Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B8FCF9FAD7B011EE89BB1289775412E6.roa
File: B8FCF9FAD7B011EE89BB1289775412E6.roa (raw, json)
Hash identifier: 2A8VPbo9aOypEeLVRl0YSYGZQYG9QVbYcjYPa13Fkkg=
Subject key identifier: 63:74:59:22:01:1E:89:61:A3:62:C0:91:62:3F:4B:B5:3D:11:26:77
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1532
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B8FCF9FAD7B011EE89BB1289775412E6.roa
Signing time: Fri 01 Mar 2024 09:47:31 +0000
ROA not before: Fri 01 Mar 2024 09:47:28 +0000
ROA not after: Mon 02 Mar 2026 09:47:28 +0000
asID: 834
IP address blocks: 154.16.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 12:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5426 (0x1532)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 1 09:47:28 2024 GMT
Not After : Mar 2 09:47:28 2026 GMT
Subject: CN=65e1a433-98da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:64:d2:5a:0e:55:d9:c4:a9:e3:18:f1:66:c5:
83:63:e2:03:d3:df:93:a8:ad:cb:84:68:77:90:f4:
80:3e:bf:e5:13:7f:78:48:e4:14:30:fb:a0:f3:b3:
29:66:25:f2:a6:ac:23:55:42:12:1a:df:42:bf:06:
24:e4:9a:27:8a:ac:08:c4:f3:fc:ba:65:0d:50:c9:
39:77:27:cd:b9:5f:74:39:c0:bc:ed:40:da:33:bf:
3b:64:77:c9:66:28:3f:93:9c:f1:e7:e1:3c:a8:32:
ec:43:a4:2a:ee:1c:ff:b8:c9:c6:44:bb:81:a2:d5:
e1:14:6e:8a:ed:2e:96:d6:71:a5:71:7d:27:48:de:
29:e1:81:8e:fd:3e:93:c6:a9:62:aa:9c:9b:6a:ff:
e1:db:4f:1e:38:f1:d3:6d:9a:d4:b4:56:22:88:bc:
7c:5e:ee:69:ce:47:6e:38:39:df:ed:4c:5f:4a:b5:
dd:50:30:3c:ba:28:cd:e8:aa:8f:79:9e:fd:4f:a7:
be:14:ae:04:e0:0a:f6:38:92:da:8d:c6:9b:69:a3:
4e:7d:52:9f:42:a0:5e:bf:25:f3:26:09:2b:b9:86:
a2:a2:21:96:40:75:50:03:98:c5:5b:78:e2:b5:31:
1a:41:f2:ae:ce:96:63:e2:75:ce:72:7a:a0:74:c8:
a6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:74:59:22:01:1E:89:61:A3:62:C0:91:62:3F:4B:B5:3D:11:26:77
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B8FCF9FAD7B011EE89BB1289775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.71.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:33:de:8b:81:6f:e7:2a:59:e1:c0:ed:09:f7:6d:e3:11:30:
43:1e:ec:9a:f0:6b:37:dc:a6:4a:c3:d2:d9:46:ea:cf:93:ab:
94:53:e3:37:c0:81:b5:16:26:02:96:04:28:8b:ea:53:7d:17:
02:a9:cb:d6:14:68:0c:2b:bc:e6:8d:b4:60:70:df:0f:90:f2:
2c:7f:6c:8a:0a:a1:64:35:52:03:8c:81:82:12:a7:a9:14:d3:
20:77:a9:9a:ed:df:f8:19:db:d9:65:7c:51:3b:e9:0e:6d:cd:
fd:15:cb:ca:6f:50:a6:8e:28:c8:3a:6b:83:40:ae:0d:a0:f6:
78:27:e4:06:c5:15:15:c7:e2:80:fc:f7:7c:a8:e9:41:02:a9:
ad:ee:2f:cb:33:66:8c:ed:ae:bf:6d:11:f8:9c:1c:7b:9d:db:
83:b6:30:e6:e8:e3:15:21:b8:13:f1:ac:99:41:48:e3:fe:53:
dd:9c:7c:a9:cf:a7:2e:7d:16:93:df:c0:78:b1:1e:c1:62:02:
8f:4d:e4:a5:45:04:17:00:7d:4e:d7:f3:8f:ab:49:a6:65:82:
14:c0:6f:ac:81:b1:eb:36:bf:f0:83:01:46:28:6c:20:ea:c2:
3c:81:a5:ac:63:e5:98:41:a4:00:86:cf:39:06:0d:52:55:0f:
83:5e:2a:74
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFTIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNDAzMDEwOTQ3MjhaFw0yNjAzMDIwOTQ3MjhaMBgxFjAU
BgNVBAMTDTY1ZTFhNDMzLTk4ZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHZNJaDlXZxKnjGPFmxYNj4gPT35OorcuEaHeQ9IA+v+UTf3hI5BQw+6Dz
sylmJfKmrCNVQhIa30K/BiTkmieKrAjE8/y6ZQ1QyTl3J825X3Q5wLztQNozvztk
d8lmKD+TnPHn4TyoMuxDpCruHP+4ycZEu4Gi1eEUbortLpbWcaVxfSdI3inhgY79
PpPGqWKqnJtq/+HbTx448dNtmtS0ViKIvHxe7mnOR244Od/tTF9Ktd1QMDy6KM3o
qo95nv1Pp74UrgTgCvY4ktqNxptpo059Up9CoF6/JfMmCSu5hqKiIZZAdVADmMVb
eOK1MRpB8q7OlmPidc5yeqB0yKbdAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUY3RZ
IgEeiWGjYsCRYj9LtT0RJncwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0I4RkNGOUZBRDdCMDExRUU4OUJCMTI4OTc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEEcwDQYJKoZIhvcNAQEL
BQADggEBAF8z3ouBb+cqWeHA7Qn3beMRMEMe7JrwazfcpkrD0tlG6s+Tq5RT4zfA
gbUWJgKWBCiL6lN9FwKpy9YUaAwrvOaNtGBw3w+Q8ix/bIoKoWQ1UgOMgYISp6kU
0yB3qZrt3/gZ29llfFE76Q5tzf0Vy8pvUKaOKMg6a4NArg2g9ngn5AbFFRXH4oD8
93yo6UECqa3uL8szZoztrr9tEficHHud24O2MObo4xUhuBPxrJlBSOP+U92cfKnP
py59FpPfwHixHsFiAo9N5KVFBBcAfU7X84+rSaZlghTAb6yBses2v/CDAUYobCDq
wjyBpaxj5ZhBpACGzzkGDVJVD4NeKnQ=
-----END CERTIFICATE-----
Generated at Thu Apr 11 16:20:19 2024 by rpki-client on console-ams.rpki-client.org