Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E401C1560ABC11EE832613114AD9E6FC.roa
File: E401C1560ABC11EE832613114AD9E6FC.roa (raw, json)
Hash identifier: xBntWIaA0pJQH7VLSr8HYRQltONukve2RhHBg13zLYs=
Subject key identifier: 88:92:83:83:8C:FC:9C:20:7B:4E:D9:CA:F1:31:93:6D:94:4B:B7:88
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F61
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E401C1560ABC11EE832613114AD9E6FC.roa
Signing time: Wed 14 Jun 2023 14:08:09 +0000
ROA not before: Wed 14 Jun 2023 14:08:05 +0000
ROA not after: Wed 11 Jun 2025 14:08:05 +0000
asID: 140641
IP address blocks: 154.16.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3937 (0xf61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 14 14:08:05 2023 GMT
Not After : Jun 11 14:08:05 2025 GMT
Subject: CN=6489c9c9-865b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:d6:88:7e:68:cd:db:c1:de:fc:68:6c:3a:
65:8d:2d:2b:c1:e1:ec:17:8e:7b:d5:b3:f1:b3:ad:
cf:21:26:c0:ba:42:ca:ff:47:41:ca:2b:38:74:53:
16:ba:6a:34:92:c8:e1:59:3f:96:0a:eb:bb:86:da:
0a:65:61:e9:07:48:a2:c8:11:93:e9:3d:9b:65:6d:
2f:58:35:cd:87:af:87:af:24:ac:1d:c5:bd:f7:be:
d3:cd:40:1e:71:4d:67:db:b5:3d:37:88:a9:5e:83:
85:99:40:0a:e8:21:81:78:91:38:e7:9f:7e:13:21:
24:6e:11:5a:0b:e6:01:bf:15:a4:a2:ab:94:3d:0b:
f7:29:86:c8:db:20:71:0c:9d:83:da:dd:38:2a:44:
e2:7e:9c:64:a8:44:36:d1:b3:ba:1d:e1:17:e3:b8:
d4:b0:58:52:27:c4:0d:ee:06:27:23:dc:e4:51:7a:
e2:b5:de:d5:93:45:8a:43:9f:e0:af:8b:0c:de:82:
3a:d1:4e:e4:5d:e4:04:49:55:3d:c0:8e:30:1d:03:
33:d1:3b:c6:c3:17:73:0a:b4:15:33:53:93:38:7e:
94:53:53:bc:53:53:56:1a:96:1f:13:4c:b4:61:83:
9c:8f:04:54:56:eb:7f:aa:b3:ab:56:7c:b1:57:dc:
d6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:92:83:83:8C:FC:9C:20:7B:4E:D9:CA:F1:31:93:6D:94:4B:B7:88
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E401C1560ABC11EE832613114AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.50.0/24
Signature Algorithm: sha256WithRSAEncryption
71:1b:31:80:33:21:06:44:b8:8e:25:d5:5a:28:ea:31:5d:31:
59:cd:6e:5b:81:ce:d1:a6:cd:a8:f6:61:d9:13:7a:b6:dd:96:
29:8a:cc:f3:e4:62:c3:a0:79:52:0d:c5:be:cb:19:7d:2b:b2:
c3:d8:15:46:40:13:fb:28:a7:e0:de:cb:95:e4:5d:dd:42:cd:
ac:f6:ca:3e:b0:7e:a9:e6:a9:7c:1a:fd:f5:c7:f6:5d:32:9f:
3e:4c:1d:db:4d:9d:dd:28:56:ba:97:12:3a:8c:e0:ad:26:78:
32:ff:22:e5:10:f5:70:8d:17:33:ab:49:be:a8:a6:21:6d:e9:
12:3f:91:79:34:c1:77:4e:c3:bc:73:79:05:c1:c6:42:0f:72:
96:88:ce:f7:fd:ee:06:ec:0a:c1:9b:94:85:7d:81:1c:c4:f3:
1c:7e:c4:be:52:e6:6c:0e:41:f1:6e:b1:0b:81:a4:49:5e:bc:
4d:31:7c:75:bb:e8:1b:8d:f4:96:01:0a:ba:8d:ee:58:85:02:
d4:a7:5d:7b:ac:ce:57:74:99:cb:17:ef:1e:9e:09:b8:1a:80:
3d:6c:f1:2a:2a:94:61:af:e2:8b:0b:8b:3e:de:12:8b:bb:42:
10:41:d9:42:64:fa:09:55:23:4d:ec:c0:ea:ce:1e:25:18:51:
0a:62:24:74
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICD2EwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA2MTQxNDA4MDVaFw0yNTA2MTExNDA4MDVaMBgxFjAU
BgNVBAMTDTY0ODljOWM5LTg2NWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC17daIfmjN28He/GhsOmWNLSvB4ewXjnvVs/Gzrc8hJsC6Qsr/R0HKKzh0
Uxa6ajSSyOFZP5YK67uG2gplYekHSKLIEZPpPZtlbS9YNc2Hr4evJKwdxb33vtPN
QB5xTWfbtT03iKleg4WZQAroIYF4kTjnn34TISRuEVoL5gG/FaSiq5Q9C/cphsjb
IHEMnYPa3TgqROJ+nGSoRDbRs7od4RfjuNSwWFInxA3uBicj3ORReuK13tWTRYpD
n+CviwzegjrRTuRd5ARJVT3AjjAdAzPRO8bDF3MKtBUzU5M4fpRTU7xTU1Yalh8T
TLRhg5yPBFRW63+qs6tWfLFX3NaBAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUiJKD
g4z8nCB7TtnK8TGTbZRLt4gwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0U0MDFDMTU2MEFCQzExRUU4MzI2MTMxMTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEDIwDQYJKoZIhvcNAQEL
BQADggEBAHEbMYAzIQZEuI4l1Voo6jFdMVnNbluBztGmzaj2YdkTerbdlimKzPPk
YsOgeVINxb7LGX0rssPYFUZAE/sop+Dey5XkXd1Czaz2yj6wfqnmqXwa/fXH9l0y
nz5MHdtNnd0oVrqXEjqM4K0meDL/IuUQ9XCNFzOrSb6opiFt6RI/kXk0wXdOw7xz
eQXBxkIPcpaIzvf97gbsCsGblIV9gRzE8xx+xL5S5mwOQfFusQuBpElevE0xfHW7
6BuN9JYBCrqN7liFAtSnXXuszld0mcsX7x6eCbgagD1s8SoqlGGv4osLiz7eEou7
QhBB2UJk+glVI03swOrOHiUYUQpiJHQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org