Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B970ACEA91F111EBAA2E8367F8AEA228.roa
File: B970ACEA91F111EBAA2E8367F8AEA228.roa (raw, json)
Hash identifier: kTHOtDDKAibMHic0wZpYnyYnws82ogJqteW6dfpJ/ko=
Subject key identifier: 42:8A:2C:91:A0:4F:79:E2:C6:8E:54:69:50:2F:76:0E:4D:32:A8:4A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0532
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B970ACEA91F111EBAA2E8367F8AEA228.roa
Signing time: Wed 31 Mar 2021 07:21:35 +0000
ROA not before: Wed 31 Mar 2021 07:21:29 +0000
ROA not after: Mon 31 Mar 2025 07:21:29 +0000
asID: 133752
IP address blocks: 154.16.236.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1330 (0x532)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 31 07:21:29 2021 GMT
Not After : Mar 31 07:21:29 2025 GMT
Subject: CN=606422ff-c653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3b:24:c6:ef:d6:bf:cb:9e:c7:e3:97:d7:62:
4b:45:50:04:25:f5:5e:c5:d5:21:27:0e:5c:63:5b:
cd:a0:8c:46:6b:2a:56:a7:f9:bc:76:f1:ea:ae:fd:
a0:f4:62:67:01:2f:a4:90:20:29:26:be:55:bf:73:
9e:7f:f9:04:91:b5:66:d3:ab:19:92:20:59:3f:91:
4a:55:74:9a:7d:3f:33:b9:cf:b6:93:cc:a3:13:79:
c8:d0:a5:5b:89:7e:ba:08:e6:bb:82:ea:23:55:82:
05:17:30:63:a2:47:1f:63:da:1a:84:37:76:5f:63:
3e:aa:13:a1:ec:11:ae:a4:a3:50:6e:3f:5f:14:b2:
34:89:c5:47:d9:80:a5:a9:2d:49:e2:fd:59:a8:cc:
07:5a:e6:ad:11:aa:ef:2a:c8:8c:67:2b:18:29:b6:
11:f4:97:31:6e:af:d6:3b:12:58:8b:aa:81:7f:88:
87:8f:51:2e:c3:e0:89:f3:0b:14:5c:7d:92:84:fb:
a9:a7:7a:d0:ed:2f:4a:81:c3:cf:39:01:00:19:76:
81:22:2a:40:bf:96:fe:27:94:12:0e:20:86:ab:b3:
a9:5e:32:fa:02:f1:84:5e:24:9d:ce:92:9f:91:92:
93:b6:a0:d3:47:28:e6:10:6e:55:18:6c:43:92:25:
c4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8A:2C:91:A0:4F:79:E2:C6:8E:54:69:50:2F:76:0E:4D:32:A8:4A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B970ACEA91F111EBAA2E8367F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.236.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:b9:31:cd:6d:37:d9:df:0e:be:17:b3:f1:e2:e1:ae:ee:1b:
d8:e8:3f:9d:27:3b:87:42:8a:70:2a:f8:99:9b:5d:7b:9a:60:
cd:d7:94:b6:1b:45:be:cf:3b:19:7e:ca:8b:92:94:f2:dd:a2:
b6:d4:a7:ad:52:65:9f:38:ef:7c:9d:54:0b:e6:1d:7b:2f:e7:
14:6b:45:80:1f:b4:8b:69:fe:10:32:ba:b9:51:1d:e0:c3:06:
46:3d:b8:89:b8:18:e1:6c:34:72:a4:4f:b0:f3:99:f5:38:13:
7a:98:c3:06:57:a7:d3:5f:86:f8:f9:0e:64:4a:47:07:d0:ed:
8c:ab:90:1c:80:25:3f:83:e8:4d:ef:0e:cb:dd:df:48:ac:85:
b5:a2:45:e3:2e:2d:cd:ca:99:0b:2c:54:cc:0e:77:33:cf:1b:
c7:9b:df:e7:62:01:0b:8d:72:9a:91:59:9b:f9:00:ec:03:c9:
81:91:c0:7a:b2:ca:d1:37:d0:20:55:93:40:7c:fc:84:2c:ac:
7b:7f:3a:32:f6:b3:7e:ad:d5:de:69:f5:91:83:e1:f8:98:eb:
ab:ab:af:aa:61:8d:a7:22:e4:04:8d:0b:90:ee:35:b7:9d:48:
aa:63:81:c7:75:9e:a0:a4:cb:df:ae:60:49:0d:18:95:84:7a:
4d:bf:ea:ed
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBTIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMTAzMzEwNzIxMjlaFw0yNTAzMzEwNzIxMjlaMBgxFjAU
BgNVBAMTDTYwNjQyMmZmLWM2NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCcOyTG79a/y57H45fXYktFUAQl9V7F1SEnDlxjW82gjEZrKlan+bx28equ
/aD0YmcBL6SQICkmvlW/c55/+QSRtWbTqxmSIFk/kUpVdJp9PzO5z7aTzKMTecjQ
pVuJfroI5ruC6iNVggUXMGOiRx9j2hqEN3ZfYz6qE6HsEa6ko1BuP18UsjSJxUfZ
gKWpLUni/VmozAda5q0Rqu8qyIxnKxgpthH0lzFur9Y7EliLqoF/iIePUS7D4Inz
CxRcfZKE+6mnetDtL0qBw885AQAZdoEiKkC/lv4nlBIOIIars6leMvoC8YReJJ3O
kp+RkpO2oNNHKOYQblUYbEOSJcR9AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUQoos
kaBPeeLGjlRpUC92Dk0yqEowHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0I5NzBBQ0VBOTFGMTExRUJBQTJFODM2N0Y4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEOwwDQYJKoZIhvcNAQEL
BQADggEBAJ+5Mc1tN9nfDr4Xs/Hi4a7uG9joP50nO4dCinAq+JmbXXuaYM3XlLYb
Rb7POxl+youSlPLdorbUp61SZZ8473ydVAvmHXsv5xRrRYAftItp/hAyurlRHeDD
BkY9uIm4GOFsNHKkT7DzmfU4E3qYwwZXp9Nfhvj5DmRKRwfQ7YyrkByAJT+D6E3v
Dsvd30ishbWiReMuLc3KmQssVMwOdzPPG8eb3+diAQuNcpqRWZv5AOwDyYGRwHqy
ytE30CBVk0B8/IQsrHt/OjL2s36t1d5p9ZGD4fiY66urr6phjaci5ASNC5DuNbed
SKpjgcd1nqCky9+uYEkNGJWEek2/6u0=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org