Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E4E9D36A209211EEAF29B1644AD9E6FC.roa
File: E4E9D36A209211EEAF29B1644AD9E6FC.roa (raw, json)
Hash identifier: Sf1+r7ig0mBJK1IroJrOb64M0LdiwDnymJ85JFBwKLE=
Subject key identifier: 73:CC:F8:84:69:A2:E7:BC:D2:A6:F2:DF:79:6C:B7:8F:2F:76:5D:BF
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1075
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E4E9D36A209211EEAF29B1644AD9E6FC.roa
Signing time: Wed 12 Jul 2023 09:02:57 +0000
ROA not before: Wed 12 Jul 2023 09:02:53 +0000
ROA not after: Fri 12 Jul 2024 09:02:53 +0000
asID: 208287
IP address blocks: 154.16.28.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4213 (0x1075)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 12 09:02:53 2023 GMT
Not After : Jul 12 09:02:53 2024 GMT
Subject: CN=64ae6c41-897b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:07:1d:d7:aa:3d:b3:68:3f:f5:ed:65:fb:bc:
9b:fe:d1:c7:e4:1e:e5:b5:a9:0f:f9:02:6c:c1:92:
36:b5:d7:d9:49:33:09:d5:9b:70:ec:e4:bd:16:28:
96:2f:a3:ee:3d:2d:e8:d9:5d:04:35:21:dd:fd:fb:
17:eb:a3:eb:aa:6a:08:7c:88:56:6b:10:0c:97:d8:
c6:14:2c:d2:95:85:30:61:f9:d2:2c:18:e2:fb:28:
1f:8c:4d:e1:14:79:a9:6d:08:41:6e:ad:80:74:3b:
38:92:a6:35:8f:e3:92:3a:62:6d:c8:10:a1:f0:10:
e4:0b:82:ae:ad:24:c6:84:68:31:7f:c4:c2:6d:f5:
ba:21:25:63:56:5b:f4:52:3d:ff:41:62:40:b9:7b:
d0:92:42:f4:62:3f:58:f0:45:67:ab:e2:d7:c2:d3:
ea:47:74:6c:e4:f6:13:03:c4:e7:0b:26:09:a7:2a:
4b:d9:8e:db:ab:b0:93:f0:e1:b2:59:42:10:1e:09:
be:f9:d6:a0:61:9a:89:7f:c1:df:eb:fe:f0:41:99:
7d:dd:fd:aa:4b:e6:fb:dd:d8:11:59:13:6b:19:f9:
1a:ee:af:fe:3a:a2:6c:71:f6:79:01:51:7e:fe:6f:
d8:80:9d:e5:d3:a3:84:b2:9f:86:18:8b:fe:98:b0:
bc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CC:F8:84:69:A2:E7:BC:D2:A6:F2:DF:79:6C:B7:8F:2F:76:5D:BF
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E4E9D36A209211EEAF29B1644AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.28.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:90:0a:ec:5e:80:da:73:e2:22:f2:66:7c:25:18:37:b1:d8:
c5:f8:d9:83:2e:c8:1a:d3:4f:38:47:d6:3a:2f:f3:44:2f:87:
43:41:f7:e8:e0:a8:f5:b8:bd:85:ef:97:97:8c:36:60:83:4b:
21:bf:90:bd:0e:dd:8c:93:c6:21:4d:58:bf:7c:34:48:a4:2c:
df:52:e4:58:dc:53:3e:96:9a:e1:83:1b:41:fa:ee:f8:26:c9:
df:11:23:5d:de:f0:fc:70:3d:c5:c7:94:fa:b1:a6:ad:37:5b:
70:80:9d:8c:9a:a3:69:7f:5a:7b:29:9c:dd:fa:8f:b1:18:a0:
cb:c3:97:d2:56:3f:75:d0:c3:a7:85:7c:88:00:bb:fd:20:4b:
5e:52:03:71:07:21:13:1e:0f:36:d1:4d:83:8b:bc:48:e2:1e:
21:22:bc:ad:e3:9c:83:54:0f:7e:70:0d:84:2a:ca:78:87:4b:
14:7c:7f:93:5c:dd:89:74:5c:27:05:cf:77:fc:5a:23:cc:1a:
fd:3a:e9:84:c5:d6:c6:fc:19:4d:18:a1:8e:a1:6f:74:cf:1b:
14:37:cb:90:b4:02:4d:67:48:6f:58:56:e2:bd:25:3e:2e:72:
f5:50:f0:d3:34:f2:3f:93:09:05:f4:28:4f:69:c8:d6:ed:4d:
7d:9a:ef:a3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEHUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA3MTIwOTAyNTNaFw0yNDA3MTIwOTAyNTNaMBgxFjAU
BgNVBAMTDTY0YWU2YzQxLTg5N2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7Bx3Xqj2zaD/17WX7vJv+0cfkHuW1qQ/5AmzBkja119lJMwnVm3Ds5L0W
KJYvo+49LejZXQQ1Id39+xfro+uqagh8iFZrEAyX2MYULNKVhTBh+dIsGOL7KB+M
TeEUealtCEFurYB0OziSpjWP45I6Ym3IEKHwEOQLgq6tJMaEaDF/xMJt9bohJWNW
W/RSPf9BYkC5e9CSQvRiP1jwRWer4tfC0+pHdGzk9hMDxOcLJgmnKkvZjtursJPw
4bJZQhAeCb751qBhmol/wd/r/vBBmX3d/apL5vvd2BFZE2sZ+Rrur/46omxx9nkB
UX7+b9iAneXTo4Syn4YYi/6YsLyJAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUc8z4
hGmi57zSpvLfeWy3jy92Xb8wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0U0RTlEMzZBMjA5MjExRUVBRjI5QjE2NDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEBwwDQYJKoZIhvcNAQEL
BQADggEBAK6QCuxegNpz4iLyZnwlGDex2MX42YMuyBrTTzhH1jov80Qvh0NB9+jg
qPW4vYXvl5eMNmCDSyG/kL0O3YyTxiFNWL98NEikLN9S5FjcUz6WmuGDG0H67vgm
yd8RI13e8PxwPcXHlPqxpq03W3CAnYyao2l/WnspnN36j7EYoMvDl9JWP3XQw6eF
fIgAu/0gS15SA3EHIRMeDzbRTYOLvEjiHiEivK3jnINUD35wDYQqyniHSxR8f5Nc
3Yl0XCcFz3f8WiPMGv066YTF1sb8GU0YoY6hb3TPGxQ3y5C0Ak1nSG9YVuK9JT4u
cvVQ8NM08j+TCQX0KE9pyNbtTX2a76M=
-----END CERTIFICATE-----
Generated at Mon Aug 14 06:38:04 2023 by rpki-client on console-ams.rpki-client.org