Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CC85A77CFFE511EDB046FE394AD9E6FC.roa
File: CC85A77CFFE511EDB046FE394AD9E6FC.roa (raw, json)
Hash identifier: 6oClwi4AXGsVhIirVJzi4uH3HvO1VNGixLzIYGvM9E8=
Subject key identifier: E6:03:11:6F:93:F1:7A:B6:68:40:E1:FB:0F:DA:59:8E:92:C3:14:15
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0E5B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CC85A77CFFE511EDB046FE394AD9E6FC.roa
Signing time: Wed 31 May 2023 19:03:16 +0000
ROA not before: Wed 31 May 2023 19:03:13 +0000
ROA not after: Sat 31 May 2025 19:03:13 +0000
asID: 834
IP address blocks: 154.16.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3675 (0xe5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 31 19:03:13 2023 GMT
Not After : May 31 19:03:13 2025 GMT
Subject: CN=647799f4-1974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:d8:a3:0c:a7:fa:4a:18:ed:b5:97:38:0a:
83:67:22:d9:28:bd:1d:69:8d:7f:db:5b:a7:f9:01:
09:ce:87:32:69:94:9f:31:a1:15:10:19:8b:8a:24:
fb:74:af:4b:17:52:50:89:1f:44:7e:a0:30:2d:98:
f5:f9:ef:87:73:ea:e3:81:17:fe:44:35:58:b5:7d:
d9:8c:61:fd:35:c5:bb:5f:dd:75:1a:ba:44:9b:19:
3d:a3:c2:b7:c6:90:0c:a9:17:62:e7:0d:0d:11:97:
31:46:07:b0:19:1a:ce:7e:6e:c4:a3:f9:80:1b:e3:
2c:87:4b:d9:7c:ad:bb:16:67:3e:da:10:e4:5a:3d:
f8:0a:3c:64:07:54:b1:a0:03:c7:0b:e1:be:0a:3b:
52:73:f4:23:71:f5:60:8b:26:b5:36:aa:af:87:7e:
3e:26:db:b9:c8:a6:e8:2b:43:0a:4e:a9:71:a0:60:
e2:97:74:9f:8f:56:0b:b3:85:37:2f:9e:1a:79:3b:
9a:24:07:cf:8f:e4:d6:83:d5:58:ca:9e:c9:ce:3f:
89:aa:d0:5e:ea:87:86:0d:31:6e:f1:d0:05:c5:99:
dd:c5:4a:1b:38:11:e9:f7:64:e8:62:cc:06:78:bc:
e4:29:64:53:94:ad:f6:b8:d5:64:e0:05:2d:75:8c:
0b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:03:11:6F:93:F1:7A:B6:68:40:E1:FB:0F:DA:59:8E:92:C3:14:15
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CC85A77CFFE511EDB046FE394AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.38.0/24
Signature Algorithm: sha256WithRSAEncryption
40:97:6e:1b:b5:f4:f2:1c:a3:ae:98:45:d4:d5:95:22:88:f3:
5d:54:d2:c8:49:b6:72:cb:70:22:9e:01:ed:7d:b5:e8:75:ac:
c5:5d:df:be:35:dd:55:43:82:eb:d1:42:ad:48:2e:bd:df:1e:
0f:b4:d1:84:1e:97:e5:63:da:33:a3:5d:14:de:dd:3d:1b:d2:
c7:b3:a5:2f:0a:9d:8b:df:ff:16:d6:7b:15:14:89:53:31:b7:
96:14:55:7a:a1:55:fc:0f:e9:0c:09:b0:cc:a0:e4:a2:a1:52:
e3:5b:7a:02:90:5d:c2:9d:8c:8c:6b:25:53:55:f0:74:b0:91:
3c:9a:f1:5d:44:2d:3a:48:2f:55:1c:f6:c1:1d:43:33:53:84:
5a:cf:9a:02:90:b3:62:a7:e3:6f:6c:2d:d3:c2:77:25:79:02:
1d:c3:1d:90:e4:2e:23:03:ff:cb:b6:a1:63:75:18:52:fa:41:
31:fc:bf:8a:d7:0b:ad:a3:54:2a:c9:47:e6:66:8f:d4:20:3e:
18:82:ad:93:7b:6a:b2:bd:aa:b1:83:e1:b2:e2:2c:32:ca:76:
2d:65:96:0a:69:17:d0:4b:79:64:32:7d:1c:ad:c1:d2:55:2a:
ff:49:dd:9d:eb:90:a7:21:32:f5:23:95:05:90:51:77:4f:bb:
02:71:b4:68
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDlswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA1MzExOTAzMTNaFw0yNTA1MzExOTAzMTNaMBgxFjAU
BgNVBAMTDTY0Nzc5OWY0LTE5NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrKdijDKf6ShjttZc4CoNnItkovR1pjX/bW6f5AQnOhzJplJ8xoRUQGYuK
JPt0r0sXUlCJH0R+oDAtmPX574dz6uOBF/5ENVi1fdmMYf01xbtf3XUaukSbGT2j
wrfGkAypF2LnDQ0RlzFGB7AZGs5+bsSj+YAb4yyHS9l8rbsWZz7aEORaPfgKPGQH
VLGgA8cL4b4KO1Jz9CNx9WCLJrU2qq+Hfj4m27nIpugrQwpOqXGgYOKXdJ+PVguz
hTcvnhp5O5okB8+P5NaD1VjKnsnOP4mq0F7qh4YNMW7x0AXFmd3FShs4Een3ZOhi
zAZ4vOQpZFOUrfa41WTgBS11jAsTAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU5gMR
b5PxerZoQOH7D9pZjpLDFBUwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0NDODVBNzdDRkZFNTExRURCMDQ2RkUzOTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaECYwDQYJKoZIhvcNAQEL
BQADggEBAECXbhu19PIco66YRdTVlSKI811U0shJtnLLcCKeAe19teh1rMVd3741
3VVDguvRQq1ILr3fHg+00YQel+Vj2jOjXRTe3T0b0sezpS8KnYvf/xbWexUUiVMx
t5YUVXqhVfwP6QwJsMyg5KKhUuNbegKQXcKdjIxrJVNV8HSwkTya8V1ELTpIL1Uc
9sEdQzNThFrPmgKQs2Kn429sLdPCdyV5Ah3DHZDkLiMD/8u2oWN1GFL6QTH8v4rX
C62jVCrJR+Zmj9QgPhiCrZN7arK9qrGD4bLiLDLKdi1llgppF9BLeWQyfRytwdJV
Kv9J3Z3rkKchMvUjlQWQUXdPuwJxtGg=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org