Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EC9A30A20FD311EEB83679814AD9E6FC.roa
File: EC9A30A20FD311EEB83679814AD9E6FC.roa (raw, json)
Hash identifier: +IS4IYIqAtCiqhvAa3LFlkCP+pklEIJqJmajy8qmQsE=
Subject key identifier: 6E:6E:2D:1F:F3:97:D4:36:9C:4C:23:B7:36:AB:1B:34:3C:05:A5:8D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0FD8
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EC9A30A20FD311EEB83679814AD9E6FC.roa
Signing time: Wed 21 Jun 2023 01:35:38 +0000
ROA not before: Wed 21 Jun 2023 01:35:34 +0000
ROA not after: Wed 12 Jun 2024 01:35:34 +0000
asID: 834
IP address blocks: 154.16.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4056 (0xfd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 21 01:35:34 2023 GMT
Not After : Jun 12 01:35:34 2024 GMT
Subject: CN=649253ea-e0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d6:ab:10:99:1e:98:7c:b1:07:15:5c:d2:3c:
0b:82:65:c4:b4:50:cd:f5:8a:4c:f1:0c:c9:df:fa:
f4:bb:b5:ee:fc:6e:1f:b2:0f:44:4b:ec:0d:ba:73:
21:32:22:3d:f4:17:1d:de:27:98:db:02:0e:2d:84:
a7:54:53:5c:21:14:8f:02:c1:ec:25:8e:28:e6:b8:
15:67:12:9b:3f:d9:9e:e3:dc:bc:09:03:f7:b3:6c:
d5:65:1a:8b:7e:7b:83:57:49:53:b2:a8:a0:62:f9:
58:93:34:37:ad:e4:54:35:1c:d3:3f:7f:63:f8:cb:
e6:d3:45:11:d8:11:17:c9:81:94:de:16:b4:1a:01:
f9:ba:8e:fa:71:b1:2e:ba:07:cd:a1:fe:3e:f3:36:
c9:dc:30:ce:d2:7b:7f:ac:0b:04:48:da:81:c2:f3:
42:4f:f6:48:c2:fd:fb:d3:96:21:6c:36:12:09:c7:
d5:8d:d7:12:ba:b0:df:27:b2:32:99:17:76:48:a4:
d5:b8:06:61:ad:fd:95:ce:a8:16:52:dd:84:97:85:
0b:72:4e:19:5b:fa:c4:68:3f:ac:32:d7:c2:1d:f4:
82:97:96:74:81:71:cd:b5:d8:fc:d2:08:84:80:81:
e6:19:fd:71:ab:f2:b6:9b:c7:8c:62:3d:5a:64:20:
f8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:6E:2D:1F:F3:97:D4:36:9C:4C:23:B7:36:AB:1B:34:3C:05:A5:8D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EC9A30A20FD311EEB83679814AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.61.0/24
Signature Algorithm: sha256WithRSAEncryption
03:02:59:15:81:63:48:76:d0:9c:20:08:d5:06:57:24:14:b5:
d7:dc:62:23:f1:d9:86:51:ff:06:06:ce:8d:93:a0:3b:9a:3d:
bc:35:32:b9:59:af:60:5e:2f:a9:18:1b:db:48:d1:4b:92:c2:
98:45:b1:56:f2:d6:4e:27:e0:ca:50:96:da:53:f2:f4:6a:1a:
b6:e6:a9:a6:a2:d6:6a:80:17:93:5d:ff:89:87:56:b6:cf:5b:
1d:6d:c0:4a:94:e3:84:e9:59:5d:c3:33:89:07:cd:24:f8:f6:
79:b4:6a:7d:05:ef:a9:90:08:eb:dc:12:42:df:cb:b5:e6:24:
4f:28:6e:15:39:0c:86:4d:9c:cf:84:56:bf:6f:5c:47:89:dc:
8f:ea:f7:6f:ef:a9:9b:81:1b:41:41:59:64:e7:86:01:d8:68:
e1:f7:44:74:00:20:3d:ea:72:0b:6c:53:5a:f1:bb:bb:96:d9:
cd:88:0d:25:f1:ca:52:89:fc:57:cb:b6:01:ec:cd:df:ca:34:
0a:5d:90:72:69:08:22:94:85:42:88:19:92:b8:ba:e9:aa:16:
96:23:e3:df:a5:ff:96:c7:5e:2f:7a:cc:4d:0c:88:47:1f:7b:
69:b8:e4:d3:d2:6e:47:89:47:ad:a6:1b:44:1f:e8:3f:4e:4a:
62:9d:b7:c4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICD9gwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA2MjEwMTM1MzRaFw0yNDA2MTIwMTM1MzRaMBgxFjAU
BgNVBAMTDTY0OTI1M2VhLWUwZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC11qsQmR6YfLEHFVzSPAuCZcS0UM31ikzxDMnf+vS7te78bh+yD0RL7A26
cyEyIj30Fx3eJ5jbAg4thKdUU1whFI8CwewljijmuBVnEps/2Z7j3LwJA/ezbNVl
Got+e4NXSVOyqKBi+ViTNDet5FQ1HNM/f2P4y+bTRRHYERfJgZTeFrQaAfm6jvpx
sS66B82h/j7zNsncMM7Se3+sCwRI2oHC80JP9kjC/fvTliFsNhIJx9WN1xK6sN8n
sjKZF3ZIpNW4BmGt/ZXOqBZS3YSXhQtyThlb+sRoP6wy18Id9IKXlnSBcc212PzS
CISAgeYZ/XGr8rabx4xiPVpkIPgVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUbm4t
H/OX1DacTCO3NqsbNDwFpY0wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0VDOUEzMEEyMEZEMzExRUVCODM2Nzk4MTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaED0wDQYJKoZIhvcNAQEL
BQADggEBAAMCWRWBY0h20JwgCNUGVyQUtdfcYiPx2YZR/wYGzo2ToDuaPbw1MrlZ
r2BeL6kYG9tI0UuSwphFsVby1k4n4MpQltpT8vRqGrbmqaai1mqAF5Nd/4mHVrbP
Wx1twEqU44TpWV3DM4kHzST49nm0an0F76mQCOvcEkLfy7XmJE8obhU5DIZNnM+E
Vr9vXEeJ3I/q92/vqZuBG0FBWWTnhgHYaOH3RHQAID3qcgtsU1rxu7uW2c2IDSXx
ylKJ/FfLtgHszd/KNApdkHJpCCKUhUKIGZK4uumqFpYj49+l/5bHXi96zE0MiEcf
e2m45NPSbkeJR62mG0Qf6D9OSmKdt8Q=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org