Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C7456742299F11ED91A0B7C0F1222468.roa
File: C7456742299F11ED91A0B7C0F1222468.roa (raw, json)
Hash identifier: bZIKYNAJA82NaPqJaD8CahE04fHVDkdCuKullCZ1FzY=
Subject key identifier: FF:68:1F:E8:BB:9F:3E:4F:A1:93:5B:56:F2:85:67:B5:19:F7:05:56
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 095F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C7456742299F11ED91A0B7C0F1222468.roa
Signing time: Thu 01 Sep 2022 02:42:54 +0000
ROA not before: Thu 01 Sep 2022 02:42:47 +0000
ROA not after: Fri 01 Sep 2023 02:42:47 +0000
asID: 34465
IP address blocks: 154.70.152.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2399 (0x95f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 1 02:42:47 2022 GMT
Not After : Sep 1 02:42:47 2023 GMT
Subject: CN=63101c2e-95a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8a:4e:3f:d9:b1:a7:5d:29:d7:68:36:fe:f1:
ac:80:f4:b3:b8:39:8c:f7:4d:c3:a6:dc:87:7f:a7:
b1:90:bc:73:01:64:ba:fb:3f:e1:34:c4:12:cd:b9:
13:c9:be:4e:69:56:03:d6:8a:d4:cc:33:5f:99:e7:
b8:9c:7a:57:27:d6:75:f2:09:29:67:c4:bb:c6:6d:
d7:fb:26:c9:13:02:4a:51:87:1e:09:c3:9e:6f:13:
89:aa:ec:db:28:58:da:d2:0a:2a:db:bb:91:ca:6c:
a1:25:b9:d6:2b:25:7d:0c:07:c1:43:ab:0f:8a:f0:
32:12:b4:a8:58:10:74:b7:bb:eb:d7:2b:76:0a:fd:
31:48:d1:1c:a5:fe:21:2d:aa:5c:f2:8c:77:38:fa:
64:b4:33:79:53:99:cb:e6:0c:e9:e2:37:58:37:01:
a5:18:fc:22:cd:7d:a6:ae:52:7d:4b:d5:0f:40:e0:
ad:d3:f3:ff:5d:d5:a3:d8:bf:de:b5:64:91:aa:78:
d5:1f:a0:dd:82:49:b9:dc:3a:b0:ac:76:31:93:1e:
be:e6:d6:2f:de:30:70:e6:68:80:e4:9e:5a:18:f7:
86:67:12:86:11:4b:79:db:01:2d:ee:c3:96:1b:9b:
c9:3f:1b:2c:9d:8b:03:7b:da:06:19:60:5e:1a:65:
66:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:68:1F:E8:BB:9F:3E:4F:A1:93:5B:56:F2:85:67:B5:19:F7:05:56
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C7456742299F11ED91A0B7C0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.70.152.0/24
Signature Algorithm: sha256WithRSAEncryption
94:f9:2b:1a:13:55:ed:bb:db:1d:70:99:15:d6:a0:68:c3:4f:
90:2e:94:12:53:a5:d5:1e:e4:d0:99:2d:e1:f0:f5:fe:ce:b6:
bb:98:7f:38:0d:71:e5:88:9a:3b:d9:16:6b:5c:cd:5c:f8:00:
63:0d:4a:ef:9a:71:c2:bb:f1:88:00:39:87:62:c1:ba:71:b3:
6d:5f:a0:5a:39:36:3a:0f:71:50:b8:55:c1:aa:c1:48:fd:71:
e2:3e:e6:2d:20:32:92:5f:ff:3b:b1:62:2e:9c:fa:75:66:3e:
c1:9d:5e:71:9f:d7:7c:30:85:9f:94:b1:c3:51:5a:c0:c3:61:
45:48:60:21:4b:c0:ec:9b:47:a3:28:21:df:58:17:4b:32:1c:
9e:a2:0a:73:89:64:65:d2:3c:d1:63:95:dc:3d:f6:21:67:3f:
59:02:1d:57:fd:71:89:6e:bc:a0:47:71:55:89:eb:30:30:50:
1f:af:02:a4:d4:fc:4b:56:99:f2:df:d2:d6:7d:5a:7d:b1:85:
da:c7:bc:16:91:3e:59:56:29:7d:23:88:5b:aa:a8:0e:f2:cc:
26:f4:75:22:64:09:ed:92:94:2a:d3:0f:33:34:45:89:a9:7e:
77:51:cb:ff:d5:51:58:6d:b0:fc:63:38:0d:fe:a2:bb:2e:a6:
a8:7c:4d:2f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCV8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMjA5MDEwMjQyNDdaFw0yMzA5MDEwMjQyNDdaMBgxFjAU
BgNVBAMMDTYzMTAxYzJlLTk1YTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNik4/2bGnXSnXaDb+8ayA9LO4OYz3TcOm3Id/p7GQvHMBZLr7P+E0xBLN
uRPJvk5pVgPWitTMM1+Z57icelcn1nXyCSlnxLvGbdf7JskTAkpRhx4Jw55vE4mq
7NsoWNrSCirbu5HKbKEludYrJX0MB8FDqw+K8DIStKhYEHS3u+vXK3YK/TFI0Ryl
/iEtqlzyjHc4+mS0M3lTmcvmDOniN1g3AaUY/CLNfaauUn1L1Q9A4K3T8/9d1aPY
v961ZJGqeNUfoN2CSbncOrCsdjGTHr7m1i/eMHDmaIDknloY94ZnEoYRS3nbAS3u
w5Ybm8k/GyydiwN72gYZYF4aZWaBAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU/2gf
6LufPk+hk1tW8oVntRn3BVYwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0M3NDU2NzQyMjk5RjExRUQ5MUEwQjdDMEYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaRpgwDQYJKoZIhvcNAQEL
BQADggEBAJT5KxoTVe272x1wmRXWoGjDT5AulBJTpdUe5NCZLeHw9f7OtruYfzgN
ceWImjvZFmtczVz4AGMNSu+accK78YgAOYdiwbpxs21foFo5NjoPcVC4VcGqwUj9
ceI+5i0gMpJf/zuxYi6c+nVmPsGdXnGf13wwhZ+UscNRWsDDYUVIYCFLwOybR6Mo
Id9YF0syHJ6iCnOJZGXSPNFjldw99iFnP1kCHVf9cYluvKBHcVWJ6zAwUB+vAqTU
/EtWmfLf0tZ9Wn2xhdrHvBaRPllWKX0jiFuqqA7yzCb0dSJkCe2SlCrTDzM0RYmp
fndRy//VUVhtsPxjOA3+orsupqh8TS8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org