Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/180D8C180BA911EEB1FA53594AD9E6FC.roa
File: 180D8C180BA911EEB1FA53594AD9E6FC.roa (raw, json)
Hash identifier: 1YTXRK/l3sDRlwc/RamNo3qHVG4M2Bzgp3JtN3/Pn98=
Subject key identifier: 48:D8:10:DC:0E:C5:F4:F2:8F:C4:41:FC:2A:C9:96:F3:C7:A8:C2:7F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F81
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/180D8C180BA911EEB1FA53594AD9E6FC.roa
Signing time: Thu 15 Jun 2023 18:18:58 +0000
ROA not before: Thu 15 Jun 2023 18:18:54 +0000
ROA not after: Sun 15 Jun 2025 18:18:54 +0000
asID: 48678
IP address blocks: 154.16.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3969 (0xf81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 15 18:18:54 2023 GMT
Not After : Jun 15 18:18:54 2025 GMT
Subject: CN=648b5611-e621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e7:a4:af:83:82:f1:98:45:b3:16:82:99:d4:
f7:0e:d9:1e:a3:4c:d7:e3:59:00:6b:9b:a0:76:34:
05:0a:64:38:64:c5:2e:31:f2:58:25:bd:b2:1c:bc:
e6:3c:dd:1e:ee:39:0e:49:15:76:be:fe:c5:ff:46:
0f:c2:7f:cb:f1:ac:f7:df:a0:d1:ed:8c:e0:01:7c:
d8:d5:aa:ab:3f:65:b4:d8:6b:20:29:bc:2b:26:cc:
ba:17:29:ac:20:d6:3d:01:4c:e2:7c:8b:1b:c8:62:
3a:c5:9d:05:1c:90:68:ce:4b:c3:1d:b3:e9:bf:d8:
0e:4b:6c:5b:69:47:5e:1c:64:98:5f:e8:c7:c2:04:
38:8d:f9:e3:ca:73:20:24:bc:af:f7:ec:2d:b9:22:
8f:81:30:1b:22:48:92:61:e8:5d:25:62:73:3f:1d:
60:2b:a2:d7:94:f3:af:12:4a:27:28:26:db:25:58:
df:cf:62:f7:2c:8e:b5:4b:1b:27:89:c2:11:ca:28:
0d:f6:44:95:0a:c8:27:07:31:23:7b:54:52:a7:0d:
5d:87:31:d6:42:ed:2f:c8:61:6a:a9:d6:30:f0:0c:
f4:14:d6:dd:eb:47:a4:8e:a3:5c:0c:24:f0:00:7c:
d5:a4:a9:c5:4d:7f:9b:18:9a:bb:84:8f:b6:a4:77:
50:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D8:10:DC:0E:C5:F4:F2:8F:C4:41:FC:2A:C9:96:F3:C7:A8:C2:7F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/180D8C180BA911EEB1FA53594AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.94.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:14:cc:25:31:cb:e3:1a:ce:4d:71:08:16:9c:a0:52:6b:8b:
fd:30:c6:83:77:be:f4:20:1e:80:03:b1:24:89:93:ed:cf:8a:
7c:04:73:13:14:8f:8c:7d:06:d4:fb:ec:3c:ce:c2:6e:43:09:
b9:11:b5:fb:10:ec:bc:99:23:6b:d9:ca:6b:16:8f:d4:64:25:
39:34:6b:da:23:57:7d:10:e2:3f:d7:15:f0:ca:1e:23:7c:4b:
08:59:81:89:a2:89:94:28:d5:60:2e:82:0a:94:f9:1a:53:33:
72:6c:8c:81:11:ce:39:aa:68:e7:24:f0:a4:99:cd:5e:e7:62:
38:87:4f:f4:57:13:dc:32:07:6a:ed:92:e5:6d:5f:2f:56:95:
0b:47:da:e3:fd:eb:18:8e:ce:9a:50:e5:bc:65:1f:3b:be:c2:
41:0a:d3:57:69:f9:5e:6b:31:d5:f4:18:9c:ab:52:99:d3:55:
0c:c5:2e:68:28:0c:26:13:64:89:c5:25:a6:62:09:19:e5:90:
31:fd:3f:ff:18:7d:18:87:52:e7:cc:4a:57:bf:09:15:ff:62:
3e:c6:ec:7a:a5:6e:1b:fd:84:eb:f8:7c:41:15:92:8d:e8:45:
b0:80:57:38:e7:61:5f:92:df:71:52:ea:ac:46:56:5d:4d:21:
cd:21:05:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org