Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CA09DDFAFFB911EDA77E12374AD9E6FC.roa
File: CA09DDFAFFB911EDA77E12374AD9E6FC.roa (raw, json)
Hash identifier: 3SWh6aQ2LMiIkQiDIahA7P4BO6TRtGjZVd9YiAUFZ68=
Subject key identifier: 9F:9A:8F:B4:A3:1C:36:65:7F:BA:DF:3D:02:5A:97:9A:9C:E8:3D:0E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0E0B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CA09DDFAFFB911EDA77E12374AD9E6FC.roa
Signing time: Wed 31 May 2023 13:48:14 +0000
ROA not before: Wed 31 May 2023 13:48:11 +0000
ROA not after: Fri 30 May 2025 13:48:11 +0000
asID: 834
IP address blocks: 154.16.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3595 (0xe0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 31 13:48:11 2023 GMT
Not After : May 30 13:48:11 2025 GMT
Subject: CN=6477501e-09f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:13:f3:20:c2:ec:55:18:2e:76:0c:6d:5d:97:
48:14:fd:ed:04:aa:23:37:66:2e:d6:dd:ef:3c:7c:
2a:fa:1a:c4:73:59:bc:0d:16:64:37:99:37:df:6a:
7c:5c:c8:31:d8:6c:38:fd:fd:9d:1f:1b:03:29:57:
1b:d0:c8:3d:6c:9d:d7:71:ac:0d:ec:1e:ff:72:33:
cc:b2:cf:40:6c:2f:d0:b2:7d:29:fa:b6:c0:8b:bd:
cf:bf:96:fd:af:ad:3f:af:48:ce:86:03:ba:cd:78:
ff:bb:30:bc:c9:0a:78:2e:3a:9b:9c:a3:72:b4:49:
16:47:9a:88:ce:d6:9f:6f:e1:c5:4b:9a:e0:f0:29:
50:c9:eb:7d:ce:69:92:de:f5:7b:40:e4:ce:19:93:
ad:be:25:54:97:cd:12:7d:c3:b6:e3:9f:f7:44:29:
38:6d:c7:47:85:70:aa:98:9c:ed:3f:87:a0:12:83:
f0:1d:09:0b:9d:37:26:b4:78:ef:f0:c8:f8:b6:a8:
83:b5:16:7d:7e:4e:92:4b:5a:17:26:80:a1:9e:57:
90:f4:96:3e:28:ef:f3:b8:12:15:b1:00:11:5e:8c:
21:17:ad:5e:47:82:6d:73:42:c4:cc:36:46:a6:48:
df:ae:4e:c7:bc:27:4a:9b:9d:92:ef:28:56:d0:a1:
06:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9A:8F:B4:A3:1C:36:65:7F:BA:DF:3D:02:5A:97:9A:9C:E8:3D:0E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CA09DDFAFFB911EDA77E12374AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.103.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:f4:85:af:f4:26:f2:04:32:e8:b8:94:4b:db:25:f3:4b:ea:
73:52:ca:14:d9:19:3e:72:61:26:63:00:da:55:06:44:2d:00:
a6:f6:58:2b:df:d1:32:d1:5f:9d:96:40:ea:57:00:48:74:e9:
86:a2:0f:e8:d2:27:38:55:c8:62:57:73:3e:ef:bc:32:a7:b8:
bd:15:d1:c1:bb:92:7f:ee:fa:f6:46:87:e0:e0:a0:b6:d3:7f:
1a:6d:99:8b:a0:38:1c:6b:5d:0a:25:92:48:f9:64:0a:04:1b:
86:33:ab:fd:5f:67:3c:6a:eb:2d:26:f1:a7:de:29:86:19:e6:
39:02:a0:99:a5:a2:51:90:cc:72:dc:bb:6a:91:b9:57:b8:0d:
89:03:05:01:97:b5:ce:58:69:32:48:8c:b7:3c:c0:b2:d2:09:
f3:6d:81:4d:22:57:7c:4b:0d:f2:71:3a:46:cb:5e:d8:12:be:
fa:25:ab:b7:26:7e:30:00:d4:58:1f:c8:22:60:fd:23:47:ca:
7f:d6:5a:49:e5:36:96:41:f8:67:ed:cd:bb:6e:99:ca:9d:76:
d9:d3:3e:57:82:bf:3e:71:f8:74:9c:06:e4:56:2d:5c:04:cf:
6f:27:a1:5c:62:50:da:8a:8a:42:d5:12:c4:f1:d0:0f:0e:0d:
7c:2f:fc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org