Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F0A86D44412911EEBEC30B814AD9E6FC.roa
File: F0A86D44412911EEBEC30B814AD9E6FC.roa (raw, json)
Hash identifier: 8n4LYGkBr4X4uIhEXbaOWxqTcSGej1XwTInXWCPbWsg=
Subject key identifier: 31:00:80:D6:A0:72:73:03:86:A8:6C:BB:E1:45:48:1C:7B:87:60:86
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 11A7
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F0A86D44412911EEBEC30B814AD9E6FC.roa
Signing time: Tue 22 Aug 2023 20:24:48 +0000
ROA not before: Tue 22 Aug 2023 20:24:44 +0000
ROA not after: Fri 30 Aug 2024 20:24:44 +0000
asID: 20473
IP address blocks: 154.16.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 05:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4519 (0x11a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 22 20:24:44 2023 GMT
Not After : Aug 30 20:24:44 2024 GMT
Subject: CN=64e51990-e8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:a0:3b:0d:46:9a:b2:c4:ad:2d:67:4d:1f:
29:ba:34:5e:49:36:9d:4d:a3:41:55:79:af:1b:e6:
15:7b:27:7d:95:53:a3:25:d5:60:a5:d8:6c:ad:44:
3e:72:da:4a:a1:6b:de:7e:c4:18:9f:b1:4e:a4:cb:
20:c1:c8:d4:40:e8:e5:0e:45:c2:3f:d5:b3:e4:dd:
a3:b2:49:c7:97:c6:6e:da:a4:2d:44:ee:29:87:76:
8b:21:2c:26:65:74:9e:7e:49:d2:65:ed:44:cd:7d:
4f:97:d1:00:5c:f0:d4:0b:85:f2:82:e9:f2:6b:32:
ad:a2:f4:fb:2a:56:36:64:e1:d7:2c:bf:fa:ff:48:
6f:e7:d5:c2:5f:c3:6f:26:8d:ca:8f:d4:22:b5:e9:
20:79:47:e3:b9:2b:61:15:8f:9d:06:02:1c:b8:ea:
5d:3b:50:e9:e5:3d:e9:d7:91:45:b2:74:27:e3:99:
5c:50:0d:85:9d:10:29:38:bf:0a:cd:05:9b:90:8a:
8d:db:29:35:5f:04:6f:3f:cb:a0:ae:de:d1:79:1c:
7a:bc:f9:4c:1e:82:9f:56:bc:04:e3:4d:e7:74:69:
38:7f:2c:e3:a0:4c:17:72:85:d7:aa:2d:42:ab:50:
b9:d6:07:6c:cf:cc:e9:b2:49:96:2b:05:2b:cc:18:
4e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:00:80:D6:A0:72:73:03:86:A8:6C:BB:E1:45:48:1C:7B:87:60:86
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F0A86D44412911EEBEC30B814AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.10.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:29:bc:84:8c:b3:84:23:30:d7:3b:3c:94:b8:c4:ca:f7:e7:
92:e2:42:65:26:79:4c:fa:b9:28:99:9b:b1:81:7e:cb:5c:84:
d1:6a:95:01:01:bf:fc:70:23:c1:b0:a7:81:03:df:10:d2:fc:
35:44:8d:ba:26:54:4c:83:1e:2a:07:51:ff:d0:00:da:ce:ff:
b1:d8:a5:56:45:cd:af:d9:cb:95:f0:7e:a9:e2:2c:f2:6b:07:
07:6e:3c:39:db:39:15:7d:ab:be:9f:3b:3d:0a:c7:2c:d3:49:
32:b2:41:4f:b5:f0:59:da:2d:c8:43:1b:41:9f:0d:69:ef:0d:
b9:7f:bb:45:c7:96:a0:51:4d:10:5f:56:35:8a:09:7c:af:74:
fe:64:76:6d:35:98:99:6d:9d:40:6b:46:02:32:0a:d1:42:a5:
99:74:e8:da:81:6b:c4:01:0a:cf:45:ca:13:aa:99:d9:d8:94:
cf:9a:11:68:32:4e:b7:ef:b2:dd:76:79:46:e9:d3:47:42:81:
fc:2c:09:2c:69:fe:dd:b5:22:64:3c:85:3c:64:83:7e:ae:0d:
f3:02:e0:82:54:60:c9:03:b0:a2:f8:fd:b4:64:97:2c:67:95:
69:75:f6:7b:43:a5:72:d9:e8:0c:67:cb:86:0c:64:47:e8:e0:
b9:bf:7d:e1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEacwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA4MjIyMDI0NDRaFw0yNDA4MzAyMDI0NDRaMBgxFjAU
BgNVBAMTDTY0ZTUxOTkwLWU4YTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCxsqA7DUaassStLWdNHym6NF5JNp1No0FVea8b5hV7J32VU6Ml1WCl2Gyt
RD5y2kqha95+xBifsU6kyyDByNRA6OUORcI/1bPk3aOySceXxm7apC1E7imHdosh
LCZldJ5+SdJl7UTNfU+X0QBc8NQLhfKC6fJrMq2i9PsqVjZk4dcsv/r/SG/n1cJf
w28mjcqP1CK16SB5R+O5K2EVj50GAhy46l07UOnlPenXkUWydCfjmVxQDYWdECk4
vwrNBZuQio3bKTVfBG8/y6Cu3tF5HHq8+Uwegp9WvATjTed0aTh/LOOgTBdyhdeq
LUKrULnWB2zPzOmySZYrBSvMGE6VAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUMQCA
1qBycwOGqGy74UVIHHuHYIYwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0YwQTg2RDQ0NDEyOTExRUVCRUMzMEI4MTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEAowDQYJKoZIhvcNAQEL
BQADggEBAF8pvISMs4QjMNc7PJS4xMr355LiQmUmeUz6uSiZm7GBfstchNFqlQEB
v/xwI8Gwp4ED3xDS/DVEjbomVEyDHioHUf/QANrO/7HYpVZFza/Zy5XwfqniLPJr
BwduPDnbORV9q76fOz0KxyzTSTKyQU+18FnaLchDG0GfDWnvDbl/u0XHlqBRTRBf
VjWKCXyvdP5kdm01mJltnUBrRgIyCtFCpZl06NqBa8QBCs9FyhOqmdnYlM+aEWgy
Trfvst12eUbp00dCgfwsCSxp/t21ImQ8hTxkg36uDfMC4IJUYMkDsKL4/bRklyxn
lWl19ntDpXLZ6Axny4YMZEfo4Lm/feE=
-----END CERTIFICATE-----
Generated at Mon Jan 22 06:50:05 2024 by rpki-client on console-fra.rpki-client.org