Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D3736B140A1711EEBC2D9C154AD9E6FC.roa
File: D3736B140A1711EEBC2D9C154AD9E6FC.roa (raw, json)
Hash identifier: cStQTutml99BwEcj6ixAAekI7eevvKcbEXLmEClQhKg=
Subject key identifier: BA:BF:B6:14:F7:B0:17:C5:C0:BE:5E:60:BB:75:E0:D4:B5:F0:67:51
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F4F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D3736B140A1711EEBC2D9C154AD9E6FC.roa
Signing time: Tue 13 Jun 2023 18:26:34 +0000
ROA not before: Tue 13 Jun 2023 18:26:29 +0000
ROA not after: Sat 14 Jun 2025 18:26:29 +0000
asID: 55154
IP address blocks: 154.16.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3919 (0xf4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 13 18:26:29 2023 GMT
Not After : Jun 14 18:26:29 2025 GMT
Subject: CN=6488b4da-b545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:ea:0a:ea:97:b8:3c:73:4d:e8:93:8d:9b:
62:17:2a:ba:97:b1:bd:69:1e:72:82:4b:94:64:3b:
ca:e2:b0:c6:d0:88:dd:c4:bd:97:88:48:2c:c4:99:
46:5c:bc:34:28:40:fd:63:2e:54:56:76:e9:49:61:
7d:18:0e:0d:b8:37:76:27:02:09:c4:d3:23:9e:88:
40:a0:16:ee:d0:86:96:17:7d:a5:48:46:69:bf:38:
67:07:82:4d:de:7b:04:52:93:97:4d:65:25:a2:f1:
62:0c:4e:5a:76:9b:c0:0e:2b:9c:bd:6e:e3:80:78:
a2:80:26:c9:d3:33:08:62:f0:35:d8:3b:7a:dd:6c:
70:65:68:3d:c1:6e:a8:9e:74:2d:f1:d4:24:0f:bf:
89:49:3b:96:a2:7a:9f:25:d5:1e:26:e4:e7:89:07:
45:35:8b:d9:aa:71:aa:ca:33:15:67:05:56:12:c0:
5a:8b:d3:4c:f6:a6:9e:f8:50:5f:dd:9a:fb:f3:a9:
d3:1c:f3:96:4c:88:a3:6f:26:c3:a5:3b:34:2b:4f:
df:35:12:9d:0c:55:c2:61:c2:59:09:e8:1b:f6:a3:
87:c3:a9:e3:07:60:d8:e7:b2:9b:df:70:4d:69:5e:
df:77:b3:fb:83:41:aa:47:3e:31:a8:7a:0e:d0:37:
c1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BF:B6:14:F7:B0:17:C5:C0:BE:5E:60:BB:75:E0:D4:B5:F0:67:51
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D3736B140A1711EEBC2D9C154AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.46.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:f2:9a:1d:ba:22:6f:9f:9b:13:56:36:70:26:5c:c8:c5:0f:
34:94:b4:12:7d:dc:e1:69:9f:f5:5a:a2:53:e6:0a:32:1d:82:
10:a3:1e:76:eb:56:d2:bf:30:02:bf:78:d0:79:c1:52:d6:c3:
c1:c2:41:9b:29:27:b7:d0:89:c8:d0:8c:25:f0:ce:c3:09:cf:
57:9d:75:69:a2:02:38:3c:e6:ef:4c:af:f6:2a:c0:50:5a:ab:
fe:98:1d:f5:02:12:b4:58:43:e1:71:52:28:ce:bc:73:62:09:
93:39:47:01:b5:99:62:98:42:e8:81:70:ed:25:bc:65:6a:48:
32:81:e6:0c:29:01:0d:9d:88:05:92:1c:70:5a:17:01:65:42:
a1:52:ab:3b:90:b2:7a:16:e8:72:72:a0:06:ea:ee:46:49:e5:
54:06:d0:2c:a6:81:71:d5:61:71:74:0f:4a:f0:d9:ca:7b:21:
ba:ab:90:1f:32:25:94:9a:f5:56:d6:56:f4:42:eb:7b:0c:29:
4a:18:5f:f3:0e:c5:bd:a0:c0:de:f0:ad:86:20:6f:52:9c:05:
68:ec:a3:eb:76:a3:86:60:d8:b6:cc:66:e3:33:a4:70:e5:2c:
c8:ad:c3:31:80:88:b9:b4:49:8c:f9:66:2b:0e:39:d0:8e:fe:
0f:c3:36:90
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICD08wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA2MTMxODI2MjlaFw0yNTA2MTQxODI2MjlaMBgxFjAU
BgNVBAMTDTY0ODhiNGRhLWI1NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDG3OoK6pe4PHNN6JONm2IXKrqXsb1pHnKCS5RkO8risMbQiN3EvZeISCzE
mUZcvDQoQP1jLlRWdulJYX0YDg24N3YnAgnE0yOeiECgFu7QhpYXfaVIRmm/OGcH
gk3eewRSk5dNZSWi8WIMTlp2m8AOK5y9buOAeKKAJsnTMwhi8DXYO3rdbHBlaD3B
bqiedC3x1CQPv4lJO5aiep8l1R4m5OeJB0U1i9mqcarKMxVnBVYSwFqL00z2pp74
UF/dmvvzqdMc85ZMiKNvJsOlOzQrT981Ep0MVcJhwlkJ6Bv2o4fDqeMHYNjnspvf
cE1pXt93s/uDQapHPjGoeg7QN8FfAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUur+2
FPewF8XAvl5gu3Xg1LXwZ1EwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0QzNzM2QjE0MEExNzExRUVCQzJEOUMxNTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEC4wDQYJKoZIhvcNAQEL
BQADggEBAMzymh26Im+fmxNWNnAmXMjFDzSUtBJ93OFpn/VaolPmCjIdghCjHnbr
VtK/MAK/eNB5wVLWw8HCQZspJ7fQicjQjCXwzsMJz1eddWmiAjg85u9Mr/YqwFBa
q/6YHfUCErRYQ+FxUijOvHNiCZM5RwG1mWKYQuiBcO0lvGVqSDKB5gwpAQ2diAWS
HHBaFwFlQqFSqzuQsnoW6HJyoAbq7kZJ5VQG0CymgXHVYXF0D0rw2cp7IbqrkB8y
JZSa9VbWVvRC63sMKUoYX/MOxb2gwN7wrYYgb1KcBWjso+t2o4Zg2LbMZuMzpHDl
LMitwzGAiLm0SYz5ZisOOdCO/g/DNpA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org