Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1313BF82005211EE98A51D894AD9E6FC.roa
File: 1313BF82005211EE98A51D894AD9E6FC.roa (raw, json)
Hash identifier: kIfbNnhl/OrOTJv6FCWq9Wmlnrd6Ijj8Q1vrdmCuJUI=
Subject key identifier: 63:44:EF:21:68:CA:3B:33:E2:71:F1:B7:C5:28:99:C6:CC:3D:FA:4F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0E89
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1313BF82005211EE98A51D894AD9E6FC.roa
Signing time: Thu 01 Jun 2023 07:58:20 +0000
ROA not before: Thu 01 Jun 2023 07:58:17 +0000
ROA not after: Sun 01 Jun 2025 07:58:17 +0000
asID: 834
IP address blocks: 154.16.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Jun 2023 15:28:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3721 (0xe89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 1 07:58:17 2023 GMT
Not After : Jun 1 07:58:17 2025 GMT
Subject: CN=64784f9c-b561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:79:17:04:69:b3:c9:bf:18:5e:87:2e:25:4e:
ec:d2:69:f2:d2:83:59:58:6a:59:bc:8e:9c:6e:80:
8b:2b:a0:9e:78:b2:51:bb:1f:09:cf:d6:15:2a:1b:
29:f7:c0:96:0a:d2:e4:73:bc:27:7b:31:62:f5:04:
76:26:db:65:15:fe:53:69:f4:79:43:a8:0d:f8:c2:
ea:89:b6:d2:9b:26:27:a7:5e:dd:2c:be:b3:b6:14:
ff:7f:91:f2:ed:f1:53:ff:70:4e:0e:a8:18:59:b6:
29:8f:a7:9b:c5:cb:8e:f5:d8:fd:a8:24:32:53:51:
53:ba:40:48:78:b8:63:59:5a:22:45:e9:01:c6:61:
ca:a3:af:85:61:45:e1:40:09:d1:71:5b:aa:99:e4:
9b:cf:cb:df:d6:99:39:e6:af:fc:d4:b9:e0:e3:b4:
a0:86:7d:59:7d:c0:60:23:f1:73:7b:53:c8:7c:3c:
e0:45:c0:b2:60:1e:69:1a:5c:1c:e5:2e:5b:78:c8:
19:7b:b6:2c:33:29:22:6a:ff:3b:ff:f6:f6:18:6a:
75:0d:37:8b:57:e1:9f:25:d9:e7:59:10:ff:ed:d4:
a8:1b:5e:65:5b:e4:d5:b2:41:9d:eb:04:c1:d7:a3:
a0:58:45:cb:68:11:c8:18:f0:7d:ee:03:e8:4e:45:
93:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:44:EF:21:68:CA:3B:33:E2:71:F1:B7:C5:28:99:C6:CC:3D:FA:4F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1313BF82005211EE98A51D894AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.39.0/24
Signature Algorithm: sha256WithRSAEncryption
28:1b:af:d9:2d:10:b2:cb:f1:88:42:6a:31:a1:8c:2c:cb:1d:
11:57:b2:23:bf:0f:d2:8f:f3:2b:29:df:35:9b:03:36:c2:5c:
fe:e2:a5:62:68:28:87:5f:2a:d0:3e:b2:1b:01:4f:ee:7f:d5:
ee:4c:d5:df:b9:92:57:fe:dd:4f:c9:88:ee:62:3b:65:aa:5b:
29:39:f2:4c:82:7d:f4:a9:e3:db:17:60:11:99:bc:57:ea:b9:
47:e0:63:88:86:fe:0e:4a:e5:f5:ef:45:8c:7c:ae:cf:4c:0f:
a1:d9:62:b7:af:e5:11:2c:ea:66:80:ed:6b:c2:11:ae:8f:8b:
79:9b:43:9e:25:dd:60:0b:26:1e:62:17:00:38:de:0c:a8:07:
09:36:f8:de:5d:52:98:50:b0:54:8b:fd:78:9f:ea:8a:ad:bf:
bb:e3:0b:eb:32:02:20:70:23:1a:d2:d7:bb:1e:5e:a3:59:80:
e7:04:69:70:d5:53:39:e0:a3:52:11:53:e1:1a:01:f3:7e:39:
c5:69:15:7c:19:a0:e1:d8:91:1e:f1:d6:02:e2:d4:fb:95:9a:
5a:ea:25:04:2a:83:41:87:82:b0:bc:09:f2:d5:15:60:2b:48:
79:17:d3:1b:29:22:9b:e7:75:bd:21:87:be:27:41:f1:47:39:
43:4f:ee:5b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDokwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA2MDEwNzU4MTdaFw0yNTA2MDEwNzU4MTdaMBgxFjAU
BgNVBAMTDTY0Nzg0ZjljLWI1NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCeRcEabPJvxhehy4lTuzSafLSg1lYalm8jpxugIsroJ54slG7HwnP1hUq
Gyn3wJYK0uRzvCd7MWL1BHYm22UV/lNp9HlDqA34wuqJttKbJienXt0svrO2FP9/
kfLt8VP/cE4OqBhZtimPp5vFy4712P2oJDJTUVO6QEh4uGNZWiJF6QHGYcqjr4Vh
ReFACdFxW6qZ5JvPy9/WmTnmr/zUueDjtKCGfVl9wGAj8XN7U8h8POBFwLJgHmka
XBzlLlt4yBl7tiwzKSJq/zv/9vYYanUNN4tX4Z8l2edZEP/t1KgbXmVb5NWyQZ3r
BMHXo6BYRctoEcgY8H3uA+hORZNJAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUY0Tv
IWjKOzPicfG3xSiZxsw9+k8wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzEzMTNCRjgyMDA1MjExRUU5OEE1MUQ4OTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaECcwDQYJKoZIhvcNAQEL
BQADggEBACgbr9ktELLL8YhCajGhjCzLHRFXsiO/D9KP8ysp3zWbAzbCXP7ipWJo
KIdfKtA+shsBT+5/1e5M1d+5klf+3U/JiO5iO2WqWyk58kyCffSp49sXYBGZvFfq
uUfgY4iG/g5K5fXvRYx8rs9MD6HZYrev5REs6maA7WvCEa6Pi3mbQ54l3WALJh5i
FwA43gyoBwk2+N5dUphQsFSL/Xif6oqtv7vjC+syAiBwIxrS17seXqNZgOcEaXDV
Uzngo1IRU+EaAfN+OcVpFXwZoOHYkR7x1gLi1PuVmlrqJQQqg0GHgrC8CfLVFWAr
SHkX0xspIpvndb0hh74nQfFHOUNP7ls=
-----END CERTIFICATE-----
Generated at Wed May 14 20:37:14 2025 by rpki-client