Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E6B4607A396111EDBF487DB3F1222468.roa
File: E6B4607A396111EDBF487DB3F1222468.roa (raw, json)
Hash identifier: oH5f/DigJ160QiPs6g4mbiATY1nNsl1CwYvMmr53LD4=
Subject key identifier: A5:22:0D:4E:D6:98:90:DF:4E:3E:A5:BB:DC:4F:A8:AB:42:A1:DE:92
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 09B0
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E6B4607A396111EDBF487DB3F1222468.roa
Signing time: Wed 21 Sep 2022 04:00:16 +0000
ROA not before: Wed 21 Sep 2022 04:00:12 +0000
ROA not after: Mon 23 Sep 2024 04:00:12 +0000
asID: 207326
IP address blocks: 154.16.189.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2480 (0x9b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 21 04:00:12 2022 GMT
Not After : Sep 23 04:00:12 2024 GMT
Subject: CN=632a8c50-7535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f5:20:ec:51:02:3b:d8:a8:c9:db:7d:af:37:
9c:23:a4:dc:3e:48:26:e7:83:8e:06:e5:76:e9:d1:
d5:3a:be:04:5b:db:f4:7e:17:96:36:dd:cb:bb:06:
a6:78:48:75:f3:c4:aa:9c:ab:dd:93:54:3a:f8:c3:
06:c6:80:94:db:af:6f:fa:49:a0:0f:76:d5:1a:8c:
69:ef:97:6d:7f:d6:df:6c:9e:b5:7e:12:f1:51:37:
dd:7a:3f:97:ad:53:9e:b7:45:81:75:04:07:51:c7:
cc:42:11:c8:36:a1:d5:65:07:9e:33:d4:52:f5:e9:
09:b7:a0:e7:55:e3:1e:0f:db:18:e7:39:98:cc:28:
94:e4:ce:bf:af:a5:1c:8c:39:7b:37:47:ab:a4:83:
88:42:34:21:77:bd:74:0b:8b:a6:7d:9b:d7:6e:c4:
9f:76:21:52:62:89:5c:50:92:e0:3a:ac:51:fa:5e:
41:27:89:27:e9:59:5b:68:7f:ef:f9:b1:86:37:d6:
b4:86:0d:87:1b:35:3f:e7:49:db:ef:6a:5a:80:08:
c2:bd:29:08:ef:f8:74:27:eb:7c:b6:2b:b9:a9:21:
b7:a4:73:c7:53:e7:7f:a3:46:9f:94:47:04:36:98:
fc:d8:55:83:37:9d:68:65:35:0f:97:91:ab:95:af:
96:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:22:0D:4E:D6:98:90:DF:4E:3E:A5:BB:DC:4F:A8:AB:42:A1:DE:92
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E6B4607A396111EDBF487DB3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.189.0/24
Signature Algorithm: sha256WithRSAEncryption
30:8c:3d:3e:d3:eb:2a:73:14:45:15:9b:54:fd:85:a3:4a:1e:
c9:aa:57:47:63:dc:ae:0a:83:81:88:f3:6c:23:fc:33:e3:cc:
11:25:5b:ba:ba:07:3c:53:87:81:a9:82:e0:66:3b:f9:ce:4d:
4a:e6:4e:be:85:74:da:b6:cf:53:ce:58:05:fe:f5:31:99:73:
d9:6d:21:79:d5:37:b4:a3:47:2d:94:c4:79:e5:1b:4a:c8:b8:
42:2c:bf:65:33:37:52:01:15:c1:f7:f3:5a:d5:e8:5a:57:84:
ce:fb:d5:4a:05:4d:d6:02:96:f9:7f:ab:26:f3:3d:d9:e6:90:
28:56:cf:4b:1b:29:62:f3:07:b4:c2:f5:b6:b9:58:fd:8c:99:
3d:0c:fe:6e:5f:3a:53:26:15:38:89:d2:20:50:6b:26:5c:e3:
e2:4b:13:9d:a7:76:19:68:64:d8:0f:60:84:99:46:ad:fa:d2:
00:d5:71:d0:36:d3:20:bf:cd:cc:af:1d:b5:23:b5:e7:dc:89:
75:9d:0c:cc:31:a3:3d:2c:15:1f:46:85:1e:8b:35:f7:c0:b1:
b6:80:a0:cb:93:b6:25:1b:dd:f5:a7:46:76:a5:ae:75:3e:0a:
80:c2:ed:56:5b:cb:8e:80:30:fe:70:f6:13:8f:68:95:d5:fa:
d4:a3:8e:4b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCbAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMjA5MjEwNDAwMTJaFw0yNDA5MjMwNDAwMTJaMBgxFjAU
BgNVBAMMDTYzMmE4YzUwLTc1MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/9SDsUQI72KjJ232vN5wjpNw+SCbng44G5Xbp0dU6vgRb2/R+F5Y23cu7
BqZ4SHXzxKqcq92TVDr4wwbGgJTbr2/6SaAPdtUajGnvl21/1t9snrV+EvFRN916
P5etU563RYF1BAdRx8xCEcg2odVlB54z1FL16Qm3oOdV4x4P2xjnOZjMKJTkzr+v
pRyMOXs3R6ukg4hCNCF3vXQLi6Z9m9duxJ92IVJiiVxQkuA6rFH6XkEniSfpWVto
f+/5sYY31rSGDYcbNT/nSdvvalqACMK9KQjv+HQn63y2K7mpIbekc8dT53+jRp+U
RwQ2mPzYVYM3nWhlNQ+XkauVr5YhAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUpSIN
TtaYkN9OPqW73E+oq0Kh3pIwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0U2QjQ2MDdBMzk2MTExRURCRjQ4N0RCM0YxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEL0wDQYJKoZIhvcNAQEL
BQADggEBADCMPT7T6ypzFEUVm1T9haNKHsmqV0dj3K4Kg4GI82wj/DPjzBElW7q6
BzxTh4GpguBmO/nOTUrmTr6FdNq2z1POWAX+9TGZc9ltIXnVN7SjRy2UxHnlG0rI
uEIsv2UzN1IBFcH381rV6FpXhM771UoFTdYClvl/qybzPdnmkChWz0sbKWLzB7TC
9ba5WP2MmT0M/m5fOlMmFTiJ0iBQayZc4+JLE52ndhloZNgPYISZRq360gDVcdA2
0yC/zcyvHbUjtefciXWdDMwxoz0sFR9GhR6LNffAsbaAoMuTtiUb3fWnRnalrnU+
CoDC7VZby46AMP5w9hOPaJXV+tSjjks=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org