d0:e6:ae:f4:09:3c:b3:04:38:0c:fc:c5:51:
d2:a9:c8:51:ae:8c:a0:ea:00:c3:22:37:b3:b7:89:75:83:82:
4a:8c:a7:cf:f3:a7:05:95:dd:e9:09:2c:66:7c:a9:6c:70:c0:
76:0a:07:c6:f2:04:72:6d:26:22:1b:a3:ff:e5:f6:bc:a0:52:
08:a0:4f:e7:b8:96:44:01:b9:15:e5:7e:98:80:44:07:a8:6e:
06:83:0b:d3:e7:0c:00:0c:fe:0d:83:05:bf:f1:d7:d2:aa:30:
25:f7:32:cc:1b:3d:87:81:e3:03:6e:e1:8a:94:c4:23:f5:2a:
d9:f7:f0:7f:66:f6:0e:77:37:48:45:3a:9c:3d:cd:6a:bf:59:
62:6a:89:ea:9e:82:1d:7f:bb:aa:01:55:fa:6a:a4:b5:3e:ab:
b2:01:2a:ab:dd:8b:88:9b:ad:ca:96:0a:45:2f:50:25:bc:45:
0d:5d:fa:e1:76:b1:40:90:e9:ff:f4:78:4e:80:27:65:57:d3:
2a:eb:41:31
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICD94wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA2MjEwMjAyNDNaFw0yNDA2MjUwMjAyNDNaMBgxFjAU
BgNVBAMTDTY0OTI1YTQ2LTE5NjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDSP+NxSQM6HfmqkpBOWa9OV9RejFOXbJ+bhwdrgGrv0/G7Gerzw4MagnRM
NwHMUPAXcx6Mj6zRgxYUSiDNziDFaw9gwqNSNdNsF95JfkjTo1cAnzDRsFshUWPz
JPweq1b2mbRiVB80UxPraxvpfa5Ti7bTLroCKtt+ldS/5lG5Y3XWUOXjKfcv5Fk2
FZaHdS781gIUxIvnkyWnzEmCzVif11Uep2iyYnIXBF/w/T7Tyd4lEugyue9o0M3x
PKNWjDu1frJztV+o2OUSoA9KXcqdZYBfsM7I/X4med8obpI0V06c5SuD0UAdrwZT
dPwIBle7BkwitXSAaB9ygSdf+wo7AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU1Olo
jjzC6aqEJtj1b1eZkXU35UIwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0I3NUEyQzlBMEZENzExRUVCMEE3NjAxMjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEE4wDQYJKoZIhvcNAQEL
BQADggEBAIsvVZEVZZdcqJ3p05lJUtGqK4DPiW/v/FwbEjOOJlOdd3Xl68lw7O0j
40ADsiIIhunIV/AnswAPzejd0Oau9Ak8swQ4DPzFUdKpyFGujKDqAMMiN7O3iXWD
gkqMp8/zpwWV3ekJLGZ8qWxwwHYKB8byBHJtJiIbo//l9rygUgigT+e4lkQBuRXl
fpiARAeobgaDC9PnDAAM/g2DBb/x19KqMCX3MswbPYeB4wNu4YqUxCP1Ktn38H9m
9g53N0hFOpw9zWq/WWJqieqegh1/u6oBVfpqpLU+q7IBKqvdi4ibrcqWCkUvUCW8
RQ1d+uF2sUCQ6f/0eE6AJ2VX0yrrQTE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org