Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E0D8F3261B3511EEA04693854AD9E6FC.roa
File: E0D8F3261B3511EEA04693854AD9E6FC.roa (raw, json)
Hash identifier: WxUZDKJbG7WpQikbe2CFrfs1te0oOyLKH8/h424lQ9w=
Subject key identifier: D0:99:A5:2A:20:5E:2C:2C:5F:08:E8:42:62:A8:19:65:7F:7D:ED:1A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1043
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E0D8F3261B3511EEA04693854AD9E6FC.roa
Signing time: Wed 05 Jul 2023 13:14:31 +0000
ROA not before: Wed 05 Jul 2023 13:14:28 +0000
ROA not after: Tue 15 Jul 2025 13:14:28 +0000
asID: 834
IP address blocks: 154.16.101.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4163 (0x1043)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 5 13:14:28 2023 GMT
Not After : Jul 15 13:14:28 2025 GMT
Subject: CN=64a56cb7-5bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cf:3b:5a:35:30:63:56:2c:7a:88:52:1e:e4:
a9:6e:0c:e3:d4:a5:c1:54:dd:7d:f7:c9:af:fb:3b:
e0:70:06:c3:b7:93:6d:69:ba:80:f8:2c:f8:3f:fd:
37:0d:28:46:03:89:ee:32:de:31:3b:11:41:e1:c5:
f9:62:37:f4:fc:2e:33:a9:5b:e3:3f:f8:96:39:db:
13:bf:94:93:f8:93:5e:fe:ff:f6:af:67:a6:5d:9e:
18:c4:06:6b:a5:58:e9:4d:60:51:a3:bb:6f:28:a5:
84:bd:ab:2d:42:38:2a:24:82:78:97:f6:12:70:be:
91:cd:22:cd:0e:c3:93:76:ad:fa:bf:5c:a4:c0:d1:
83:12:96:b4:71:08:c4:b5:ee:84:fd:23:ea:f3:cd:
d8:30:8a:e2:bc:7f:d7:b8:6b:ca:85:50:b3:d0:be:
56:58:2d:15:2d:81:7e:6c:ab:02:1f:c4:16:a3:4b:
89:2e:67:b2:0a:66:4e:b4:39:8c:19:74:2a:23:a0:
97:7d:4b:94:ec:32:71:ca:39:7b:59:c1:86:a1:d5:
f8:9e:e0:1e:a3:71:d1:7e:14:b1:0f:f0:9c:bb:b9:
06:01:9b:a4:e2:55:4c:9d:18:ff:5a:5f:e1:88:8d:
0f:14:fd:bb:b5:6c:ac:7e:74:b9:7e:56:bf:2a:b8:
fa:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:99:A5:2A:20:5E:2C:2C:5F:08:E8:42:62:A8:19:65:7F:7D:ED:1A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E0D8F3261B3511EEA04693854AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.101.0/24
Signature Algorithm: sha256WithRSAEncryption
76:0e:65:b7:33:a6:e6:a1:87:22:c6:32:76:0a:91:8e:17:29:
40:d4:5e:49:29:4f:38:a5:76:44:97:0f:72:ad:94:ab:fa:be:
ec:29:9e:74:40:74:e0:28:f2:e9:13:1b:b2:f5:fd:8b:a1:cc:
6f:a8:d6:6f:05:75:e8:fc:d2:5c:c3:9f:2c:b3:c0:3a:0d:71:
09:bf:ff:0b:6c:8a:1d:9e:e1:36:47:28:ba:d5:9f:e8:a1:c9:
20:93:52:2e:8e:80:6d:0f:38:65:d9:06:85:3a:72:b5:48:65:
a1:86:6f:ef:49:f2:e2:76:46:e4:3f:d9:71:27:63:e6:b9:79:
4a:33:ca:c7:6d:20:c8:d2:f3:13:75:75:dd:14:59:be:b8:eb:
70:3b:d0:94:90:f0:9a:39:90:13:46:6d:dc:0e:38:29:06:b9:
56:46:ce:ac:54:a8:e7:93:39:71:e2:90:73:40:5e:97:52:ab:
6d:41:5c:75:5f:bb:a0:0f:5d:8a:24:1e:6f:04:31:61:c6:6a:
a0:1d:d1:0a:f3:4b:3c:60:df:53:c0:27:ba:3a:f9:68:bb:13:
84:ac:f6:58:b1:22:fd:be:72:ba:05:0a:96:4e:34:88:60:51:
49:ae:41:f3:a3:db:25:69:43:26:c4:91:02:de:71:85:f1:80:
db:3f:1d:b8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEEMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA3MDUxMzE0MjhaFw0yNTA3MTUxMzE0MjhaMBgxFjAU
BgNVBAMTDTY0YTU2Y2I3LTViZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCmzztaNTBjVix6iFIe5KluDOPUpcFU3X33ya/7O+BwBsO3k21puoD4LPg/
/TcNKEYDie4y3jE7EUHhxfliN/T8LjOpW+M/+JY52xO/lJP4k17+//avZ6ZdnhjE
BmulWOlNYFGju28opYS9qy1COCokgniX9hJwvpHNIs0Ow5N2rfq/XKTA0YMSlrRx
CMS17oT9I+rzzdgwiuK8f9e4a8qFULPQvlZYLRUtgX5sqwIfxBajS4kuZ7IKZk60
OYwZdCojoJd9S5TsMnHKOXtZwYah1fie4B6jcdF+FLEP8Jy7uQYBm6TiVUydGP9a
X+GIjQ8U/bu1bKx+dLl+Vr8quPqvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU0Jml
KiBeLCxfCOhCYqgZZX997RowHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0UwRDhGMzI2MUIzNTExRUVBMDQ2OTM4NTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEGUwDQYJKoZIhvcNAQEL
BQADggEBAHYOZbczpuahhyLGMnYKkY4XKUDUXkkpTzildkSXD3KtlKv6vuwpnnRA
dOAo8ukTG7L1/YuhzG+o1m8Fdej80lzDnyyzwDoNcQm//wtsih2e4TZHKLrVn+ih
ySCTUi6OgG0POGXZBoU6crVIZaGGb+9J8uJ2RuQ/2XEnY+a5eUozysdtIMjS8xN1
dd0UWb6463A70JSQ8Jo5kBNGbdwOOCkGuVZGzqxUqOeTOXHikHNAXpdSq21BXHVf
u6APXYokHm8EMWHGaqAd0QrzSzxg31PAJ7o6+Wi7E4Ss9lixIv2+croFCpZONIhg
UUmuQfOj2yVpQybEkQLecYXxgNs/Hbg=
-----END CERTIFICATE-----
Generated at Mon Aug 14 14:17:43 2023 by rpki-client on console-ams.rpki-client.org