Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CD169352004B11EE95146B764AD9E6FC.roa
File: CD169352004B11EE95146B764AD9E6FC.roa (raw, json)
Hash identifier: mPNQWSNoUuzRHarRbfvNEDQdAgNdLqAqB+KkLJV3be0=
Subject key identifier: E9:D6:32:1C:1B:4B:95:3F:2A:3C:3F:20:65:FB:12:32:BE:55:36:B2
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0E65
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CD169352004B11EE95146B764AD9E6FC.roa
Signing time: Thu 01 Jun 2023 07:13:26 +0000
ROA not before: Thu 01 Jun 2023 07:13:22 +0000
ROA not after: Sun 01 Jun 2025 07:13:22 +0000
asID: 834
IP address blocks: 154.16.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3685 (0xe65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 1 07:13:22 2023 GMT
Not After : Jun 1 07:13:22 2025 GMT
Subject: CN=64784516-673d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:21:81:a0:c6:e5:42:d4:95:ce:53:5c:96:db:
84:33:aa:48:97:ca:e7:a7:7a:51:ae:bc:b7:41:87:
cc:53:d1:15:fb:b2:6b:5e:09:65:3c:e1:ba:8e:ac:
4f:43:93:37:09:bc:b6:e3:59:b3:d7:4c:f8:62:3a:
a7:95:5b:c5:ec:28:8a:75:49:3b:11:b3:f6:b1:67:
0c:b9:bb:18:12:9d:94:89:72:58:4a:11:9d:a6:39:
47:91:25:41:87:63:47:8f:41:3f:9f:c7:a4:8f:8e:
5f:7a:f7:83:b7:57:4e:26:99:d3:8e:d4:32:2c:bc:
ab:52:7c:46:c1:af:47:14:21:a5:2d:36:8e:88:39:
c2:dc:c1:2c:0b:66:8c:22:0e:59:b2:af:f6:f0:2d:
ff:34:23:71:71:e7:c5:87:d9:1a:b5:f3:ec:d1:1b:
1e:5e:e8:7e:88:f6:98:95:cf:39:7e:fa:19:ec:a9:
cb:59:58:13:2c:bc:2e:24:90:ac:2e:8b:b1:9d:cf:
d8:71:4e:45:a4:7f:2a:a3:72:a6:5e:ea:70:5a:c3:
44:4e:7c:33:55:b5:a7:8e:e3:f5:8f:fd:3e:39:0a:
cb:7c:82:0b:5e:09:04:47:9b:af:81:69:f1:a3:ba:
4a:a7:06:b7:d4:fa:1c:52:84:7d:79:d8:2d:d3:5e:
e0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D6:32:1C:1B:4B:95:3F:2A:3C:3F:20:65:FB:12:32:BE:55:36:B2
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CD169352004B11EE95146B764AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.89.0/24
Signature Algorithm: sha256WithRSAEncryption
61:bc:fd:2f:7d:d8:86:9c:d1:d0:8d:32:8d:93:21:a6:12:55:
f4:e7:01:d7:d9:a4:cb:53:25:71:b8:90:92:cf:89:68:49:04:
bd:0b:4a:f2:df:b7:a6:b2:a7:e2:fa:95:af:c2:67:b5:fa:f2:
a4:79:43:8c:6c:9b:b4:ec:97:51:42:5a:cc:6b:3c:4c:d9:fa:
b2:6d:94:51:99:6d:9c:be:e5:08:b3:ec:78:2a:c1:c9:1c:2c:
88:8a:c7:66:cc:c9:21:30:ba:a7:b9:b3:37:ba:d4:2c:68:d2:
bf:04:ab:ef:02:b6:23:94:6f:1e:f4:09:1f:d5:17:12:40:2d:
ca:3c:5f:7d:f9:3d:73:8a:b4:e3:48:d6:a2:1c:ed:83:eb:b5:
f8:6b:27:4e:c5:79:4b:e1:3c:75:3f:67:89:93:d8:fc:b3:1a:
06:1b:c1:e0:25:9b:89:ec:64:c2:9f:40:4b:cc:e5:93:92:05:
ab:e8:cc:dc:a3:58:bd:0c:3d:a6:77:14:36:13:bc:82:8c:0e:
e5:79:d3:a1:27:e0:6c:5d:78:6a:70:ff:09:f0:10:36:61:35:
96:bd:e6:cf:c1:01:04:bf:2d:c2:41:6d:3f:76:1e:0b:dc:e0:
cc:71:af:61:4e:dd:31:72:43:35:63:83:33:5a:c7:70:46:48:
41:25:18:40
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDmUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA2MDEwNzEzMjJaFw0yNTA2MDEwNzEzMjJaMBgxFjAU
BgNVBAMTDTY0Nzg0NTE2LTY3M2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAIYGgxuVC1JXOU1yW24QzqkiXyuenelGuvLdBh8xT0RX7smteCWU84bqO
rE9DkzcJvLbjWbPXTPhiOqeVW8XsKIp1STsRs/axZwy5uxgSnZSJclhKEZ2mOUeR
JUGHY0ePQT+fx6SPjl9694O3V04mmdOO1DIsvKtSfEbBr0cUIaUtNo6IOcLcwSwL
ZowiDlmyr/bwLf80I3Fx58WH2Rq18+zRGx5e6H6I9piVzzl++hnsqctZWBMsvC4k
kKwui7Gdz9hxTkWkfyqjcqZe6nBaw0ROfDNVtaeO4/WP/T45Cst8ggteCQRHm6+B
afGjukqnBrfU+hxShH152C3TXuBDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU6dYy
HBtLlT8qPD8gZfsSMr5VNrIwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0NEMTY5MzUyMDA0QjExRUU5NTE0NkI3NjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEFkwDQYJKoZIhvcNAQEL
BQADggEBAGG8/S992Iac0dCNMo2TIaYSVfTnAdfZpMtTJXG4kJLPiWhJBL0LSvLf
t6ayp+L6la/CZ7X68qR5Q4xsm7Tsl1FCWsxrPEzZ+rJtlFGZbZy+5Qiz7Hgqwckc
LIiKx2bMySEwuqe5sze61Cxo0r8Eq+8CtiOUbx70CR/VFxJALco8X335PXOKtONI
1qIc7YPrtfhrJ07FeUvhPHU/Z4mT2PyzGgYbweAlm4nsZMKfQEvM5ZOSBavozNyj
WL0MPaZ3FDYTvIKMDuV506En4GxdeGpw/wnwEDZhNZa95s/BAQS/LcJBbT92Hgvc
4Mxxr2FO3TFyQzVjgzNax3BGSEElGEA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org