Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C661B51EF7C211ED90E2978B4AD9E6FC.roa
File: C661B51EF7C211ED90E2978B4AD9E6FC.roa (raw, json)
Hash identifier: q3B2pNnh2PPltfJVcokwS5zM4l4OxFwCNsbUJl0b5jE=
Subject key identifier: F2:F9:93:1B:0A:B4:E4:51:8D:19:DC:DE:85:AF:7B:DD:D4:1E:1D:DD
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0DCB
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C661B51EF7C211ED90E2978B4AD9E6FC.roa
Signing time: Sun 21 May 2023 10:32:24 +0000
ROA not before: Sun 21 May 2023 10:32:20 +0000
ROA not after: Sat 24 May 2025 10:32:20 +0000
asID: 1239
IP address blocks: 154.16.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3531 (0xdcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 21 10:32:20 2023 GMT
Not After : May 24 10:32:20 2025 GMT
Subject: CN=6469f338-c0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b1:e1:e6:5c:3a:27:88:8f:de:7f:75:6c:e1:
e5:4c:4a:25:42:fa:92:0e:32:1e:46:a3:28:c9:f2:
fe:d6:6c:6f:17:25:57:63:69:78:25:6b:bf:3c:f4:
57:b7:31:51:12:a0:b8:fb:a1:70:b2:56:9d:ca:35:
4b:36:51:47:4d:03:f8:5f:e9:fe:0b:fa:0a:d2:7a:
5f:4b:fc:df:2b:50:e5:6e:ff:4d:07:b3:3d:0c:0e:
02:3a:4b:34:e3:1b:03:de:40:12:60:34:5b:22:56:
9c:cf:a5:21:31:dc:36:a0:ee:6e:5d:23:d1:fd:7f:
4c:8d:c2:d9:1a:26:2f:4a:12:85:6d:f6:95:bb:88:
3d:d1:88:49:40:29:a9:da:58:ff:6a:a2:e2:0b:49:
94:21:6f:24:2c:f3:23:46:ef:0e:ce:8e:52:02:94:
7e:1b:82:df:bb:49:0f:7a:1f:4d:aa:a5:73:cc:97:
22:c9:df:e1:35:96:cc:a9:05:6e:f0:67:6a:1c:0c:
79:90:87:8b:ca:92:49:b3:ad:bd:df:f4:ff:7b:ee:
20:a5:36:00:a2:cc:23:7c:79:b1:a0:5d:8d:bf:b4:
ca:0e:5a:9e:a9:f3:d6:dc:bf:4e:de:32:17:0a:d1:
b0:ba:e4:0f:45:13:e3:73:df:aa:37:70:90:03:ad:
75:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F9:93:1B:0A:B4:E4:51:8D:19:DC:DE:85:AF:7B:DD:D4:1E:1D:DD
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C661B51EF7C211ED90E2978B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.123.0/24
Signature Algorithm: sha256WithRSAEncryption
19:38:b1:8c:97:fb:3b:c1:ee:d2:32:c3:f3:7d:b5:d4:dc:b3:
3c:eb:40:8a:c6:89:c1:83:77:fc:2b:1a:2e:f6:04:ca:77:c3:
22:ae:c0:d3:61:a9:25:1c:23:9a:8c:a2:ec:46:92:77:db:fd:
48:38:1e:45:2f:70:d0:e2:f7:53:b9:9d:d7:34:76:d8:9a:94:
e7:8e:2a:b0:6e:45:38:e6:58:a9:24:5d:b2:8a:12:cf:aa:04:
a2:92:7f:8d:2f:c4:68:4d:41:d0:cc:cb:56:0d:05:e6:1e:d1:
02:61:a7:9b:94:93:bf:4e:b8:59:e4:39:61:79:94:90:b3:a7:
6c:83:ae:a1:7b:40:ce:99:d3:ac:c7:6a:11:b8:22:52:de:be:
fe:df:fb:e7:a7:de:8a:71:d1:d8:5f:b0:b3:97:c8:65:64:89:
d6:b7:cf:78:01:5f:8f:f9:ad:ea:e9:c2:ad:ca:98:f8:f5:a9:
5e:cb:d8:c7:df:80:fd:ec:d6:62:df:80:15:88:0c:e9:e0:8f:
aa:e6:7b:4d:a0:45:de:db:aa:0e:f5:ab:d0:96:5c:40:7b:d2:
3b:43:7b:9c:3b:66:22:a5:00:4a:16:34:f8:65:49:e5:fa:bd:
86:10:22:33:2e:c7:e7:1a:6b:2b:5b:a7:f2:36:a1:c6:96:df:
50:22:82:b4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDcswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA1MjExMDMyMjBaFw0yNTA1MjQxMDMyMjBaMBgxFjAU
BgNVBAMTDTY0NjlmMzM4LWMwZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCeseHmXDoniI/ef3Vs4eVMSiVC+pIOMh5GoyjJ8v7WbG8XJVdjaXgla788
9Fe3MVESoLj7oXCyVp3KNUs2UUdNA/hf6f4L+grSel9L/N8rUOVu/00Hsz0MDgI6
SzTjGwPeQBJgNFsiVpzPpSEx3Dag7m5dI9H9f0yNwtkaJi9KEoVt9pW7iD3RiElA
KanaWP9qouILSZQhbyQs8yNG7w7OjlIClH4bgt+7SQ96H02qpXPMlyLJ3+E1lsyp
BW7wZ2ocDHmQh4vKkkmzrb3f9P977iClNgCizCN8ebGgXY2/tMoOWp6p89bcv07e
MhcK0bC65A9FE+Nz36o3cJADrXXBAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU8vmT
Gwq05FGNGdzeha973dQeHd0wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0M2NjFCNTFFRjdDMjExRUQ5MEUyOTc4QjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEHswDQYJKoZIhvcNAQEL
BQADggEBABk4sYyX+zvB7tIyw/N9tdTcszzrQIrGicGDd/wrGi72BMp3wyKuwNNh
qSUcI5qMouxGknfb/Ug4HkUvcNDi91O5ndc0dtialOeOKrBuRTjmWKkkXbKKEs+q
BKKSf40vxGhNQdDMy1YNBeYe0QJhp5uUk79OuFnkOWF5lJCzp2yDrqF7QM6Z06zH
ahG4IlLevv7f++en3opx0dhfsLOXyGVkida3z3gBX4/5rerpwq3KmPj1qV7L2Mff
gP3s1mLfgBWIDOngj6rme02gRd7bqg71q9CWXEB70jtDe5w7ZiKlAEoWNPhlSeX6
vYYQIjMux+caaytbp/I2ocaW31AigrQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org