Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/2C7C7F3A846E11EFA4B5D8A3762E951A.roa
File: 2C7C7F3A846E11EFA4B5D8A3762E951A.roa (raw, json)
Hash identifier: /nSCp2qbltiVfBOh11OniRog1zb7RQvo1kB9B27WGQU=
Subject key identifier: 01:51:3C:CF:9A:6F:04:E2:02:16:B6:70:72:CC:35:88:94:35:FA:25
Certificate issuer: /CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
Certificate serial: 081A
Authority key identifier: 7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/2C7C7F3A846E11EFA4B5D8A3762E951A.roa
Signing time: Mon 07 Oct 2024 05:37:00 +0000
ROA not before: Mon 07 Oct 2024 05:36:56 +0000
ROA not after: Sun 07 Oct 2029 05:36:56 +0000
asID: 327804
IP address blocks: 154.68.160.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 08 Oct 2024 05:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2074 (0x81a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
Validity
Not Before: Oct 7 05:36:56 2024 GMT
Not After : Oct 7 05:36:56 2029 GMT
Subject: CN=6703737c-2741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a0:e0:f9:e7:2b:33:cc:30:a1:ed:ef:58:bf:
e6:50:5c:b1:5d:41:96:6c:d6:b3:c7:66:87:fa:1b:
f3:9b:88:71:5b:04:e3:ac:8a:55:12:9c:2e:25:e9:
e9:09:12:cc:cf:be:09:d5:9e:e5:0b:c7:5d:55:3c:
86:16:95:32:31:3a:c0:14:c0:95:6b:3a:ba:a8:75:
ef:8d:36:79:a1:1b:d8:3c:50:76:74:53:48:83:4e:
41:42:95:b4:30:64:66:af:55:d0:d5:89:77:72:08:
0a:e2:e5:56:16:80:24:05:3c:b4:dc:d9:87:71:b6:
91:48:8a:8e:a5:e9:65:93:b6:f7:aa:13:e7:d0:fe:
63:1a:0e:24:a3:e5:4d:2a:2f:1a:d9:2d:da:a3:38:
5f:4c:d6:1f:aa:1b:41:a7:09:a6:98:0f:61:98:b5:
5d:54:3c:bc:ee:aa:b6:d0:a0:99:93:c4:67:72:3f:
3f:b1:64:ff:2b:48:80:ba:4c:7d:2d:55:b9:d0:c0:
0f:6e:6a:9d:e7:3d:f5:d1:50:d6:6a:26:8f:cc:f6:
a3:95:87:23:83:68:7c:50:f0:71:ad:a9:df:9c:23:
ce:54:49:94:dd:98:2a:05:bc:f7:7e:21:4e:31:e6:
ab:10:ee:ab:bb:fe:d3:23:c2:ab:9f:8c:eb:dc:26:
f0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:51:3C:CF:9A:6F:04:E2:02:16:B6:70:72:CC:35:88:94:35:FA:25
X509v3 Authority Key Identifier:
keyid:7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/2C7C7F3A846E11EFA4B5D8A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.68.160.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:65:1d:ca:92:b8:91:2c:d7:06:29:31:6f:b1:69:7b:4f:b3:
0c:14:9a:e9:06:7b:b8:7b:2b:1f:ba:e9:b3:0b:41:66:5a:e6:
ed:56:a3:70:7d:a8:4d:ec:26:40:91:6b:25:01:28:d5:12:bf:
ec:b0:1b:15:9b:0f:7b:0c:a1:f7:9e:e0:5b:78:f5:72:da:85:
0d:a6:fb:4a:e8:8f:3b:13:cb:16:ad:f5:c6:d7:d0:df:d6:b1:
ee:f6:6c:9c:28:21:77:b1:a9:b2:7f:ed:02:3e:01:fb:02:7a:
02:5d:0e:f6:64:ba:17:ec:66:d7:ed:61:2f:3a:34:98:1f:5e:
ff:9e:29:16:0e:41:6c:80:66:58:fc:0d:60:ed:8d:5e:45:3f:
f6:a1:a6:30:c8:7d:4c:45:40:c3:2c:a0:db:ea:c1:54:f5:0c:
9c:ab:14:a0:ef:41:62:31:3b:bb:55:02:b3:f5:10:72:d3:b0:
53:4f:7e:49:63:0b:9c:c6:bc:5b:af:ab:59:4a:16:c1:4e:a5:
a8:5b:3c:84:72:db:e5:ae:1f:a7:de:35:a3:c0:5b:89:23:06:
ef:3b:89:7a:f3:d9:38:e1:a7:c5:6a:33:52:68:4c:dd:61:3c:
72:6a:ce:f4:bd:a3:2e:cc:57:3f:bf:cd:e2:a0:26:27:b7:ac:
1e:37:c4:44
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCBowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzgzNzFBRjExMC8GA1UEBRMoN0I5NjVCNjRDM0U3MjRCOTNGQzAwQjE4NkUxNUUz
NUNFRDUzNURDNzAeFw0yNDEwMDcwNTM2NTZaFw0yOTEwMDcwNTM2NTZaMBgxFjAU
BgNVBAMTDTY3MDM3MzdjLTI3NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDaoOD55yszzDCh7e9Yv+ZQXLFdQZZs1rPHZof6G/ObiHFbBOOsilUSnC4l
6ekJEszPvgnVnuULx11VPIYWlTIxOsAUwJVrOrqode+NNnmhG9g8UHZ0U0iDTkFC
lbQwZGavVdDViXdyCAri5VYWgCQFPLTc2YdxtpFIio6l6WWTtveqE+fQ/mMaDiSj
5U0qLxrZLdqjOF9M1h+qG0GnCaaYD2GYtV1UPLzuqrbQoJmTxGdyPz+xZP8rSIC6
TH0tVbnQwA9uap3nPfXRUNZqJo/M9qOVhyODaHxQ8HGtqd+cI85USZTdmCoFvPd+
IU4x5qsQ7qu7/tMjwqufjOvcJvBdAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUAVE8
z5pvBOICFrZwcsw1iJQ1+iUwHwYDVR0jBBgwFoAUe5ZbZMPnJLk/wAsYbhXjXO1T
XccwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM4MzcxL0VDMEFFODc0N0FGQTExRTk4OEEzQzMzQ0Y4QUVBMjI4L2U1WmJa
TVBuSkxrX3dBc1liaFhqWE8xVFhjYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2U1WmJaTVBuSkxrX3dBc1liaFhqWE8xVFhjYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM4MzcxL0VDMEFFODc0N0FGQTExRTk4OEEzQzMzQ0Y4
QUVBMjI4LzJDN0M3RjNBODQ2RTExRUZBNEI1RDhBMzc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKaRKAwDQYJKoZIhvcNAQEL
BQADggEBALVlHcqSuJEs1wYpMW+xaXtPswwUmukGe7h7Kx+66bMLQWZa5u1Wo3B9
qE3sJkCRayUBKNUSv+ywGxWbD3sMofee4Ft49XLahQ2m+0rojzsTyxat9cbX0N/W
se72bJwoIXexqbJ/7QI+AfsCegJdDvZkuhfsZtftYS86NJgfXv+eKRYOQWyAZlj8
DWDtjV5FP/ahpjDIfUxFQMMsoNvqwVT1DJyrFKDvQWIxO7tVArP1EHLTsFNPfklj
C5zGvFuvq1lKFsFOpahbPIRy2+WuH6feNaPAW4kjBu87iXrz2Tjhp8VqM1JoTN1h
PHJqzvS9oy7MVz+/zeKgJie3rB43xEQ=
-----END CERTIFICATE-----
Generated at Tue Oct 8 08:22:50 2024 by rpki-client on console-fra.rpki-client.org