Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2875ED30046E11EEA625B00D4AD9E6FC.roa
File: 2875ED30046E11EEA625B00D4AD9E6FC.roa (raw, json)
Hash identifier: sJhlONUHsmDoDp7Lmiu1+Q0Bdap1cn6iegoQ6sXgi9Q=
Subject key identifier: DB:7A:D0:CC:F2:87:2A:D3:C2:B5:4D:33:E8:09:65:E0:FE:4D:9C:66
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0ED6
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2875ED30046E11EEA625B00D4AD9E6FC.roa
Signing time: Tue 06 Jun 2023 13:29:27 +0000
ROA not before: Tue 06 Jun 2023 13:29:22 +0000
ROA not after: Thu 05 Jun 2025 13:29:22 +0000
asID: 834
IP address blocks: 154.16.24.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3798 (0xed6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 6 13:29:22 2023 GMT
Not After : Jun 5 13:29:22 2025 GMT
Subject: CN=647f34b7-9430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:68:42:88:7e:33:0f:1d:90:2a:ee:1e:59:d2:
7c:9c:86:83:8e:7b:d1:cd:94:7c:38:6d:99:3f:e1:
0f:14:01:08:7f:4d:8d:9d:0c:63:4a:20:d3:6c:06:
b5:2b:8a:41:8a:04:14:c4:0b:c9:84:6c:8c:03:5e:
a4:ce:24:b4:c4:66:62:0b:67:59:07:58:60:11:51:
07:e5:da:eb:fd:ea:c7:0a:0b:b8:f9:32:a6:c6:0c:
fa:96:30:0f:e5:da:94:1e:e4:ba:30:1b:ce:58:8c:
5c:49:d0:ba:73:ba:c7:de:95:7f:49:a0:b0:f9:b4:
ff:3a:73:22:59:e6:67:8f:11:30:72:07:fc:8f:56:
f2:43:cf:7e:29:bd:49:7a:f0:32:a4:d5:48:93:c3:
77:a0:a8:d3:63:b0:5d:94:7e:bb:22:eb:95:e7:b9:
7e:8d:f1:40:2c:33:9c:0a:cb:ee:e3:3d:bb:c9:05:
e1:3f:79:fb:59:81:a4:32:92:32:bd:2b:99:3e:df:
3b:38:12:2f:59:da:c5:47:41:75:7d:60:22:b4:d5:
9d:2f:94:54:a1:8a:35:b2:7a:2b:70:3f:d8:0a:97:
c4:69:56:97:ea:27:e8:7c:a1:dc:5a:ba:f2:e7:04:
d5:0e:aa:6e:57:fe:60:d1:0c:9b:b7:1d:d7:6f:2d:
39:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7A:D0:CC:F2:87:2A:D3:C2:B5:4D:33:E8:09:65:E0:FE:4D:9C:66
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2875ED30046E11EEA625B00D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.24.0/23
Signature Algorithm: sha256WithRSAEncryption
67:13:15:15:19:af:74:d3:81:2c:5e:3e:a1:99:ab:20:29:b6:
c0:6c:68:b3:6e:9d:e6:c5:1f:27:29:fa:d2:67:63:3b:06:d6:
33:db:c1:5b:bd:18:6b:02:dc:bd:7b:a5:00:04:c4:77:25:df:
44:62:92:df:5b:1d:84:20:f5:78:84:ec:a9:04:64:d1:b0:c0:
17:29:2a:05:0d:42:ed:ef:2d:6b:72:ed:28:68:24:b7:cd:ce:
7f:b1:2b:38:5c:f8:a1:ea:2f:dc:e1:6f:6f:60:97:f4:91:f0:
dd:05:67:7d:9f:98:ae:2e:4d:13:38:01:37:8f:85:3a:13:ff:
dd:cb:9e:75:5d:87:82:13:09:62:93:13:e9:da:ff:68:7e:e4:
a7:6b:52:99:a8:b5:81:fa:f2:0a:2c:89:ab:ff:87:0c:0d:9c:
fa:86:fd:33:24:b3:6e:b3:5a:b8:1f:be:83:fb:44:7d:f8:ee:
ff:6d:f5:1d:da:5a:d5:b1:9d:da:03:99:fb:62:b8:74:3e:a1:
0d:5b:38:71:c5:04:dc:1f:5d:3a:ab:f0:a9:51:1d:e6:35:4d:
5b:b7:52:bb:33:bc:52:11:db:0d:ff:77:a1:bc:15:60:ba:70:
f1:23:a3:50:f0:bd:8d:53:77:09:86:f6:6d:7b:e1:23:4a:61:
4e:6b:fb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org