Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D16FBEDE171A11EEA44753154AD9E6FC.roa
File: D16FBEDE171A11EEA44753154AD9E6FC.roa (raw, json)
Hash identifier: 0dqiavGieLdpk2XpgKptlAozEFcL7Cp2kBZ7WKSLR7I=
Subject key identifier: D1:F2:7A:8F:F2:8B:9B:BE:28:88:FB:F0:F8:04:0A:FD:CB:A4:B8:01
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1031
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D16FBEDE171A11EEA44753154AD9E6FC.roa
Signing time: Fri 30 Jun 2023 07:50:45 +0000
ROA not before: Fri 30 Jun 2023 07:50:41 +0000
ROA not after: Sun 29 Jun 2025 07:50:41 +0000
asID: 834
IP address blocks: 154.16.75.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4145 (0x1031)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 30 07:50:41 2023 GMT
Not After : Jun 29 07:50:41 2025 GMT
Subject: CN=649e8954-3591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f5:2d:83:e0:08:ca:77:4a:01:04:b1:86:dc:
2f:aa:13:15:9c:b8:c4:b8:d8:a0:ef:25:a4:1a:7f:
d2:64:ef:21:5d:0a:dc:ca:56:73:f0:92:15:3b:37:
81:46:b2:42:72:a4:01:ae:08:30:4e:c9:28:1f:47:
23:eb:4e:fb:c3:cc:b2:90:b8:72:fa:7a:45:06:f9:
48:5e:38:ca:70:70:03:58:c1:fe:e4:16:72:8a:3d:
d4:ba:ec:f5:60:ce:77:55:54:99:ad:b7:ef:18:7f:
9a:08:c9:3e:28:0a:2a:22:4b:84:42:40:37:cb:ba:
31:45:fb:5d:39:6b:4a:0a:cd:14:34:dd:31:7a:b2:
2f:f5:87:28:0c:91:68:33:fe:fb:c5:d7:f6:01:27:
1a:ca:97:a1:2c:3f:5e:86:3b:40:b7:8c:1d:59:23:
77:db:fc:ee:b9:b7:81:41:b1:c4:46:65:15:06:9f:
01:81:a4:92:99:18:83:52:dd:a1:5b:1b:bb:e8:b4:
eb:14:fa:73:8f:0b:05:54:8c:e0:cc:50:c0:2a:b1:
b9:5c:fd:cb:fb:18:f3:d7:df:ee:0d:39:26:26:10:
28:d8:83:18:61:21:ee:20:89:be:55:33:75:ef:3c:
2d:35:b1:74:88:10:6b:1c:8c:b4:66:44:e9:73:0c:
47:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F2:7A:8F:F2:8B:9B:BE:28:88:FB:F0:F8:04:0A:FD:CB:A4:B8:01
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D16FBEDE171A11EEA44753154AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.75.0/24
Signature Algorithm: sha256WithRSAEncryption
32:e9:38:e1:ba:a0:d3:d6:d2:5a:69:57:93:6d:26:bb:56:eb:
42:0f:4c:de:a2:c9:cf:ff:e2:4f:9c:77:63:0c:bc:87:bf:25:
95:10:3e:37:25:54:98:6f:55:4e:d4:2c:61:a1:6c:38:48:d9:
a9:be:5f:80:8e:ee:ef:ca:b8:83:fd:83:6e:17:b1:8c:1b:8e:
2a:40:0f:9c:18:38:12:11:9f:e7:fb:1e:dc:ec:08:43:4b:a7:
75:a8:18:10:83:bd:d6:c0:2f:da:41:b5:83:7c:04:bd:da:9e:
08:53:d1:eb:d8:4d:b1:27:be:48:29:4d:4b:23:0c:48:f4:32:
03:d0:34:4f:ee:57:38:ca:46:c4:60:57:42:a9:7a:1f:a9:1f:
3f:e9:76:e0:72:af:d8:e3:17:b8:ae:e2:23:8f:6f:4a:c8:ab:
34:c4:77:4e:33:69:c5:05:a9:b1:85:30:bf:d7:3e:4a:b2:78:
9f:c5:29:1d:87:e5:6a:b0:7e:b1:13:2a:45:61:2d:dd:1e:12:
ad:cc:c0:e2:17:e4:f8:ef:c6:eb:a1:29:2e:64:34:9c:de:fd:
ce:fe:19:50:64:1a:42:b7:68:01:5e:38:5a:72:cc:cc:63:64:
78:9b:18:28:6c:81:f6:4e:3a:af:32:85:8e:d6:e0:01:e4:8c:
83:14:d3:48
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEDEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA2MzAwNzUwNDFaFw0yNTA2MjkwNzUwNDFaMBgxFjAU
BgNVBAMTDTY0OWU4OTU0LTM1OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC39S2D4AjKd0oBBLGG3C+qExWcuMS42KDvJaQaf9Jk7yFdCtzKVnPwkhU7
N4FGskJypAGuCDBOySgfRyPrTvvDzLKQuHL6ekUG+UheOMpwcANYwf7kFnKKPdS6
7PVgzndVVJmtt+8Yf5oIyT4oCioiS4RCQDfLujFF+105a0oKzRQ03TF6si/1hygM
kWgz/vvF1/YBJxrKl6EsP16GO0C3jB1ZI3fb/O65t4FBscRGZRUGnwGBpJKZGINS
3aFbG7votOsU+nOPCwVUjODMUMAqsblc/cv7GPPX3+4NOSYmECjYgxhhIe4gib5V
M3XvPC01sXSIEGscjLRmROlzDEdrAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU0fJ6
j/KLm74oiPvw+AQK/cukuAEwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0QxNkZCRURFMTcxQTExRUVBNDQ3NTMxNTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEEswDQYJKoZIhvcNAQEL
BQADggEBADLpOOG6oNPW0lppV5NtJrtW60IPTN6iyc//4k+cd2MMvIe/JZUQPjcl
VJhvVU7ULGGhbDhI2am+X4CO7u/KuIP9g24XsYwbjipAD5wYOBIRn+f7HtzsCENL
p3WoGBCDvdbAL9pBtYN8BL3anghT0evYTbEnvkgpTUsjDEj0MgPQNE/uVzjKRsRg
V0Kpeh+pHz/pduByr9jjF7iu4iOPb0rIqzTEd04zacUFqbGFML/XPkqyeJ/FKR2H
5WqwfrETKkVhLd0eEq3MwOIX5PjvxuuhKS5kNJze/c7+GVBkGkK3aAFeOFpyzMxj
ZHibGChsgfZOOq8yhY7W4AHkjIMU00g=
-----END CERTIFICATE-----
Generated at Sat Jul 22 13:22:34 2023 by rpki-client on console-fra.rpki-client.org