Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D453C9D4116011EEAFB3EC314AD9E6FC.roa
File: D453C9D4116011EEAFB3EC314AD9E6FC.roa (raw, json)
Hash identifier: iYBVXA/IYXEAgVx5akIvwk0Uwj89LLyjzcbw3XT3eq8=
Subject key identifier: F6:94:40:84:C5:98:0C:EB:D3:A4:49:09:14:6B:CF:CC:62:36:03:99
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0FF3
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D453C9D4116011EEAFB3EC314AD9E6FC.roa
Signing time: Fri 23 Jun 2023 00:56:47 +0000
ROA not before: Fri 23 Jun 2023 00:00:44 +0000
ROA not after: Tue 17 Jun 2025 00:00:44 +0000
asID: 834
IP address blocks: 154.16.52.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4083 (0xff3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 23 00:00:44 2023 GMT
Not After : Jun 17 00:00:44 2025 GMT
Subject: CN=6494edcf-f44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e4:80:88:b2:91:2f:69:80:4f:38:69:e5:2f:
6c:a7:1f:6f:e6:40:4a:3d:e4:da:ec:28:dd:c5:4e:
98:a8:5c:b1:73:a0:d7:95:8c:b9:d2:82:ae:1d:f5:
3f:d6:50:59:4f:86:c9:8f:6f:fb:8d:89:5d:69:24:
6e:a5:18:57:8e:94:0a:28:17:38:fa:2e:7e:eb:69:
d6:9b:0f:1c:57:51:3a:18:36:8b:8a:10:b9:60:a4:
dd:29:92:6c:4b:b0:8e:2a:32:ee:40:75:09:0d:5e:
fd:b8:4c:16:e3:d3:8a:ce:83:34:a7:dd:2f:a5:2b:
f7:1b:5b:03:f4:02:f6:81:f9:24:6c:68:72:c4:51:
83:ba:41:80:5c:eb:26:f3:9b:43:a5:f1:35:5b:4c:
df:28:6c:76:16:e6:2f:e4:be:81:74:d3:6d:ed:4a:
5d:90:b5:65:02:42:88:3b:96:78:1a:24:53:bd:55:
bd:b1:a8:31:cd:a2:ad:9a:50:30:02:ce:75:cc:3c:
63:34:c6:c9:86:89:38:6a:24:eb:0e:2d:f1:a7:e1:
98:8a:b2:9e:18:c4:e2:89:46:73:86:66:63:13:e2:
30:6e:75:30:d7:fd:f2:4f:b4:40:24:a4:44:3b:06:
71:4f:9f:d2:68:24:9e:5c:75:88:4b:d7:ff:c4:da:
ba:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:94:40:84:C5:98:0C:EB:D3:A4:49:09:14:6B:CF:CC:62:36:03:99
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D453C9D4116011EEAFB3EC314AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.52.0/24
Signature Algorithm: sha256WithRSAEncryption
af:a6:4e:8c:d0:0c:54:b5:c5:4a:dc:e3:e1:7e:9a:a1:b1:cc:
bf:a4:4b:6c:ac:c1:fe:5b:f1:0f:48:39:3a:78:14:c0:9d:41:
ef:24:38:43:49:c2:dc:a0:b3:44:2f:f3:f5:71:94:a7:06:c6:
24:4b:b0:c5:de:7d:1c:6a:6c:b3:c4:52:11:82:0e:ba:2a:d9:
b0:cc:9a:7e:1a:b8:01:30:f8:66:3f:b4:40:26:e4:3f:0b:50:
a6:e4:43:d8:62:41:6f:95:35:14:89:58:56:88:51:44:74:3d:
ad:04:df:d3:ce:ed:dd:9c:f7:9f:21:5c:7e:55:5b:64:87:d4:
f7:96:54:8d:69:7d:a4:6a:1f:96:2b:22:c5:fe:08:c7:50:2a:
b0:8d:96:90:35:1e:e6:1a:b8:26:73:a5:82:5f:f8:53:da:47:
f0:a3:70:9f:db:73:7e:1f:64:65:4b:83:09:5b:2a:9c:c3:6c:
6c:1a:69:c1:5a:c6:b9:0d:98:22:8e:16:5c:ac:28:95:71:4a:
a7:21:c9:d2:52:0a:dd:7d:2b:85:98:cd:23:2e:b3:96:7d:da:
53:07:4d:96:3a:9c:5d:fd:9b:f8:2c:0a:d8:83:19:81:47:c2:
44:15:df:44:dd:cf:43:59:39:10:6d:24:f1:70:4a:81:e8:b3:
bf:14:7b:0f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICD/MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA2MjMwMDAwNDRaFw0yNTA2MTcwMDAwNDRaMBgxFjAU
BgNVBAMTDTY0OTRlZGNmLWY0NGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDD5ICIspEvaYBPOGnlL2ynH2/mQEo95NrsKN3FTpioXLFzoNeVjLnSgq4d
9T/WUFlPhsmPb/uNiV1pJG6lGFeOlAooFzj6Ln7radabDxxXUToYNouKELlgpN0p
kmxLsI4qMu5AdQkNXv24TBbj04rOgzSn3S+lK/cbWwP0AvaB+SRsaHLEUYO6QYBc
6ybzm0Ol8TVbTN8obHYW5i/kvoF0023tSl2QtWUCQog7lngaJFO9Vb2xqDHNoq2a
UDACznXMPGM0xsmGiThqJOsOLfGn4ZiKsp4YxOKJRnOGZmMT4jBudTDX/fJPtEAk
pEQ7BnFPn9JoJJ5cdYhL1//E2rqRAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU9pRA
hMWYDOvTpEkJFGvPzGI2A5kwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0Q0NTNDOUQ0MTE2MDExRUVBRkIzRUMzMTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEDQwDQYJKoZIhvcNAQEL
BQADggEBAK+mTozQDFS1xUrc4+F+mqGxzL+kS2yswf5b8Q9IOTp4FMCdQe8kOENJ
wtygs0Qv8/VxlKcGxiRLsMXefRxqbLPEUhGCDroq2bDMmn4auAEw+GY/tEAm5D8L
UKbkQ9hiQW+VNRSJWFaIUUR0Pa0E39PO7d2c958hXH5VW2SH1PeWVI1pfaRqH5Yr
IsX+CMdQKrCNlpA1HuYauCZzpYJf+FPaR/CjcJ/bc34fZGVLgwlbKpzDbGwaacFa
xrkNmCKOFlysKJVxSqchydJSCt19K4WYzSMus5Z92lMHTZY6nF39m/gsCtiDGYFH
wkQV30Tdz0NZORBtJPFwSoHos78Uew8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org