Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C254014EC85511EDBEA09E91F1222468.roa
File: C254014EC85511EDBEA09E91F1222468.roa (raw, json)
Hash identifier: hqhWHjEPP5xIanpR/OeQ+rP8SzRPOIaG6lfokq2k7KQ=
Subject key identifier: F2:95:06:C7:0F:16:79:F6:D6:14:A6:98:6B:F9:27:B2:72:9B:D1:3F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0D08
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C254014EC85511EDBEA09E91F1222468.roa
Signing time: Wed 22 Mar 2023 02:03:38 +0000
ROA not before: Wed 22 Mar 2023 02:03:31 +0000
ROA not after: Sat 22 Mar 2025 02:03:31 +0000
asID: 3507
IP address blocks: 154.16.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3336 (0xd08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 22 02:03:31 2023 GMT
Not After : Mar 22 02:03:31 2025 GMT
Subject: CN=641a61fa-59ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:8f:cc:bd:40:b5:1a:42:6d:10:e8:d5:98:
13:c9:5c:fb:19:87:cf:25:0a:13:f0:90:83:ee:f8:
54:b8:07:b2:b2:2f:23:0c:26:e9:20:90:08:3b:b5:
1c:0d:14:7d:98:91:27:70:2a:ce:d0:ca:a6:75:ac:
3b:f0:cf:e7:73:97:bf:5f:3d:8f:4c:22:7c:40:d4:
c1:20:04:dc:41:f0:f5:0f:3a:43:af:ff:2a:20:25:
2d:7e:12:ba:5c:cf:47:dd:1b:a1:ba:b3:50:c1:4c:
e7:cf:ed:db:b8:54:0d:71:d4:81:0a:e0:aa:2d:8d:
8d:b3:e0:70:20:aa:15:92:b1:d0:36:b8:52:f4:a8:
f9:2b:c3:85:25:b7:42:89:17:d1:e7:42:0d:4c:da:
4a:21:b1:7c:bf:0e:28:38:10:dd:ba:d3:4b:ee:28:
2a:31:a0:b7:31:66:6f:f3:a4:2f:ef:9c:ed:50:ba:
8d:38:38:59:7e:38:32:a8:1b:5a:de:e4:80:c4:60:
34:e4:95:45:e2:a2:58:fe:a1:41:e3:9e:c5:41:09:
2a:98:2d:87:40:d7:e1:b4:dd:7c:6d:0c:90:fb:d2:
2c:d1:6a:d6:b5:7c:23:86:fe:d5:97:51:0e:85:03:
8f:80:5f:d5:a2:3f:b9:2f:34:c4:9c:44:db:98:ea:
b1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:95:06:C7:0F:16:79:F6:D6:14:A6:98:6B:F9:27:B2:72:9B:D1:3F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C254014EC85511EDBEA09E91F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.64.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:ee:fd:34:73:bd:02:4d:b0:b2:b4:90:2e:fa:08:6c:87:7c:
2c:8e:95:93:2e:9b:da:65:18:59:02:65:e2:c3:22:b2:8f:ef:
70:90:17:0b:8f:13:fe:dc:f9:55:48:a9:25:80:dd:1f:7f:e2:
9d:61:d7:e7:b4:1c:37:0f:04:7c:a7:a8:ec:db:b6:0f:1a:33:
7b:86:f4:d8:67:08:28:96:87:df:71:90:b9:3c:f2:23:3a:7b:
94:35:58:04:26:14:58:a3:e0:9b:84:dc:9e:dc:58:f5:f6:6c:
9f:1a:6e:1e:1c:59:55:a4:3b:9c:52:54:cb:71:c3:9f:4c:45:
4c:e9:c2:8d:66:d6:bc:b3:31:44:91:44:bf:d0:82:5c:37:02:
58:ec:96:4e:65:32:da:ce:70:eb:6f:e6:0a:c1:7b:f9:2a:14:
f9:d0:9f:4e:c3:b7:76:ff:a7:b7:54:ca:0e:21:e0:5b:1d:d2:
52:61:2a:b5:f1:7f:3a:44:2b:51:71:6d:68:ea:f3:d4:f8:37:
ca:98:4e:25:ba:46:f8:0f:72:08:56:58:c2:04:88:03:0b:8b:
77:41:a4:dd:e6:ac:c8:e2:fc:29:e7:67:b6:d1:5e:dd:6e:e6:
6c:6b:e9:43:eb:f0:c0:0f:77:39:af:26:e9:80:a6:32:f1:45:
0b:b6:3c:bd
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDQgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzAzMjIwMjAzMzFaFw0yNTAzMjIwMjAzMzFaMBgxFjAU
BgNVBAMMDTY0MWE2MWZhLTU5Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC77o/MvUC1GkJtEOjVmBPJXPsZh88lChPwkIPu+FS4B7KyLyMMJukgkAg7
tRwNFH2YkSdwKs7QyqZ1rDvwz+dzl79fPY9MInxA1MEgBNxB8PUPOkOv/yogJS1+
Erpcz0fdG6G6s1DBTOfP7du4VA1x1IEK4KotjY2z4HAgqhWSsdA2uFL0qPkrw4Ul
t0KJF9HnQg1M2kohsXy/Dig4EN2600vuKCoxoLcxZm/zpC/vnO1Quo04OFl+ODKo
G1re5IDEYDTklUXiolj+oUHjnsVBCSqYLYdA1+G03XxtDJD70izRata1fCOG/tWX
UQ6FA4+AX9WiP7kvNMScRNuY6rFZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU8pUG
xw8WefbWFKaYa/knsnKb0T8wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0MyNTQwMTRFQzg1NTExRURCRUEwOUU5MUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEEAwDQYJKoZIhvcNAQEL
BQADggEBALDu/TRzvQJNsLK0kC76CGyHfCyOlZMum9plGFkCZeLDIrKP73CQFwuP
E/7c+VVIqSWA3R9/4p1h1+e0HDcPBHynqOzbtg8aM3uG9NhnCCiWh99xkLk88iM6
e5Q1WAQmFFij4JuE3J7cWPX2bJ8abh4cWVWkO5xSVMtxw59MRUzpwo1m1ryzMUSR
RL/Qglw3Aljslk5lMtrOcOtv5grBe/kqFPnQn07Dt3b/p7dUyg4h4Fsd0lJhKrXx
fzpEK1FxbWjq89T4N8qYTiW6RvgPcghWWMIEiAMLi3dBpN3mrMji/CnnZ7bRXt1u
5mxr6UPr8MAPdzmvJumApjLxRQu2PL0=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org