Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CE2C36248AA911ED9C1BCFBBF1222468.roa
File: CE2C36248AA911ED9C1BCFBBF1222468.roa (raw, json)
Hash identifier: zxi7dz6UloO1JPkE2fjI2WpLNTCC0XRQbkqIaRVQOGk=
Subject key identifier: D3:73:7B:B6:94:54:65:28:23:31:E6:97:E1:0E:D2:E0:C5:61:03:E0
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0B33
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CE2C36248AA911ED9C1BCFBBF1222468.roa
Signing time: Mon 02 Jan 2023 14:29:03 +0000
ROA not before: Mon 02 Jan 2023 14:28:59 +0000
ROA not after: Thu 02 Jan 2025 14:28:59 +0000
asID: 23470
IP address blocks: 154.16.51.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2867 (0xb33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 2 14:28:59 2023 GMT
Not After : Jan 2 14:28:59 2025 GMT
Subject: CN=63b2ea2f-82cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:40:aa:17:7e:64:1d:75:c9:5c:26:64:6c:f7:
4f:e9:c9:87:b7:13:99:a9:f1:f1:bf:8b:14:f0:60:
24:52:0b:ed:57:04:7c:4b:46:34:50:c8:c3:9d:f5:
f7:d9:88:5a:69:3d:58:d3:9c:21:aa:8c:10:cc:63:
d8:60:cd:6f:93:b2:2e:a2:74:dd:87:ca:f6:e5:19:
42:ee:46:cc:2c:6a:57:06:48:05:2f:0c:2c:99:26:
5b:4f:ae:c4:5e:d7:80:7f:38:ac:0d:f9:60:aa:3f:
ea:41:2c:75:51:ae:96:d8:39:fb:2e:28:ae:ab:23:
2e:42:5f:08:4f:52:4c:aa:51:cf:ad:fd:75:09:01:
14:7a:37:5b:d5:be:a1:fe:0a:02:b9:ce:25:c7:13:
c4:02:7e:86:c1:0f:0d:4e:ef:0c:51:ba:f0:30:93:
18:16:2b:f5:7d:40:9e:7f:bf:7c:9c:8d:2f:69:c5:
61:e1:2b:8d:5e:36:b6:f1:a8:44:aa:f8:a0:70:b0:
bc:c8:7a:27:09:86:de:52:4a:93:4e:cd:63:71:8c:
97:41:01:44:e4:c8:62:e4:8f:11:84:bd:fe:84:ed:
d0:d8:49:86:78:08:97:86:d1:37:a9:f3:e7:04:ba:
dd:e7:c7:d8:20:5a:87:c1:c9:86:21:ed:ed:64:14:
3b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:73:7B:B6:94:54:65:28:23:31:E6:97:E1:0E:D2:E0:C5:61:03:E0
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CE2C36248AA911ED9C1BCFBBF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.51.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:b9:21:5a:66:24:e3:4e:1b:5e:05:f7:5e:f3:d3:63:4f:0f:
36:a3:bc:b4:fb:43:18:f1:de:1c:3b:39:4c:0a:cb:4a:c2:82:
dd:99:81:41:5f:88:3a:c3:7f:07:1a:21:1b:cf:1e:03:b1:f7:
03:47:c1:6d:22:1d:82:ad:aa:fd:fc:50:11:d0:8f:2a:40:ff:
70:b9:a9:7a:d7:a3:66:5b:6b:da:9b:5f:e5:7d:57:19:89:77:
2b:72:31:ea:08:9c:76:85:9e:1a:9a:82:eb:b8:f8:2d:2a:34:
c4:b9:86:16:07:52:fe:71:cb:e2:9c:2d:16:85:f0:51:47:ea:
7d:bc:fa:d3:b9:9e:a5:87:87:7c:41:3a:78:64:78:1d:87:43:
07:cb:f8:d3:70:17:ea:e4:c8:aa:ac:f8:56:56:22:af:48:61:
02:96:14:48:d0:a3:20:96:30:21:f2:8e:55:24:a1:a4:1a:e1:
98:76:7a:81:f3:e0:0c:2d:28:dd:44:bf:4e:05:fa:05:d4:2f:
f9:46:8c:91:2f:e5:86:46:29:60:4f:0d:a8:ba:d6:c5:41:55:
41:d2:41:8e:5b:54:6a:5c:27:f1:d4:8c:59:75:1f:18:0c:6c:
fe:93:cf:3a:b5:09:d4:aa:19:13:e7:89:84:1c:51:64:7d:d9:
72:a0:a6:90
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCzMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzAxMDIxNDI4NTlaFw0yNTAxMDIxNDI4NTlaMBgxFjAU
BgNVBAMMDTYzYjJlYTJmLTgyY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8QKoXfmQddclcJmRs90/pyYe3E5mp8fG/ixTwYCRSC+1XBHxLRjRQyMOd
9ffZiFppPVjTnCGqjBDMY9hgzW+Tsi6idN2HyvblGULuRswsalcGSAUvDCyZJltP
rsRe14B/OKwN+WCqP+pBLHVRrpbYOfsuKK6rIy5CXwhPUkyqUc+t/XUJARR6N1vV
vqH+CgK5ziXHE8QCfobBDw1O7wxRuvAwkxgWK/V9QJ5/v3ycjS9pxWHhK41eNrbx
qESq+KBwsLzIeicJht5SSpNOzWNxjJdBAUTkyGLkjxGEvf6E7dDYSYZ4CJeG0Tep
8+cEut3nx9ggWofByYYh7e1kFDsrAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU03N7
tpRUZSgjMeaX4Q7S4MVhA+AwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0NFMkMzNjI0OEFBOTExRUQ5QzFCQ0ZCQkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEDMwDQYJKoZIhvcNAQEL
BQADggEBAD+5IVpmJONOG14F917z02NPDzajvLT7Qxjx3hw7OUwKy0rCgt2ZgUFf
iDrDfwcaIRvPHgOx9wNHwW0iHYKtqv38UBHQjypA/3C5qXrXo2Zba9qbX+V9VxmJ
dytyMeoInHaFnhqaguu4+C0qNMS5hhYHUv5xy+KcLRaF8FFH6n28+tO5nqWHh3xB
OnhkeB2HQwfL+NNwF+rkyKqs+FZWIq9IYQKWFEjQoyCWMCHyjlUkoaQa4Zh2eoHz
4AwtKN1Ev04F+gXUL/lGjJEv5YZGKWBPDai61sVBVUHSQY5bVGpcJ/HUjFl1HxgM
bP6Tzzq1CdSqGRPniYQcUWR92XKgppA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org