Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D8ABF728F2EC11EDB38807574AD9E6FC.roa
File: D8ABF728F2EC11EDB38807574AD9E6FC.roa (raw, json)
Hash identifier: rnhtsxt4Dp2khIMZ/2kXesFuRSy4ZEg2fD/wyJHHYJw=
Subject key identifier: 70:98:BA:D8:FF:93:85:6F:B7:8D:45:E6:B5:55:6C:BD:7B:E2:08:9E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0DBA
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D8ABF728F2EC11EDB38807574AD9E6FC.roa
Signing time: Mon 15 May 2023 06:50:58 +0000
ROA not before: Mon 15 May 2023 06:50:54 +0000
ROA not after: Wed 14 May 2025 06:50:54 +0000
asID: 211826
IP address blocks: 154.16.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Sep 2023 06:18:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3514 (0xdba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 15 06:50:54 2023 GMT
Not After : May 14 06:50:54 2025 GMT
Subject: CN=6461d652-2784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cc:7e:7f:da:f9:d2:0e:7c:e9:77:c6:eb:21:
51:a4:c0:29:5a:cf:ce:5e:d8:81:a3:d2:0d:9b:95:
f6:ea:35:25:74:51:69:ca:7d:09:f5:03:a4:fe:46:
d2:9c:f6:4b:0a:10:e7:94:43:a5:de:0f:7a:0d:00:
1c:83:e7:bd:f7:cb:3d:ae:aa:ad:ee:00:92:40:08:
b8:77:75:97:08:e1:d3:17:4f:10:92:9f:1f:52:99:
24:94:8a:e8:e2:a1:33:d3:57:d0:59:8c:69:46:e9:
bb:86:b5:59:8e:31:e7:50:58:ef:12:37:36:61:5f:
49:3b:43:07:af:e2:b3:51:ea:7b:c3:84:5e:d0:0e:
27:da:6b:0e:b7:8c:44:e6:e9:a6:1e:71:99:32:6b:
03:e3:7d:52:a9:fc:94:17:77:f4:3f:af:e5:86:a4:
07:23:62:af:9a:8e:28:fa:2d:3e:db:79:52:64:95:
39:90:ad:f3:cf:7e:22:7a:ed:94:1c:52:c0:bb:68:
04:aa:c6:85:8d:56:32:98:3a:34:81:92:60:30:e6:
8e:66:24:9b:5b:19:5b:1a:da:ed:c9:a6:1f:f2:b4:
7b:82:84:6f:73:4b:b1:39:1c:47:09:e9:80:1e:c8:
3d:62:79:33:81:e2:42:23:6e:2f:af:05:f5:75:13:
94:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:98:BA:D8:FF:93:85:6F:B7:8D:45:E6:B5:55:6C:BD:7B:E2:08:9E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D8ABF728F2EC11EDB38807574AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.41.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:d4:60:ac:79:90:c8:71:0c:86:1e:2c:22:d8:ae:e3:1d:39:
58:11:fb:be:9a:db:65:32:ab:1f:a5:1a:ed:56:d2:80:d8:2b:
78:01:54:ba:a2:41:05:7f:03:41:b5:8b:39:a3:ad:d0:ad:e8:
86:f6:4e:ec:09:a4:02:d7:f2:37:ae:2c:35:b0:98:31:38:20:
07:27:7f:d5:fc:d4:56:86:0e:c4:76:58:13:a2:0c:4b:d7:ab:
97:7f:ac:c4:66:c7:11:75:d4:13:da:0a:f7:9d:2f:a1:58:41:
6f:1b:00:95:cb:00:eb:e2:a4:3d:d1:db:68:af:aa:13:83:ad:
1e:06:51:a4:04:0c:ff:c7:45:24:9f:b7:63:5f:5e:9f:c6:bc:
87:8b:40:d4:97:eb:4c:50:9e:13:02:3a:4f:1d:4d:f1:4e:33:
50:93:71:74:19:7b:7d:7a:b8:e0:52:b8:16:68:45:7e:8d:0e:
1d:44:e9:7e:48:4c:65:b2:b9:02:aa:bf:bd:05:52:3a:f6:8f:
18:ca:d5:8b:9b:a7:a2:b0:61:2c:a4:a1:1f:d8:c3:8c:36:1b:
86:12:c3:ba:27:7d:de:70:e9:aa:25:d3:14:0d:cc:43:87:ae:
02:6d:b4:15:09:ea:3f:f4:8d:0b:c4:a5:e4:67:c3:56:ac:c0:
38:e2:32:0e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDbowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA1MTUwNjUwNTRaFw0yNTA1MTQwNjUwNTRaMBgxFjAU
BgNVBAMTDTY0NjFkNjUyLTI3ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFzH5/2vnSDnzpd8brIVGkwClaz85e2IGj0g2blfbqNSV0UWnKfQn1A6T+
RtKc9ksKEOeUQ6XeD3oNAByD5733yz2uqq3uAJJACLh3dZcI4dMXTxCSnx9SmSSU
iujioTPTV9BZjGlG6buGtVmOMedQWO8SNzZhX0k7Qwev4rNR6nvDhF7QDifaaw63
jETm6aYecZkyawPjfVKp/JQXd/Q/r+WGpAcjYq+ajij6LT7beVJklTmQrfPPfiJ6
7ZQcUsC7aASqxoWNVjKYOjSBkmAw5o5mJJtbGVsa2u3Jph/ytHuChG9zS7E5HEcJ
6YAeyD1ieTOB4kIjbi+vBfV1E5R1AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUcJi6
2P+ThW+3jUXmtVVsvXviCJ4wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0Q4QUJGNzI4RjJFQzExRURCMzg4MDc1NzRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaECkwDQYJKoZIhvcNAQEL
BQADggEBAIzUYKx5kMhxDIYeLCLYruMdOVgR+76a22Uyqx+lGu1W0oDYK3gBVLqi
QQV/A0G1izmjrdCt6Ib2TuwJpALX8jeuLDWwmDE4IAcnf9X81FaGDsR2WBOiDEvX
q5d/rMRmxxF11BPaCvedL6FYQW8bAJXLAOvipD3R22ivqhODrR4GUaQEDP/HRSSf
t2NfXp/GvIeLQNSX60xQnhMCOk8dTfFOM1CTcXQZe316uOBSuBZoRX6NDh1E6X5I
TGWyuQKqv70FUjr2jxjK1Yubp6KwYSykoR/Yw4w2G4YSw7onfd5w6aol0xQNzEOH
rgJttBUJ6j/0jQvEpeRnw1aswDjiMg4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:27 2024 by rpki-client on console-fra.rpki-client.org