Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DB7A204CFDF011ED9C22C5504AD9E6FC.roa
File: DB7A204CFDF011ED9C22C5504AD9E6FC.roa (raw, json)
Hash identifier: l3W5711rJu4ICP2jh8gdsEtA3yOBOnEcEq1nCkONYs8=
Subject key identifier: 25:75:6F:AC:23:C8:29:16:27:90:FC:B6:DB:12:F1:F7:5E:30:E7:46
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0DF2
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DB7A204CFDF011ED9C22C5504AD9E6FC.roa
Signing time: Mon 29 May 2023 07:17:23 +0000
ROA not before: Mon 29 May 2023 07:17:19 +0000
ROA not after: Wed 28 May 2025 07:17:19 +0000
asID: 398465
IP address blocks: 154.16.86.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3570 (0xdf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 29 07:17:19 2023 GMT
Not After : May 28 07:17:19 2025 GMT
Subject: CN=64745183-3b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:81:16:fa:74:36:5b:9d:aa:c6:60:2a:3a:92:
aa:30:05:f5:40:4c:55:f9:9d:84:6c:8d:19:b2:ca:
e2:0e:5f:80:1c:77:92:3e:af:44:9f:51:8d:02:d2:
93:53:94:72:bf:cb:f8:11:2b:34:84:0a:2f:99:bb:
29:ae:20:32:63:2c:98:9a:c5:79:1e:cb:9c:f3:bf:
0b:f1:b5:d4:ad:73:17:dd:4a:23:6a:d1:3b:3a:94:
cd:81:76:a7:f7:0b:f8:3d:6a:72:21:b4:05:34:e9:
ff:12:ec:dd:a6:c2:2b:ab:77:76:f8:bc:04:c7:ee:
20:ef:0d:86:98:6d:85:9d:a7:3b:5c:37:23:cd:bf:
18:47:24:57:6b:d8:26:b6:85:9f:98:91:d5:d4:2f:
89:38:21:bc:27:91:1b:31:cf:c3:4e:aa:1b:29:46:
e8:68:5d:18:52:b8:61:33:7a:3b:1a:e7:55:e7:66:
5f:e3:e7:b9:03:4e:6e:1a:24:b2:4f:80:e8:3b:33:
46:e8:8f:7c:a2:dc:08:6e:40:97:33:5a:19:cc:ae:
5d:e4:fe:e7:b3:cf:12:49:a3:01:29:4a:60:ba:3b:
eb:33:bc:2b:f9:3e:a5:74:b3:4b:dd:52:0a:00:3b:
57:4c:56:7f:4b:3b:c3:0c:54:7e:5b:e7:a8:d6:61:
8e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:75:6F:AC:23:C8:29:16:27:90:FC:B6:DB:12:F1:F7:5E:30:E7:46
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DB7A204CFDF011ED9C22C5504AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.86.0/24
Signature Algorithm: sha256WithRSAEncryption
96:ea:ae:36:00:77:dd:1b:71:68:5c:7b:d4:ee:58:ec:ce:27:
5e:32:81:b3:04:8f:1b:e3:18:c3:85:a6:1e:b1:31:fe:3e:ae:
65:ba:f2:f8:e7:fd:90:80:1e:17:d0:4c:7d:a6:85:41:30:56:
75:60:fb:6a:1f:fa:30:5c:e7:ea:a4:37:16:22:3b:2f:91:8e:
0d:9e:54:ef:38:86:a6:ca:0e:d0:40:44:f5:7f:f8:ee:bc:62:
12:01:93:03:fa:5f:47:29:c8:f6:c7:61:e4:62:fa:36:bf:89:
29:bc:6d:37:84:3c:15:43:1c:d3:c3:84:7f:f0:b9:37:1c:bf:
f3:07:51:b7:22:30:1d:3c:ce:03:50:8e:03:14:a7:71:13:62:
82:b4:bd:90:6f:b1:e1:c3:11:75:67:48:7d:d0:9b:68:aa:cc:
3d:13:a0:a7:1e:c0:13:af:2a:cb:7e:a9:ee:a9:98:20:85:8e:
2c:33:a5:51:bc:e8:21:13:b6:31:e0:af:96:02:66:ab:27:b5:
cd:df:bf:cd:6d:01:49:69:63:62:c9:e4:49:32:07:09:18:90:
8f:3e:f0:3d:2a:60:18:b9:32:ca:8a:54:d3:54:f4:da:c2:d9:
9e:17:c9:62:cb:d0:10:c6:3e:1f:ce:c7:d1:fa:79:cb:45:b7:
17:03:7a:d5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDfIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA1MjkwNzE3MTlaFw0yNTA1MjgwNzE3MTlaMBgxFjAU
BgNVBAMTDTY0NzQ1MTgzLTNiMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCogRb6dDZbnarGYCo6kqowBfVATFX5nYRsjRmyyuIOX4Acd5I+r0SfUY0C
0pNTlHK/y/gRKzSECi+ZuymuIDJjLJiaxXkey5zzvwvxtdStcxfdSiNq0Ts6lM2B
dqf3C/g9anIhtAU06f8S7N2mwiurd3b4vATH7iDvDYaYbYWdpztcNyPNvxhHJFdr
2Ca2hZ+YkdXUL4k4IbwnkRsxz8NOqhspRuhoXRhSuGEzejsa51XnZl/j57kDTm4a
JLJPgOg7M0boj3yi3AhuQJczWhnMrl3k/uezzxJJowEpSmC6O+szvCv5PqV0s0vd
UgoAO1dMVn9LO8MMVH5b56jWYY6TAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUJXVv
rCPIKRYnkPy22xLx914w50YwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0RCN0EyMDRDRkRGMDExRUQ5QzIyQzU1MDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEFYwDQYJKoZIhvcNAQEL
BQADggEBAJbqrjYAd90bcWhce9TuWOzOJ14ygbMEjxvjGMOFph6xMf4+rmW68vjn
/ZCAHhfQTH2mhUEwVnVg+2of+jBc5+qkNxYiOy+Rjg2eVO84hqbKDtBARPV/+O68
YhIBkwP6X0cpyPbHYeRi+ja/iSm8bTeEPBVDHNPDhH/wuTccv/MHUbciMB08zgNQ
jgMUp3ETYoK0vZBvseHDEXVnSH3Qm2iqzD0ToKcewBOvKst+qe6pmCCFjiwzpVG8
6CETtjHgr5YCZqsntc3fv81tAUlpY2LJ5EkyBwkYkI8+8D0qYBi5MsqKVNNU9NrC
2Z4XyWLL0BDGPh/Ox9H6ectFtxcDetU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org