Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D57BDC24B2DD11EEABB183B4775412E6.roa
File: D57BDC24B2DD11EEABB183B4775412E6.roa (raw, json)
Hash identifier: u/FacmxD6wayf0QKlyrP1nvno4QMF0RyVTsuSO8lVrs=
Subject key identifier: 3C:16:2E:28:98:E7:56:42:88:B2:DC:D6:FF:D4:33:10:0C:0D:28:B5
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 144C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D57BDC24B2DD11EEABB183B4775412E6.roa
Signing time: Sun 14 Jan 2024 13:07:13 +0000
ROA not before: Sun 14 Jan 2024 13:07:10 +0000
ROA not after: Sat 17 Jan 2026 13:07:10 +0000
asID: 834
IP address blocks: 154.16.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 06:53:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5196 (0x144c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 14 13:07:10 2024 GMT
Not After : Jan 17 13:07:10 2026 GMT
Subject: CN=65a3dc81-2b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ef:b9:32:9c:a5:6e:12:bd:9d:58:06:c3:e7:
77:54:be:c6:39:1c:f4:f6:5f:07:ab:14:74:d3:2f:
cb:ab:3f:95:4e:51:0f:e3:ac:df:6b:25:31:6b:ce:
19:38:8f:86:b1:7e:8a:47:3f:df:96:48:aa:e0:6d:
8d:c2:56:ea:e8:42:f4:90:48:3b:94:69:ef:31:0a:
dd:6b:e1:4b:ff:90:bd:7e:76:fa:e0:a4:82:1b:94:
f3:df:0b:ef:3a:40:52:7d:90:42:02:86:43:e1:ae:
cb:3c:94:6a:77:e2:83:9b:f1:fc:f4:5a:ba:bd:8c:
b2:8c:e5:04:63:4f:32:22:2c:7e:19:ff:8d:31:48:
e1:9d:c9:b9:f3:2a:3d:23:69:fc:71:9b:c2:5d:43:
81:95:e6:37:95:27:39:26:c2:ca:6a:55:8b:7d:3e:
51:6e:94:8c:cf:6c:08:cc:40:90:20:e0:3d:f6:24:
73:17:bf:7f:57:aa:72:ff:10:7b:39:94:ae:c8:42:
b4:b0:42:57:c3:ed:aa:68:eb:cc:21:58:39:ac:82:
ee:7e:49:c9:20:d8:ba:9b:62:37:c6:f9:0b:0e:3a:
c7:34:cb:16:72:ca:9b:6d:04:15:b1:c3:d5:45:15:
7b:02:73:1f:37:99:f6:32:6a:f1:66:e1:a3:18:36:
6a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:16:2E:28:98:E7:56:42:88:B2:DC:D6:FF:D4:33:10:0C:0D:28:B5
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D57BDC24B2DD11EEABB183B4775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.32.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:a7:bd:45:40:f5:05:73:de:91:de:6b:4a:93:87:0a:cc:83:
df:1e:30:91:fa:6e:65:80:ac:ac:35:da:a4:12:ae:73:fe:a2:
e0:cf:36:ec:f7:bd:25:4d:88:da:5e:9e:99:f2:7e:b2:40:85:
67:ad:ec:f1:41:cf:39:ee:e0:42:3d:58:2b:b8:9b:2d:64:c7:
0f:c8:f0:a9:4b:d6:11:99:08:9b:a9:0e:df:ce:3e:43:a8:e1:
7d:18:ee:36:4d:69:0a:46:7a:91:e9:60:b9:96:5b:ce:e3:0a:
58:43:59:cc:24:b3:26:50:cf:bd:c1:21:b0:e5:f0:12:7c:03:
dd:5a:12:73:16:1d:e4:ee:f2:cb:d7:67:83:7d:9e:23:75:3d:
18:df:01:01:b6:e3:fa:8a:63:ee:2f:0f:8f:81:c2:9d:51:b3:
c8:d7:1b:42:4a:66:56:21:ee:4d:43:21:2b:06:4f:29:0c:4f:
7e:7b:e4:e5:9e:bb:88:a2:94:8f:74:07:8f:76:b6:cc:0b:3f:
d0:77:81:b6:69:a5:51:6b:ed:9a:05:b0:b2:b7:c8:9a:98:47:
e1:27:9d:f3:cc:a6:87:79:72:0d:2e:d2:a6:ef:cb:f9:a7:9e:
8b:10:a3:66:12:f2:8d:1e:5e:25:59:16:9a:db:73:67:37:85:
f5:32:9e:bd
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFEwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNDAxMTQxMzA3MTBaFw0yNjAxMTcxMzA3MTBaMBgxFjAU
BgNVBAMTDTY1YTNkYzgxLTJiMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDx77kynKVuEr2dWAbD53dUvsY5HPT2XwerFHTTL8urP5VOUQ/jrN9rJTFr
zhk4j4axfopHP9+WSKrgbY3CVuroQvSQSDuUae8xCt1r4Uv/kL1+dvrgpIIblPPf
C+86QFJ9kEIChkPhrss8lGp34oOb8fz0Wrq9jLKM5QRjTzIiLH4Z/40xSOGdybnz
Kj0jafxxm8JdQ4GV5jeVJzkmwspqVYt9PlFulIzPbAjMQJAg4D32JHMXv39XqnL/
EHs5lK7IQrSwQlfD7apo68whWDmsgu5+Sckg2LqbYjfG+QsOOsc0yxZyypttBBWx
w9VFFXsCcx83mfYyavFm4aMYNmp9AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUPBYu
KJjnVkKIstzW/9QzEAwNKLUwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0Q1N0JEQzI0QjJERDExRUVBQkIxODNCNDc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaECAwDQYJKoZIhvcNAQEL
BQADggEBAKCnvUVA9QVz3pHea0qThwrMg98eMJH6bmWArKw12qQSrnP+ouDPNuz3
vSVNiNpenpnyfrJAhWet7PFBzznu4EI9WCu4my1kxw/I8KlL1hGZCJupDt/OPkOo
4X0Y7jZNaQpGepHpYLmWW87jClhDWcwksyZQz73BIbDl8BJ8A91aEnMWHeTu8svX
Z4N9niN1PRjfAQG24/qKY+4vD4+Bwp1Rs8jXG0JKZlYh7k1DISsGTykMT3575OWe
u4iilI90B492tswLP9B3gbZppVFr7ZoFsLK3yJqYR+EnnfPMpod5cg0u0qbvy/mn
nosQo2YS8o0eXiVZFprbc2c3hfUynr0=
-----END CERTIFICATE-----
Generated at Mon Jan 15 11:27:25 2024 by rpki-client on console-fra.rpki-client.org