Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/88FBB2BA3CCD11EE9A8202374AD9E6FC.roa
File: 88FBB2BA3CCD11EE9A8202374AD9E6FC.roa (raw, json)
Hash identifier: x51H+ZgnLeAAi3EkfQSCDvIGtPEmXwq8z6f/ooHPw/Q=
Subject key identifier: 5D:BE:73:A2:F2:7B:93:95:0C:5C:44:56:A8:F7:B1:98:F7:42:9C:8B
Certificate issuer: /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Certificate serial: 016C
Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/88FBB2BA3CCD11EE9A8202374AD9E6FC.roa
Signing time: Thu 17 Aug 2023 07:13:16 +0000
ROA not before: Thu 17 Aug 2023 07:13:13 +0000
ROA not after: Tue 17 Aug 2027 07:13:13 +0000
asID: 4809
IP address blocks: 154.72.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Dec 2023 05:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364 (0x16c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Validity
Not Before: Aug 17 07:13:13 2023 GMT
Not After : Aug 17 07:13:13 2027 GMT
Subject: CN=64ddc88c-9201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:53:c5:64:67:a9:d8:0f:cf:b8:68:36:00:f8:
2c:d8:63:72:20:27:68:df:0f:85:a8:6d:da:40:0c:
c3:51:83:06:18:7c:84:57:32:09:f8:0b:3e:57:7e:
c1:ad:a5:90:31:00:bd:4e:88:d3:7e:f9:6e:94:e6:
8f:eb:9c:36:4f:23:fd:f8:f1:6c:96:f7:9a:ea:ae:
41:ca:63:03:fb:ff:bc:91:4e:31:39:ff:ee:a8:61:
60:11:63:1c:c4:72:e5:6a:44:ab:99:d4:8f:d4:63:
e3:51:a8:34:d3:19:e9:07:25:4e:e7:f8:5a:f7:d3:
e2:99:8b:50:bd:93:0a:ac:be:3c:a3:01:09:ac:4d:
43:e6:20:44:07:f7:41:20:d5:1d:a1:e8:46:44:bc:
e3:6e:c2:57:01:88:c6:37:cc:ca:85:d5:c6:1a:3d:
12:08:c9:7e:a3:88:bb:17:f0:c6:0f:95:eb:cb:5a:
cb:1f:59:6b:5b:7a:99:32:f3:e1:f6:fe:5c:99:3f:
41:57:7b:05:1c:78:14:1a:8c:0e:21:d6:6b:dc:0e:
69:fd:3f:bf:99:5e:76:5f:b9:59:39:da:8b:b5:68:
72:47:61:9f:88:b0:44:0b:28:07:f2:00:e7:1f:5c:
54:56:c5:f2:20:c2:6b:85:75:ac:28:bd:0a:65:31:
9a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BE:73:A2:F2:7B:93:95:0C:5C:44:56:A8:F7:B1:98:F7:42:9C:8B
X509v3 Authority Key Identifier:
keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/88FBB2BA3CCD11EE9A8202374AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.72.40.0/24
Signature Algorithm: sha256WithRSAEncryption
20:11:08:bb:db:84:72:bb:70:34:5c:58:66:80:d4:ab:1f:66:
29:71:aa:43:46:66:79:12:a5:70:8d:de:81:d2:83:a5:0f:8b:
5e:89:b8:a7:5f:a5:30:74:d6:ad:19:d1:ec:d4:70:4e:c5:64:
e6:60:83:48:51:1d:1a:32:17:95:b3:6a:ad:55:b0:9e:4e:e0:
41:38:2c:02:64:9e:25:5a:52:f8:9f:f6:e7:6a:92:46:f3:14:
0a:50:c6:4e:9c:b1:3a:24:5a:25:a8:76:bc:92:01:f1:9d:df:
ce:96:0b:2d:d0:d0:02:a2:e8:f6:4b:06:f1:42:54:bb:2a:b0:
0d:b0:86:de:42:3e:6c:f1:57:a3:a5:de:2c:9a:6d:3c:8f:54:
36:5f:22:59:52:49:d7:a0:46:38:36:30:22:6d:bd:cd:ed:6c:
ef:08:55:50:9a:69:00:e7:48:bb:90:fb:4e:23:b5:b6:79:b5:
26:55:dc:43:2b:df:1d:e0:18:82:e8:d4:2b:47:a2:22:af:d5:
5a:0a:6e:ae:25:26:69:86:26:bd:c5:72:69:45:ab:9e:49:56:
9d:a3:be:c5:66:44:b8:c6:cc:3c:c1:c7:0b:81:89:7f:74:c1:
dc:27:a5:21:32:39:c2:d5:a6:27:6b:1b:c3:68:cd:b6:63:41:
95:81:f5:16
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
REI0OTJBRjExMC8GA1UEBRMoRjQzRTA2NjhFRjcyQkQ4N0ZBNTM2OEJFMkI2ODE1
QzBCQ0I0MDE0OTAeFw0yMzA4MTcwNzEzMTNaFw0yNzA4MTcwNzEzMTNaMBgxFjAU
BgNVBAMTDTY0ZGRjODhjLTkyMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQClU8VkZ6nYD8+4aDYA+CzYY3IgJ2jfD4WobdpADMNRgwYYfIRXMgn4Cz5X
fsGtpZAxAL1OiNN++W6U5o/rnDZPI/348WyW95rqrkHKYwP7/7yRTjE5/+6oYWAR
YxzEcuVqRKuZ1I/UY+NRqDTTGekHJU7n+Fr30+KZi1C9kwqsvjyjAQmsTUPmIEQH
90Eg1R2h6EZEvONuwlcBiMY3zMqF1cYaPRIIyX6jiLsX8MYPlevLWssfWWtbepky
8+H2/lyZP0FXewUceBQajA4h1mvcDmn9P7+ZXnZfuVk52ou1aHJHYZ+IsEQLKAfy
AOcfXFRWxfIgwmuFdawovQplMZpJAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUXb5z
ovJ7k5UMXERWqPexmPdCnIswHwYDVR0jBBgwFoAU9D4GaO9yvYf6U2i+K2gVwLy0
AUkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRCNDkyLzEwREE5OTc2NEEwMzExRUQ4RjU5RDg5RUYxMjIyNDY4LzlENEdh
Tzl5dllmNlUyaS1LMmdWd0x5MEFVay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzlENEdhTzl5dllmNlUyaS1LMmdWd0x5MEFVay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkRCNDkyLzEwREE5OTc2NEEwMzExRUQ4RjU5RDg5RUYx
MjIyNDY4Lzg4RkJCMkJBM0NDRDExRUU5QTgyMDIzNzRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaSCgwDQYJKoZIhvcNAQEL
BQADggEBACARCLvbhHK7cDRcWGaA1KsfZilxqkNGZnkSpXCN3oHSg6UPi16JuKdf
pTB01q0Z0ezUcE7FZOZgg0hRHRoyF5Wzaq1VsJ5O4EE4LAJkniVaUvif9udqkkbz
FApQxk6csTokWiWodrySAfGd386WCy3Q0AKi6PZLBvFCVLsqsA2wht5CPmzxV6Ol
3iyabTyPVDZfIllSSdegRjg2MCJtvc3tbO8IVVCaaQDnSLuQ+04jtbZ5tSZV3EMr
3x3gGILo1CtHoiKv1VoKbq4lJmmGJr3FcmlFq55JVp2jvsVmRLjGzDzBxwuBiX90
wdwnpSEyOcLVpidrG8NozbZjQZWB9RY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org