Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/07DEEA9C8E8211EEB836D8D97D84E21B.roa
File: 07DEEA9C8E8211EEB836D8D97D84E21B.roa (raw, json)
Hash identifier: g9aA4KqZYdI2rsEfhVbFlBSRWoCtphzzja1YkgkR3TE=
Subject key identifier: 35:F3:41:07:10:D2:AF:4D:08:30:EE:DB:A0:86:BA:7A:95:B9:7F:6D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1399
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/07DEEA9C8E8211EEB836D8D97D84E21B.roa
Signing time: Wed 29 Nov 2023 06:39:22 +0000
ROA not before: Wed 29 Nov 2023 06:39:19 +0000
ROA not after: Sat 29 Nov 2025 06:39:19 +0000
asID: 3356
IP address blocks: 154.16.218.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5017 (0x1399)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 29 06:39:19 2023 GMT
Not After : Nov 29 06:39:19 2025 GMT
Subject: CN=6566dc9a-f787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d2:1b:10:d8:56:1d:f1:e3:fe:38:40:0a:a2:
73:ee:75:21:0a:2a:d0:43:58:68:89:04:43:10:66:
98:67:ca:bb:fb:6e:36:b0:1b:d0:0c:1d:e3:c1:62:
fa:52:65:87:6a:64:c0:90:ad:b5:aa:3b:b2:6d:23:
8d:69:6b:58:68:e4:7a:e7:55:c7:9a:15:2a:1e:2d:
c2:2f:9f:20:8e:52:c8:48:89:f3:5a:c0:db:c2:4e:
63:fc:86:0c:80:22:33:da:80:7b:11:ac:ce:26:fe:
03:15:41:76:5e:90:84:18:2c:22:b1:df:a0:30:1b:
ca:17:16:fd:8a:71:3b:d2:76:41:df:2f:bb:e3:86:
4c:f4:7b:47:c0:de:2e:0b:ed:7f:85:7e:c4:ab:da:
b6:f6:d8:e3:f2:ee:9b:5f:81:01:62:23:ef:33:99:
62:be:6c:02:2f:6f:a6:7e:97:cd:e4:fe:25:df:c8:
a4:da:3c:5b:b8:c4:c4:56:55:ed:59:53:d5:31:2b:
35:e2:c3:13:09:64:56:23:f6:19:62:78:34:a0:f2:
33:81:ed:8c:19:54:2b:3d:62:1c:f6:8a:3f:7f:f8:
60:3a:3e:05:4c:10:fc:1a:18:eb:a3:dc:65:68:ab:
69:bb:ae:3c:84:1e:e0:54:0a:30:c1:02:85:0d:f4:
78:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F3:41:07:10:D2:AF:4D:08:30:EE:DB:A0:86:BA:7A:95:B9:7F:6D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/07DEEA9C8E8211EEB836D8D97D84E21B.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.218.0/24
Signature Algorithm: sha256WithRSAEncryption
77:09:db:4f:0e:33:0e:1a:9d:d7:8f:0a:96:48:8c:30:12:3e:
e4:5d:b4:bb:79:fe:e6:80:cd:94:73:16:36:50:b7:4a:ee:8c:
46:ef:c6:ba:ea:84:8c:45:5b:c2:4e:38:e4:81:ba:97:38:76:
34:0d:66:e0:c1:38:51:2c:d8:c2:5d:07:fb:ac:6b:33:77:d3:
c6:e0:7d:c2:1b:a3:d7:e3:e1:c8:b5:61:cc:95:35:1a:76:88:
2d:df:c3:9c:fb:13:61:15:24:0c:da:65:ef:e2:c3:e0:3d:01:
6e:3b:43:c7:e9:b6:f5:78:35:a0:d7:94:b9:cc:63:fa:e4:a1:
53:cb:ce:58:23:58:1b:4d:e7:07:ec:a3:dc:36:df:42:7e:ff:
f3:7f:7d:42:1a:b0:21:0a:c2:eb:df:b2:f8:c0:8f:a3:6f:25:
79:fb:ef:ea:f9:83:ee:47:b6:84:e2:1b:b7:db:3a:a8:fc:0e:
50:14:85:28:4d:1c:65:a4:63:fb:26:bc:4b:31:d0:25:bb:7f:
f4:e8:c7:55:88:bb:77:13:fc:cf:6a:6c:3d:7b:da:47:f4:6f:
aa:1b:85:71:10:c6:24:07:9f:91:f4:90:f5:fa:4c:49:2b:84:
18:48:a9:5a:ca:36:3c:c6:6c:9a:72:0c:8b:7e:c2:5e:48:65:
e9:71:f0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 5 12:08:46 2023 by rpki-client on console-ams.rpki-client.org