Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0B891F5A0C4B11EE8D1FDF484AD9E6FC.roa
File: 0B891F5A0C4B11EE8D1FDF484AD9E6FC.roa (raw, json)
Hash identifier: t6dzJu0lH17QN1Or9YmeBOojIg7W471Wjnsivs4K1XE=
Subject key identifier: 2A:4D:F0:D0:4D:21:FD:EA:C8:84:6B:6A:07:47:AB:6A:1C:90:DB:3E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0FA3
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0B891F5A0C4B11EE8D1FDF484AD9E6FC.roa
Signing time: Fri 16 Jun 2023 13:38:15 +0000
ROA not before: Fri 16 Jun 2023 13:38:10 +0000
ROA not after: Sun 15 Jun 2025 13:38:10 +0000
asID: 61317
IP address blocks: 154.16.56.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4003 (0xfa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 16 13:38:10 2023 GMT
Not After : Jun 15 13:38:10 2025 GMT
Subject: CN=648c65c7-ad4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:82:e5:af:4c:99:5b:95:03:47:b7:a6:9f:df:
62:86:d6:2a:01:59:cb:d7:37:88:e5:fd:e8:4c:21:
49:c1:d0:28:5d:12:38:7f:4c:45:7b:e5:32:38:3a:
4b:a1:ae:4b:da:c4:36:88:16:9d:0b:17:29:26:89:
69:ba:fc:c8:dd:bc:73:15:85:d5:85:60:1c:4b:73:
4c:6f:99:c3:51:3c:f2:7e:75:9a:d0:91:2f:47:4e:
d3:ad:2b:f0:3b:b7:27:2d:f5:11:22:d1:86:c1:22:
4b:2e:09:fe:4e:42:5b:1f:ac:7f:f7:f2:f2:5d:0c:
e9:50:9d:39:19:6e:63:8c:ee:00:7d:fa:06:da:e5:
12:9f:48:39:31:13:7e:92:29:06:01:b7:80:aa:65:
43:9f:19:00:41:56:8c:a1:84:92:9c:c4:f7:24:b6:
d1:c8:2f:05:a3:58:d7:a2:f8:a4:b4:8a:0c:1b:54:
93:1a:f4:17:51:d0:ac:ad:fd:08:f4:d4:9a:95:3d:
3a:e3:a9:89:03:1c:04:28:84:04:ed:21:de:61:d5:
79:bc:8f:28:82:2d:4c:bc:fe:c7:28:c8:b4:85:e2:
da:a6:a8:d5:2d:ec:a6:b1:c9:c5:0b:f9:88:32:e9:
6d:21:5b:4f:2c:f7:21:62:11:6d:8b:6d:9d:7c:ce:
48:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4D:F0:D0:4D:21:FD:EA:C8:84:6B:6A:07:47:AB:6A:1C:90:DB:3E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0B891F5A0C4B11EE8D1FDF484AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.56.0/24
Signature Algorithm: sha256WithRSAEncryption
83:3c:92:5e:1a:06:61:7f:e7:d7:69:a4:1b:9d:68:86:94:6a:
a3:7a:c2:94:38:15:34:95:1e:65:77:e6:18:08:0e:e7:4e:a9:
77:34:a6:dd:b8:0c:f0:8f:55:42:3e:e8:b5:3b:1d:c9:9b:11:
09:90:f8:c0:8f:0f:67:20:a3:c7:f7:a4:70:86:7b:00:80:cc:
17:df:1f:12:24:a0:22:b3:a7:bc:38:79:bd:ef:1e:6d:45:1e:
9b:aa:04:c2:ea:37:8f:3c:5e:4c:6e:01:03:d1:4d:4d:76:e0:
52:a6:45:4c:41:d1:7f:23:84:a8:71:99:e0:d2:94:0f:ce:85:
62:a9:3d:0a:b0:27:3f:5b:7a:bd:fc:85:7e:58:d1:ea:2a:9d:
41:88:d6:b1:e6:ea:b1:9a:13:8d:5d:41:7b:4a:fa:09:dc:bc:
97:cf:e3:20:16:43:73:38:34:e1:27:53:cd:0b:78:52:bb:45:
a2:f1:6e:91:2e:73:2c:76:65:b9:08:fb:66:ca:fe:6f:73:20:
52:e5:cf:7c:77:69:5a:de:c0:9d:24:c0:3a:2d:59:a7:6d:6e:
0a:56:06:c5:b8:f1:7f:9e:63:72:4c:35:81:d0:39:4b:0a:a3:
c0:c2:a8:44:3b:b8:ce:1e:da:7c:d9:fc:5c:cd:3f:7f:51:ea:
c3:d8:a8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 18 03:42:43 2023 by rpki-client on console-fra.rpki-client.org