Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C283A978C8BB11EE8528557C775412E6.roa
File: C283A978C8BB11EE8528557C775412E6.roa (raw, json)
Hash identifier: kjGy1wHbi9ReJM2Rt0eBpNE8OnRaFu4oRVpl8mZNabA=
Subject key identifier: 52:F2:05:6D:59:13:B6:CF:05:41:12:73:83:CE:AE:D9:9C:45:72:01
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 14AB
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C283A978C8BB11EE8528557C775412E6.roa
Signing time: Sun 11 Feb 2024 08:58:44 +0000
ROA not before: Sun 11 Feb 2024 08:58:41 +0000
ROA not after: Wed 11 Feb 2026 08:58:41 +0000
asID: 216425
IP address blocks: 154.16.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 13:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5291 (0x14ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 11 08:58:41 2024 GMT
Not After : Feb 11 08:58:41 2026 GMT
Subject: CN=65c88c44-f5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7d:a3:80:85:7a:7f:3d:a3:ba:24:ad:67:22:
64:00:93:f2:b6:1a:42:eb:0e:94:ae:33:d1:4b:38:
3f:42:28:f7:c6:f1:2e:8a:5f:19:21:ac:7e:ad:a3:
67:78:c1:00:f3:01:84:27:c0:b6:c1:95:57:ed:05:
1a:19:a8:65:d6:08:01:9b:28:f9:23:5e:d4:bf:90:
66:cf:19:3e:78:c9:3c:8e:a1:cd:d7:4a:07:b9:ed:
5a:13:80:b6:a5:9a:4b:9a:ff:f9:06:9b:ef:72:6e:
7e:0f:d9:2b:40:04:ad:7d:a2:de:ca:7c:4c:50:90:
25:5f:d1:62:b4:a5:13:a8:16:c0:d2:27:14:62:9d:
3e:44:b5:2f:ea:48:0a:4d:b2:91:6c:b1:0a:39:65:
de:f0:44:7e:64:a1:28:57:88:7a:bb:99:45:76:4d:
02:7f:ad:bb:3d:4b:a1:c6:dc:c9:c4:d8:c3:ae:47:
a7:1f:ef:ad:7a:7c:9f:ed:f3:55:5c:1c:0a:bf:c0:
82:81:35:c4:d5:92:1a:72:23:87:f5:71:1d:f7:73:
ad:60:5d:d8:a6:a4:9c:30:81:df:ca:34:93:d4:a5:
c1:e5:9c:47:f4:1a:85:3b:b9:36:b0:78:7f:e1:78:
f0:ed:56:1f:f3:70:31:0d:ce:19:82:24:04:d8:14:
ce:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F2:05:6D:59:13:B6:CF:05:41:12:73:83:CE:AE:D9:9C:45:72:01
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C283A978C8BB11EE8528557C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.33.0/24
Signature Algorithm: sha256WithRSAEncryption
51:4f:a8:2a:f6:d7:8c:10:0f:be:3d:82:0e:b4:95:eb:00:b7:
fc:16:15:a3:88:19:92:28:f4:94:b7:8c:4a:4b:6f:ce:b5:cc:
53:df:ce:cc:4f:2c:49:1b:c4:39:f9:9f:fb:8e:be:94:ef:4b:
9d:a7:9c:0f:a0:dd:99:4f:17:74:14:34:1f:62:38:bb:d0:41:
44:a1:7c:a4:73:d0:04:cc:b0:e3:27:3d:a4:33:e3:0f:fa:a1:
40:31:3c:4a:cd:44:e2:41:91:16:2e:28:db:92:42:84:66:03:
c3:c5:1e:3c:a5:10:ce:37:a7:e5:2d:eb:2e:c3:73:48:8e:d6:
4e:a1:f6:a1:82:10:db:88:29:c2:9a:72:0e:0f:35:9c:5a:51:
4e:73:39:1b:aa:06:7f:5e:45:70:72:23:9f:ff:7c:f3:fa:3c:
2d:f7:52:99:7c:bd:96:28:ff:0f:bf:eb:3a:87:47:75:67:77:
27:ad:4a:f6:df:b1:c4:13:7d:39:7f:ba:10:00:96:d3:5c:45:
8e:a9:01:be:e2:19:be:eb:35:3c:f9:a9:00:59:4d:68:00:88:
5a:88:29:01:04:ba:27:1e:89:b3:26:cd:ad:4d:4c:1d:43:70:
1d:6d:2f:19:44:7e:c3:e8:b4:d7:df:72:40:04:91:e4:17:0b:
77:12:59:16
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFKswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNDAyMTEwODU4NDFaFw0yNjAyMTEwODU4NDFaMBgxFjAU
BgNVBAMTDTY1Yzg4YzQ0LWY1ZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDcfaOAhXp/PaO6JK1nImQAk/K2GkLrDpSuM9FLOD9CKPfG8S6KXxkhrH6t
o2d4wQDzAYQnwLbBlVftBRoZqGXWCAGbKPkjXtS/kGbPGT54yTyOoc3XSge57VoT
gLalmkua//kGm+9ybn4P2StABK19ot7KfExQkCVf0WK0pROoFsDSJxRinT5EtS/q
SApNspFssQo5Zd7wRH5koShXiHq7mUV2TQJ/rbs9S6HG3MnE2MOuR6cf7616fJ/t
81VcHAq/wIKBNcTVkhpyI4f1cR33c61gXdimpJwwgd/KNJPUpcHlnEf0GoU7uTaw
eH/hePDtVh/zcDENzhmCJATYFM4bAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUUvIF
bVkTts8FQRJzg86u2ZxFcgEwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0MyODNBOTc4QzhCQjExRUU4NTI4NTU3Qzc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaECEwDQYJKoZIhvcNAQEL
BQADggEBAFFPqCr214wQD749gg60lesAt/wWFaOIGZIo9JS3jEpLb861zFPfzsxP
LEkbxDn5n/uOvpTvS52nnA+g3ZlPF3QUNB9iOLvQQUShfKRz0ATMsOMnPaQz4w/6
oUAxPErNROJBkRYuKNuSQoRmA8PFHjylEM43p+Ut6y7Dc0iO1k6h9qGCENuIKcKa
cg4PNZxaUU5zORuqBn9eRXByI5//fPP6PC33Upl8vZYo/w+/6zqHR3VndyetSvbf
scQTfTl/uhAAltNcRY6pAb7iGb7rNTz5qQBZTWgAiFqIKQEEuiceibMmza1NTB1D
cB1tLxlEfsPotNffckAEkeQXC3cSWRY=
-----END CERTIFICATE-----
Generated at Fri Feb 16 17:41:18 2024 by rpki-client on console-fra.rpki-client.org