Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EE2AE8A409D911ED9BC0A9F0F1222468.roa
File: EE2AE8A409D911ED9BC0A9F0F1222468.roa (raw, json)
Hash identifier: thc+5hg043x7WBQztllrSmM5HCxekPxlVT32wkgnRNc=
Subject key identifier: 65:64:51:94:47:B1:E0:4D:96:74:91:AA:89:45:EA:8E:63:1B:F4:AD
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 08F5
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EE2AE8A409D911ED9BC0A9F0F1222468.roa
Signing time: Fri 22 Jul 2022 16:18:33 +0000
ROA not before: Fri 22 Jul 2022 16:18:28 +0000
ROA not after: Mon 22 Jul 2024 16:18:28 +0000
asID: 212238
IP address blocks: 154.16.145.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2293 (0x8f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 22 16:18:28 2022 GMT
Not After : Jul 22 16:18:28 2024 GMT
Subject: CN=62dacdd9-1e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:26:80:c3:b6:71:1c:b2:0f:3b:48:f4:e5:b0:
d8:4a:2f:b3:0d:17:54:05:ef:67:71:c1:2f:15:22:
4b:e9:90:11:56:e4:f5:65:58:d5:70:63:7b:c3:10:
8e:36:a3:6b:fe:f1:a2:4d:94:02:eb:e7:ef:6e:db:
99:23:e9:5f:ba:ea:15:cd:06:fb:ca:62:92:6c:49:
62:54:cf:4f:fc:a8:5e:8b:12:22:9c:56:1d:6c:32:
e9:02:7a:96:2f:5a:8a:75:3f:e9:a1:84:f9:d9:ae:
3e:44:82:29:a2:af:9f:5a:34:61:56:1c:48:ae:1b:
90:57:97:84:fe:d6:4b:dd:33:da:08:e3:8a:b5:8a:
71:c7:0c:c2:b5:fa:13:3c:17:49:01:da:a7:ac:e7:
81:ab:fa:ec:e7:86:cf:09:aa:c8:ee:8f:61:64:8e:
c0:26:d3:e1:3d:0e:19:1b:c3:d1:98:99:6f:7d:08:
11:5b:5b:e5:29:68:38:1e:be:e3:ca:26:ce:20:b5:
58:ba:0b:3e:e6:7e:2c:7b:90:ba:9d:61:18:00:21:
88:2d:10:a3:8b:5c:8b:ff:43:f9:d7:3e:f3:62:45:
c8:ea:04:8e:56:8c:50:17:fa:72:e1:81:b8:6a:89:
37:e3:84:16:2c:59:7c:01:8d:ed:f5:2c:c9:17:c4:
32:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:64:51:94:47:B1:E0:4D:96:74:91:AA:89:45:EA:8E:63:1B:F4:AD
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EE2AE8A409D911ED9BC0A9F0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.145.0/24
Signature Algorithm: sha256WithRSAEncryption
26:df:84:27:f4:e8:3c:84:ee:58:1b:fb:f6:87:8b:15:27:c3:
fc:e0:a6:0d:9e:1e:2f:cb:c6:01:83:43:47:97:77:23:87:46:
b5:fb:79:d0:bf:ab:95:28:9a:0e:3f:0d:f4:da:27:f0:1b:d9:
6b:85:2b:eb:89:ff:08:f8:84:9c:45:68:08:37:f7:f9:36:3e:
66:1c:70:7a:af:c4:fc:73:ec:20:26:10:a0:c1:d1:ec:05:70:
11:bb:0d:7d:07:27:58:ff:62:f2:16:17:e4:5b:66:88:64:30:
ad:f6:94:3d:cb:28:16:97:04:53:8f:02:cc:31:df:d9:c9:e4:
82:b6:fe:31:a5:46:d1:7b:fc:28:0c:3d:4a:c6:58:fc:b4:bb:
11:e8:24:e9:46:0b:74:84:90:b2:23:f7:26:87:26:77:8a:8a:
b3:c4:4e:4b:5c:6a:b2:69:7e:b1:74:33:97:b3:7c:67:46:c4:
ce:6a:9c:78:52:4c:e5:7b:c3:1b:68:43:b0:d3:02:be:f1:cb:
ce:fb:a9:ce:5e:98:75:7a:90:7b:a6:0a:2a:51:11:99:53:26:
5e:3b:28:6f:02:83:a5:42:0f:eb:35:54:6f:b6:15:28:90:50:
dd:c1:1f:6d:c4:9d:fe:b9:3f:f1:2e:09:5c:a6:09:0f:f3:86:
1d:9d:d9:17
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCPUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMjA3MjIxNjE4MjhaFw0yNDA3MjIxNjE4MjhaMBgxFjAU
BgNVBAMMDTYyZGFjZGQ5LTFlOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3JoDDtnEcsg87SPTlsNhKL7MNF1QF72dxwS8VIkvpkBFW5PVlWNVwY3vD
EI42o2v+8aJNlALr5+9u25kj6V+66hXNBvvKYpJsSWJUz0/8qF6LEiKcVh1sMukC
epYvWop1P+mhhPnZrj5Egimir59aNGFWHEiuG5BXl4T+1kvdM9oI44q1inHHDMK1
+hM8F0kB2qes54Gr+uznhs8Jqsjuj2FkjsAm0+E9Dhkbw9GYmW99CBFbW+UpaDge
vuPKJs4gtVi6Cz7mfix7kLqdYRgAIYgtEKOLXIv/Q/nXPvNiRcjqBI5WjFAX+nLh
gbhqiTfjhBYsWXwBje31LMkXxDKHAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUZWRR
lEex4E2WdJGqiUXqjmMb9K0wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0VFMkFFOEE0MDlEOTExRUQ5QkMwQTlGMEYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEJEwDQYJKoZIhvcNAQEL
BQADggEBACbfhCf06DyE7lgb+/aHixUnw/zgpg2eHi/LxgGDQ0eXdyOHRrX7edC/
q5Uomg4/DfTaJ/Ab2WuFK+uJ/wj4hJxFaAg39/k2PmYccHqvxPxz7CAmEKDB0ewF
cBG7DX0HJ1j/YvIWF+RbZohkMK32lD3LKBaXBFOPAswx39nJ5IK2/jGlRtF7/CgM
PUrGWPy0uxHoJOlGC3SEkLIj9yaHJneKirPETktcarJpfrF0M5ezfGdGxM5qnHhS
TOV7wxtoQ7DTAr7xy877qc5emHV6kHumCipREZlTJl47KG8Cg6VCD+s1VG+2FSiQ
UN3BH23Enf65P/EuCVymCQ/zhh2d2Rc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org