Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/12B9BB2A1F4911EEBA1256744AD9E6FC.roa
File: 12B9BB2A1F4911EEBA1256744AD9E6FC.roa (raw, json)
Hash identifier: DjNqIdOXaW6QHb9s52g27nB3F6WCbJ2tryZGhwJtkB8=
Subject key identifier: 23:B4:FB:5B:42:B0:D6:35:30:EE:E3:CC:78:B8:62:6F:B3:D7:0C:77
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 106D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/12B9BB2A1F4911EEBA1256744AD9E6FC.roa
Signing time: Mon 10 Jul 2023 17:42:00 +0000
ROA not before: Mon 10 Jul 2023 17:41:55 +0000
ROA not after: Thu 10 Jul 2025 17:41:55 +0000
asID: 834
IP address blocks: 154.16.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4205 (0x106d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 10 17:41:55 2023 GMT
Not After : Jul 10 17:41:55 2025 GMT
Subject: CN=64ac42e8-eb86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f5:0e:10:e4:f5:5d:3a:ff:7b:8e:6f:61:aa:
e1:5a:f2:5d:78:d5:3b:a4:e1:10:de:bf:be:24:8d:
90:e8:18:a8:21:9d:4f:a5:50:fc:c1:0e:5b:f0:9a:
29:59:29:c0:6a:de:7d:5b:f1:7d:c6:03:27:76:7a:
9c:c7:4a:4b:1f:3b:65:6b:85:72:25:ff:71:1f:fe:
6b:8d:31:39:5d:3e:0d:5e:5f:c9:40:76:44:6f:ff:
3e:e0:e7:bb:73:f3:de:ed:ef:ec:39:ec:5b:3c:a8:
ff:07:ba:9e:84:35:0b:cf:53:9f:6c:8e:0e:8b:a8:
41:6a:85:21:29:37:0c:97:1b:0d:8d:e2:de:ec:2d:
b1:67:ec:ff:20:17:b5:76:88:32:f7:de:16:75:76:
1f:b0:ea:d8:16:3f:99:a4:4e:17:9b:93:af:58:94:
1d:e3:f2:a7:03:84:19:81:17:45:59:95:17:ab:ac:
5f:2c:96:4d:a1:9c:cf:92:0e:e2:63:4a:57:95:da:
3e:13:49:bb:eb:d2:6b:b9:96:7a:62:b0:1f:67:5c:
5e:b5:33:ae:1a:ef:e9:a3:2f:c0:24:41:d6:84:a3:
8b:8a:4e:dd:66:86:5f:c3:da:c6:de:92:42:90:f3:
4a:ea:34:50:29:12:48:4c:32:d1:79:4e:1a:4c:07:
2c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B4:FB:5B:42:B0:D6:35:30:EE:E3:CC:78:B8:62:6F:B3:D7:0C:77
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/12B9BB2A1F4911EEBA1256744AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.85.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:17:60:e0:ca:e1:8f:68:33:04:37:da:81:5d:02:5b:19:cb:
2f:e3:e0:57:7d:93:3a:23:35:dc:91:f1:43:ac:05:cf:5e:66:
d1:47:c7:a8:8f:a6:6a:02:bf:36:9c:93:6b:d2:02:30:ff:b2:
d8:4a:37:9d:5c:6b:db:cd:a0:aa:11:20:80:77:4f:47:c6:b3:
68:8c:4e:9a:44:01:69:e6:2b:d2:0d:b0:84:6d:a5:18:a2:14:
34:47:26:bc:c1:a8:fd:72:54:e6:f2:04:67:74:08:92:cb:86:
41:d2:b6:51:12:a3:52:42:c1:04:cd:d2:f3:70:32:d9:2a:94:
96:22:2c:89:29:aa:ae:69:fc:69:56:de:88:4d:ed:85:bb:9f:
57:6d:b7:f8:df:82:d3:dc:3a:64:c0:68:44:8b:e5:a4:c7:99:
d5:4c:1b:5d:5d:f8:01:c8:a7:98:1e:fa:d0:76:d6:87:b8:d7:
58:10:1b:2a:f4:bb:11:65:b5:03:c9:2e:ac:4e:eb:1a:e3:73:
9c:8e:ff:ef:27:8b:36:09:50:b0:6e:fc:22:6c:a3:35:6b:7e:
35:2e:f8:85:67:8d:a4:f3:9d:cf:1b:be:8b:8a:bc:11:e2:00:
ad:0e:2a:58:0e:b9:69:9c:c7:91:c2:cc:27:cf:3c:b4:13:38:
4f:91:7c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 21 01:05:14 2023 by rpki-client on console-fra.rpki-client.org