Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D662F87A3AA611EEA9A944294AD9E6FC.roa
File: D662F87A3AA611EEA9A944294AD9E6FC.roa (raw, json)
Hash identifier: t42zF6TjfWbw/U1bNQDDga1RLtPcIn03fWA3Oe7zkq0=
Subject key identifier: EA:1E:56:E0:DF:86:16:AA:D6:94:27:98:D3:C0:81:70:E6:BA:20:57
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1159
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D662F87A3AA611EEA9A944294AD9E6FC.roa
Signing time: Mon 14 Aug 2023 13:31:13 +0000
ROA not before: Mon 14 Aug 2023 13:31:10 +0000
ROA not after: Wed 13 Aug 2025 13:31:10 +0000
asID: 398465
IP address blocks: 154.16.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4441 (0x1159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 14 13:31:10 2023 GMT
Not After : Aug 13 13:31:10 2025 GMT
Subject: CN=64da2ca1-7ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8f:54:05:8c:c7:9f:33:8d:07:11:79:0c:d2:
e8:95:3f:2d:f0:ec:03:46:ef:5f:ae:4e:01:73:dc:
b6:bf:9c:46:99:75:a4:b1:5b:82:51:33:95:10:64:
c7:3a:27:23:ed:62:c4:f2:7e:de:75:4e:89:f2:3b:
c7:03:e9:3a:d0:42:d7:f8:20:2c:e2:2f:ba:57:3f:
5b:31:22:a7:e3:77:fa:65:2f:44:00:2e:10:51:67:
96:a0:2c:7e:93:96:ef:9a:08:4d:7d:fb:4d:d5:0d:
a2:c6:53:0a:24:5b:06:53:28:af:55:1a:99:6b:24:
b4:c4:9f:72:a9:ed:6a:37:1a:98:84:08:40:b1:10:
51:91:f9:e8:7f:1e:e8:10:a0:39:e5:51:59:14:ed:
41:41:45:9a:59:9b:cc:d2:52:5f:78:c3:5e:65:20:
c6:a3:0e:24:9c:95:60:ea:06:77:b9:a5:fb:b5:f6:
bd:4d:4f:2f:e6:2e:ce:c9:2b:56:71:29:46:77:79:
d0:47:66:e4:01:bb:7b:f6:dc:66:70:ad:0d:7a:fb:
43:a3:eb:bb:ae:e7:e7:73:62:5b:3f:88:65:13:65:
ce:80:7c:56:20:d3:67:2f:cb:db:88:5e:3f:ff:3c:
17:a7:89:ac:16:74:a5:99:00:5e:d7:37:76:cf:23:
be:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1E:56:E0:DF:86:16:AA:D6:94:27:98:D3:C0:81:70:E6:BA:20:57
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D662F87A3AA611EEA9A944294AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.94.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:24:cd:aa:9f:9a:40:d4:37:75:92:5c:2e:af:dd:49:ec:83:
08:40:17:53:32:65:5a:7a:eb:8c:93:3f:10:05:6c:90:09:db:
8f:eb:95:4e:46:fd:ef:4d:c4:2e:ba:85:05:09:b6:53:63:67:
43:6f:46:66:e7:b7:15:6b:f9:85:c9:52:94:52:e2:73:74:2a:
bd:71:81:6e:3c:eb:3d:8d:aa:ac:cd:90:65:f7:c1:8b:68:fb:
ef:b3:c6:a8:67:62:6c:c0:d8:fd:4f:66:40:af:8b:19:82:98:
a3:48:8b:c1:05:49:2d:ba:6d:91:fa:93:d1:21:c0:77:47:ce:
77:e0:8e:44:b6:92:0f:2d:6f:d1:37:a9:32:73:19:e5:9e:05:
ca:57:2f:1c:6f:bd:b3:68:49:64:bd:82:e8:b8:71:1b:14:0b:
e7:0c:01:97:f3:df:0d:fe:e4:d3:28:39:91:39:41:20:31:9d:
c6:5f:56:d4:1d:90:b3:5b:c8:15:66:2d:0a:01:1d:af:68:d0:
fb:b6:57:9d:c4:9f:1e:fb:ae:04:61:7f:75:94:68:55:6e:57:
03:86:05:8d:1e:07:0e:3a:92:47:1a:a0:fd:3f:9f:8b:0e:f3:
d4:da:da:d6:11:60:3c:f1:b6:58:76:54:21:65:e3:75:23:e6:
0d:74:32:66
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEVkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA4MTQxMzMxMTBaFw0yNTA4MTMxMzMxMTBaMBgxFjAU
BgNVBAMTDTY0ZGEyY2ExLTdjZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGj1QFjMefM40HEXkM0uiVPy3w7ANG71+uTgFz3La/nEaZdaSxW4JRM5UQ
ZMc6JyPtYsTyft51TonyO8cD6TrQQtf4ICziL7pXP1sxIqfjd/plL0QALhBRZ5ag
LH6Tlu+aCE19+03VDaLGUwokWwZTKK9VGplrJLTEn3Kp7Wo3GpiECECxEFGR+eh/
HugQoDnlUVkU7UFBRZpZm8zSUl94w15lIMajDiSclWDqBne5pfu19r1NTy/mLs7J
K1ZxKUZ3edBHZuQBu3v23GZwrQ16+0Oj67uu5+dzYls/iGUTZc6AfFYg02cvy9uI
Xj//PBeniawWdKWZAF7XN3bPI76TAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU6h5W
4N+GFqrWlCeY08CBcOa6IFcwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0Q2NjJGODdBM0FBNjExRUVBOUE5NDQyOTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEF4wDQYJKoZIhvcNAQEL
BQADggEBAG4kzaqfmkDUN3WSXC6v3UnsgwhAF1MyZVp664yTPxAFbJAJ24/rlU5G
/e9NxC66hQUJtlNjZ0NvRmbntxVr+YXJUpRS4nN0Kr1xgW486z2NqqzNkGX3wYto
+++zxqhnYmzA2P1PZkCvixmCmKNIi8EFSS26bZH6k9EhwHdHznfgjkS2kg8tb9E3
qTJzGeWeBcpXLxxvvbNoSWS9gui4cRsUC+cMAZfz3w3+5NMoOZE5QSAxncZfVtQd
kLNbyBVmLQoBHa9o0Pu2V53Enx77rgRhf3WUaFVuVwOGBY0eBw46kkcaoP0/n4sO
89Ta2tYRYDzxtlh2VCFl43Uj5g10MmY=
-----END CERTIFICATE-----
Generated at Tue Aug 22 12:44:35 2023 by rpki-client on console-ams.rpki-client.org