Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2A64DFDC09DE11EE820FDA6A4AD9E6FC.roa
File: 2A64DFDC09DE11EE820FDA6A4AD9E6FC.roa (raw, json)
Hash identifier: 0wAIknoSh69q3GGcVmDyoczezV4qWZwjXqNwzO97qq8=
Subject key identifier: 82:13:42:41:BC:13:BA:0B:6E:97:A9:13:FA:22:46:0D:11:6C:BB:B0
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F3E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2A64DFDC09DE11EE820FDA6A4AD9E6FC.roa
Signing time: Tue 13 Jun 2023 11:33:49 +0000
ROA not before: Tue 13 Jun 2023 11:33:45 +0000
ROA not after: Thu 12 Jun 2025 11:33:45 +0000
asID: 61138
IP address blocks: 154.16.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Jun 2023 01:56:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3902 (0xf3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 13 11:33:45 2023 GMT
Not After : Jun 12 11:33:45 2025 GMT
Subject: CN=6488541d-7aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a7:b1:0a:e7:0f:1e:c7:2b:db:ed:9c:12:46:
9b:8e:94:65:c0:82:77:bc:6f:7b:31:4c:c5:c6:81:
43:32:f3:60:b3:5b:31:0b:94:ef:c1:bf:75:61:0e:
ac:a7:3c:af:11:05:1d:59:19:e6:3a:b1:8a:56:05:
86:63:39:25:9f:19:e7:01:77:c1:cd:ff:e3:94:81:
eb:4e:9a:10:5c:9a:a7:30:9d:e7:c3:ce:5f:52:45:
61:2a:19:74:24:18:a0:63:03:db:62:1e:16:b0:02:
60:46:f0:2a:88:96:fc:65:10:13:67:2f:e9:08:7e:
ba:99:7e:fb:c6:63:ba:4f:f4:30:a9:41:d9:1b:02:
44:ae:90:41:e8:96:b7:f0:c0:e7:4c:c2:55:19:48:
4f:85:18:a0:48:4e:ac:2e:06:29:f5:78:7d:74:32:
38:81:b2:75:4a:c5:41:2e:9e:de:49:c4:b9:33:60:
2a:4e:68:88:81:2c:dd:14:88:16:12:38:47:25:70:
ec:97:95:e0:d7:39:97:41:19:8c:76:af:d2:a6:7e:
9d:44:a4:53:37:26:79:7f:15:72:48:79:32:93:cd:
a8:f9:6a:ce:65:4f:ad:64:14:db:9b:3d:2e:b9:c8:
3c:04:3e:09:b7:97:f5:d3:b4:b9:c9:40:b3:be:0b:
f4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:13:42:41:BC:13:BA:0B:6E:97:A9:13:FA:22:46:0D:11:6C:BB:B0
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2A64DFDC09DE11EE820FDA6A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.87.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:1d:14:22:82:e7:a1:b9:6c:f1:75:e2:30:db:8a:71:09:9d:
cb:d5:2a:d0:90:ac:55:c6:90:c2:28:6d:48:0e:38:34:cc:f0:
be:d1:2c:e1:f6:32:e3:e3:54:e8:3d:95:13:67:e7:26:88:d5:
66:f4:54:2f:e2:4b:81:3d:f0:68:54:32:86:ae:ef:72:77:6e:
c0:1f:e9:8e:99:e7:81:2c:f7:ac:1d:51:fb:4a:4d:d0:f8:30:
9b:c0:14:cc:70:b7:12:3b:5c:37:a5:59:85:7d:2c:1c:bc:8e:
f8:f5:a7:c1:fd:82:bf:27:7e:b7:cf:5e:f5:05:66:8f:2e:8b:
f3:13:6f:76:79:6d:71:3f:1d:90:87:71:46:b0:15:3a:51:2b:
02:d0:9c:1a:8b:79:54:7a:23:fe:86:f5:93:ae:46:6c:4f:da:
56:3a:91:6e:c1:ce:71:fd:83:87:63:88:2e:66:26:3d:52:a3:
97:2f:42:37:22:02:04:24:95:95:86:11:db:e0:b9:05:91:f9:
f5:3d:c6:40:36:78:2c:1c:ff:3a:e2:e4:a0:a0:3e:ca:b2:3d:
23:33:9d:7c:36:bc:7d:3c:e9:5d:99:98:ed:d5:2b:3d:eb:f3:
73:9a:82:59:c6:53:0b:80:f5:af:a2:09:06:99:1f:52:16:e0:
36:b3:2e:32
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDz4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA2MTMxMTMzNDVaFw0yNTA2MTIxMTMzNDVaMBgxFjAU
BgNVBAMTDTY0ODg1NDFkLTdhYWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIp7EK5w8exyvb7ZwSRpuOlGXAgne8b3sxTMXGgUMy82CzWzELlO/Bv3Vh
DqynPK8RBR1ZGeY6sYpWBYZjOSWfGecBd8HN/+OUgetOmhBcmqcwnefDzl9SRWEq
GXQkGKBjA9tiHhawAmBG8CqIlvxlEBNnL+kIfrqZfvvGY7pP9DCpQdkbAkSukEHo
lrfwwOdMwlUZSE+FGKBITqwuBin1eH10MjiBsnVKxUEunt5JxLkzYCpOaIiBLN0U
iBYSOEclcOyXleDXOZdBGYx2r9Kmfp1EpFM3Jnl/FXJIeTKTzaj5as5lT61kFNub
PS65yDwEPgm3l/XTtLnJQLO+C/SjAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUghNC
QbwTugtul6kT+iJGDRFsu7AwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzJBNjRERkRDMDlERTExRUU4MjBGREE2QTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEFcwDQYJKoZIhvcNAQEL
BQADggEBAGwdFCKC56G5bPF14jDbinEJncvVKtCQrFXGkMIobUgOODTM8L7RLOH2
MuPjVOg9lRNn5yaI1Wb0VC/iS4E98GhUMoau73J3bsAf6Y6Z54Es96wdUftKTdD4
MJvAFMxwtxI7XDelWYV9LBy8jvj1p8H9gr8nfrfPXvUFZo8ui/MTb3Z5bXE/HZCH
cUawFTpRKwLQnBqLeVR6I/6G9ZOuRmxP2lY6kW7BznH9g4djiC5mJj1So5cvQjci
AgQklZWGEdvguQWR+fU9xkA2eCwc/zri5KCgPsqyPSMznXw2vH086V2ZmO3VKz3r
83OaglnGUwuA9a+iCQaZH1IW4DazLjI=
-----END CERTIFICATE-----
Generated at Sat May 3 05:31:36 2025 by rpki-client