Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D6158A9AA88E11ED819DB8ECF1222468.roa
File: D6158A9AA88E11ED819DB8ECF1222468.roa (raw, json)
Hash identifier: v0GJ/Q9vFdlOB0mJATWs8UU8pEpBcoDt5sdU1RHAJls=
Subject key identifier: 94:AE:37:83:C1:E2:E3:49:60:5A:36:23:33:A6:67:39:4D:8C:7B:46
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0BAF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D6158A9AA88E11ED819DB8ECF1222468.roa
Signing time: Thu 09 Feb 2023 15:31:35 +0000
ROA not before: Thu 09 Feb 2023 15:31:29 +0000
ROA not after: Sun 09 Feb 2025 15:31:29 +0000
asID: 49999
IP address blocks: 154.16.23.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2991 (0xbaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 9 15:31:29 2023 GMT
Not After : Feb 9 15:31:29 2025 GMT
Subject: CN=63e511d7-6215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:75:07:0c:64:b6:f4:21:6d:d3:13:ba:5b:79:
43:9d:29:e3:11:62:6c:03:e6:c0:75:5f:6f:72:4f:
ba:c9:69:1d:b1:d4:5f:4f:5f:cf:87:44:15:cc:dc:
61:27:8f:36:de:d0:6d:b4:de:5f:da:11:cb:22:a5:
dc:c6:bb:fc:0c:44:49:92:03:a0:de:b6:dc:b7:e8:
7d:72:2f:7f:ed:54:1b:49:28:6f:4f:bc:bf:ad:01:
cd:16:03:43:b4:59:1c:98:57:7b:7f:d5:f7:8c:d3:
06:d7:00:b3:84:1f:da:94:f0:f4:62:b9:11:57:e2:
72:ce:5b:78:da:dc:fa:98:84:63:95:52:f6:64:07:
93:56:7d:55:47:69:71:d6:c8:f4:c1:7b:34:12:a1:
8b:89:32:fd:d8:73:9e:f0:61:07:14:9b:d1:80:69:
a3:01:ba:07:46:f1:29:7f:f5:b1:7b:6c:49:cb:8c:
f5:c4:db:f8:02:c0:3a:cd:ba:7d:d4:a6:80:c7:5a:
7b:67:60:a6:a7:6e:6e:e4:7e:c5:b1:e7:24:65:3d:
a9:8a:c9:27:5a:8f:23:23:b1:eb:af:9e:6a:c8:84:
f4:11:c5:a7:92:2c:52:b3:bf:2e:ca:00:6a:4d:0c:
13:43:d2:fe:c0:9f:c6:25:72:ad:3f:b9:fc:3e:c2:
29:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AE:37:83:C1:E2:E3:49:60:5A:36:23:33:A6:67:39:4D:8C:7B:46
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D6158A9AA88E11ED819DB8ECF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.23.0/24
Signature Algorithm: sha256WithRSAEncryption
11:86:2d:cf:ea:d3:df:f7:11:4e:f7:9a:d9:e0:3c:f8:7b:ac:
2b:b3:28:0a:8d:cc:ff:62:e3:10:ed:ce:84:a6:9f:f3:1a:81:
97:40:ab:4a:41:ba:f2:59:96:86:4c:5f:08:6e:68:bc:da:9d:
01:ff:80:e0:8a:d4:53:7c:6d:61:44:cf:21:c3:1c:cf:fa:d0:
d3:71:18:4f:fb:9f:38:6e:1d:79:70:c9:e0:40:6c:f0:27:a5:
f2:b8:5a:81:da:37:f6:4b:1f:d2:1d:d6:9d:a6:f1:46:de:ca:
e8:3f:b1:89:b1:5f:9b:3e:cb:28:b4:77:59:f2:97:9d:08:ab:
af:51:47:78:3b:10:85:2b:8f:cd:67:86:38:c5:6e:88:a3:1e:
9c:76:65:93:a2:81:d2:da:ce:19:41:d3:9f:54:e2:e4:7d:aa:
08:fd:e8:c4:80:8d:18:bc:5e:de:c6:2c:e9:1e:74:92:62:65:
a1:c0:01:ab:61:6a:89:ea:6f:ad:8a:2f:6e:11:99:45:4b:1d:
e1:ff:f4:b0:f5:f5:f2:ac:3b:bc:6a:89:b3:6d:66:1c:ba:7b:
20:37:5c:19:98:ba:41:93:25:3c:66:81:5f:c3:30:06:f3:8f:
66:ff:91:46:ae:dd:1a:78:f7:7b:18:0f:ff:22:d6:d9:28:30:
c1:41:51:a1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICC68wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzAyMDkxNTMxMjlaFw0yNTAyMDkxNTMxMjlaMBgxFjAU
BgNVBAMMDTYzZTUxMWQ3LTYyMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKdQcMZLb0IW3TE7pbeUOdKeMRYmwD5sB1X29yT7rJaR2x1F9PX8+HRBXM
3GEnjzbe0G203l/aEcsipdzGu/wMREmSA6Detty36H1yL3/tVBtJKG9PvL+tAc0W
A0O0WRyYV3t/1feM0wbXALOEH9qU8PRiuRFX4nLOW3ja3PqYhGOVUvZkB5NWfVVH
aXHWyPTBezQSoYuJMv3Yc57wYQcUm9GAaaMBugdG8Sl/9bF7bEnLjPXE2/gCwDrN
un3UpoDHWntnYKanbm7kfsWx5yRlPamKySdajyMjseuvnmrIhPQRxaeSLFKzvy7K
AGpNDBND0v7An8Ylcq0/ufw+wimfAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUlK43
g8Hi40lgWjYjM6ZnOU2Me0YwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0Q2MTU4QTlBQTg4RTExRUQ4MTlEQjhFQ0YxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEBcwDQYJKoZIhvcNAQEL
BQADggEBABGGLc/q09/3EU73mtngPPh7rCuzKAqNzP9i4xDtzoSmn/MagZdAq0pB
uvJZloZMXwhuaLzanQH/gOCK1FN8bWFEzyHDHM/60NNxGE/7nzhuHXlwyeBAbPAn
pfK4WoHaN/ZLH9Id1p2m8Ubeyug/sYmxX5s+yyi0d1nyl50Iq69RR3g7EIUrj81n
hjjFboijHpx2ZZOigdLazhlB059U4uR9qgj96MSAjRi8Xt7GLOkedJJiZaHAAath
aonqb62KL24RmUVLHeH/9LD19fKsO7xqibNtZhy6eyA3XBmYukGTJTxmgV/DMAbz
j2b/kUau3Rp493sYD/8i1tkoMMFBUaE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org