Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F67A78F624B811F0A8421FACDAE4EC9C.roa
File: F67A78F624B811F0A8421FACDAE4EC9C.roa (raw, json)
Hash identifier: dLTiMSgFTzFYnFexcP0eCC+aJerUtCzoDzVr0H9dlok=
Subject key identifier: E4:C3:59:7A:08:F6:2D:2D:3C:ED:2F:6B:F9:B3:01:BC:EE:77:E9:F9
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1A9E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F67A78F624B811F0A8421FACDAE4EC9C.roa
Signing time: Tue 29 Apr 2025 05:15:28 +0000
ROA not before: Tue 29 Apr 2025 05:15:22 +0000
ROA not after: Thu 29 Apr 2027 05:15:22 +0000
asID: 21859
IP address blocks: 154.16.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Apr 2025 11:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6814 (0x1a9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 29 05:15:22 2025 GMT
Not After : Apr 29 05:15:22 2027 GMT
Subject: CN=68106070-2142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:51:0e:20:2f:2c:eb:92:5f:46:27:72:ef:bb:
24:19:1e:60:0a:bb:90:6b:9e:d3:4e:30:64:b6:30:
9f:c7:e5:93:a6:54:f6:a6:0f:d4:6a:90:80:10:26:
4e:00:37:8d:04:11:b5:32:ac:fb:d8:01:3e:90:4a:
d5:ce:73:75:08:73:8f:61:60:03:f8:e3:00:bb:40:
53:8e:47:37:31:ba:96:73:ea:b0:2b:67:9d:d0:d6:
9e:89:23:57:12:75:c1:58:b1:7e:48:ba:fc:ba:43:
c4:6e:db:39:60:1d:a3:7e:dd:ba:a1:5b:23:fd:ca:
4f:31:62:30:9e:ea:a3:0a:f4:51:c8:c6:8c:2b:e6:
d8:79:cc:06:8a:8c:63:c4:6f:20:19:a1:1c:91:61:
a3:8c:fa:f3:62:1e:5c:32:03:02:25:0b:eb:e5:69:
8f:b9:b3:b5:17:7a:5e:e5:d1:3f:53:39:f0:76:cb:
97:9d:4d:e0:1e:f3:ae:bb:85:23:32:ba:5c:05:be:
93:3f:07:ed:ae:32:eb:06:65:24:6c:e8:18:74:61:
c3:57:bc:92:71:a8:6c:8a:d6:1e:d1:cb:90:bd:82:
48:bd:ab:2e:1f:d0:20:14:66:89:f5:71:a3:ce:de:
7d:bb:61:ec:69:04:6c:3e:06:de:48:d0:69:6f:54:
97:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C3:59:7A:08:F6:2D:2D:3C:ED:2F:6B:F9:B3:01:BC:EE:77:E9:F9
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F67A78F624B811F0A8421FACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.228.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:0d:1e:c0:b0:c3:73:f1:6a:28:0e:2c:d9:34:7e:ce:25:f8:
e4:cf:da:53:4d:68:71:bc:e4:66:71:a3:de:9d:fc:3c:78:7f:
5e:32:83:79:d6:68:49:26:01:46:14:6f:82:4f:16:59:99:b4:
68:88:d7:57:75:df:c8:6a:c1:d8:24:a8:c9:40:de:49:5a:a5:
08:9b:96:f6:76:f5:59:cd:b6:22:ac:9a:fb:42:be:29:0f:1c:
42:b5:dc:69:21:15:b4:2e:cb:4c:bd:8c:72:58:8b:7d:3a:3d:
75:b7:42:c0:11:84:c7:64:c0:d3:c5:53:d7:35:9e:e8:81:34:
53:0c:5e:b2:2a:9c:9c:da:11:36:8a:00:fd:84:24:2a:d6:e8:
ea:f3:8b:1c:b6:6b:3c:21:2d:e4:76:fd:20:37:56:3b:21:9f:
e9:96:d7:98:6c:e3:1f:e6:bc:33:77:9d:bc:a2:ef:b3:f9:25:
b0:2e:03:ab:6e:52:8c:f2:09:35:0f:bf:ad:36:37:31:f5:c8:
fb:93:d9:44:a6:5a:bb:ee:73:9b:e3:0e:e1:f7:8c:f7:79:3e:
4d:cf:b7:9d:07:a2:7c:c3:45:bb:3e:cd:7b:65:01:6c:15:65:
f5:f4:7a:95:bd:c3:10:4c:b8:3e:71:4a:ab:5e:ec:73:54:4a:
2e:65:65:e2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGp4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNTA0MjkwNTE1MjJaFw0yNzA0MjkwNTE1MjJaMBgxFjAU
BgNVBAMTDTY4MTA2MDcwLTIxNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDdUQ4gLyzrkl9GJ3LvuyQZHmAKu5BrntNOMGS2MJ/H5ZOmVPamD9RqkIAQ
Jk4AN40EEbUyrPvYAT6QStXOc3UIc49hYAP44wC7QFOORzcxupZz6rArZ53Q1p6J
I1cSdcFYsX5Iuvy6Q8Ru2zlgHaN+3bqhWyP9yk8xYjCe6qMK9FHIxowr5th5zAaK
jGPEbyAZoRyRYaOM+vNiHlwyAwIlC+vlaY+5s7UXel7l0T9TOfB2y5edTeAe8667
hSMyulwFvpM/B+2uMusGZSRs6Bh0YcNXvJJxqGyK1h7Ry5C9gki9qy4f0CAUZon1
caPO3n27YexpBGw+Bt5I0GlvVJfvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU5MNZ
egj2LS087S9r+bMBvO536fkwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0Y2N0E3OEY2MjRCODExRjBBODQyMUZBQ0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEOQwDQYJKoZIhvcNAQEL
BQADggEBAI8NHsCww3PxaigOLNk0fs4l+OTP2lNNaHG85GZxo96d/Dx4f14yg3nW
aEkmAUYUb4JPFlmZtGiI11d138hqwdgkqMlA3klapQiblvZ29VnNtiKsmvtCvikP
HEK13GkhFbQuy0y9jHJYi306PXW3QsARhMdkwNPFU9c1nuiBNFMMXrIqnJzaETaK
AP2EJCrW6Orzixy2azwhLeR2/SA3Vjshn+mW15hs4x/mvDN3nbyi77P5JbAuA6tu
UozyCTUPv602NzH1yPuT2USmWrvuc5vjDuH3jPd5Pk3Pt50HonzDRbs+zXtlAWwV
ZfX0epW9wxBMuD5xSqte7HNUSi5lZeI=
-----END CERTIFICATE-----
Generated at Sat May 3 11:24:53 2025 by rpki-client