Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/29A3D8D4641811EE89E2006A4AD9E6FC.roa
File: 29A3D8D4641811EE89E2006A4AD9E6FC.roa (raw, json)
Hash identifier: 3w+trQ8dEnS6z7jmLe/ALsiNw0YTy3Oa6R6+ct/xKck=
Subject key identifier: 02:FD:7D:8F:3A:C1:07:E8:95:51:09:5F:92:96:CC:EE:41:E5:21:A3
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 12B5
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/29A3D8D4641811EE89E2006A4AD9E6FC.roa
Signing time: Fri 06 Oct 2023 07:15:44 +0000
ROA not before: Fri 06 Oct 2023 07:15:39 +0000
ROA not after: Sun 06 Oct 2024 07:15:39 +0000
asID: 834
IP address blocks: 154.16.84.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4789 (0x12b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 6 07:15:39 2023 GMT
Not After : Oct 6 07:15:39 2024 GMT
Subject: CN=651fb41f-b6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9b:64:38:c5:55:6e:60:59:60:83:b8:83:dc:
59:9c:df:ba:4b:e5:0f:37:4b:05:c9:cb:b7:27:a8:
7a:72:14:dc:12:b5:0a:df:dd:57:77:ee:e3:a1:b5:
bf:46:8a:05:6b:9d:12:31:b3:d2:92:e8:5e:8e:90:
da:d7:15:ec:8b:ec:f1:b5:cb:a0:28:4a:15:81:dc:
20:59:a7:8e:3b:96:fa:c5:16:2d:f0:f4:d6:c6:f2:
cf:01:1a:ea:2d:77:e3:c2:b7:82:a7:b2:87:de:bb:
f8:d6:97:03:89:86:53:b4:6b:57:aa:6b:ba:13:2b:
7c:a6:1b:e4:be:11:f9:5a:63:c2:35:57:38:6d:d5:
ac:2d:ee:63:53:6b:84:96:43:eb:6b:61:90:56:00:
46:45:db:6f:21:3b:0a:47:89:10:c1:bf:94:11:49:
be:0b:89:3c:9c:70:b5:f7:56:43:74:e1:f2:5c:7d:
0e:8c:0d:da:cb:0e:df:3e:46:59:fa:72:c9:03:0c:
94:a7:89:20:ae:39:e8:78:c7:08:42:cf:8c:a0:bc:
91:75:33:a4:5f:e5:87:26:c2:da:3f:3a:51:bc:ed:
0a:86:0c:34:46:f8:2e:8e:91:a4:c5:d7:19:25:60:
2f:78:89:77:4f:ed:1d:01:6f:ef:f0:fb:8a:71:f9:
2d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FD:7D:8F:3A:C1:07:E8:95:51:09:5F:92:96:CC:EE:41:E5:21:A3
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/29A3D8D4641811EE89E2006A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.84.0/24
Signature Algorithm: sha256WithRSAEncryption
56:95:5b:9f:38:98:0c:1a:b0:54:45:b9:47:4b:4a:a6:b5:07:
97:de:6d:94:b6:47:14:1f:65:7e:9f:30:d1:da:0d:f1:c6:e2:
a1:d8:fc:10:67:6b:ba:09:b3:a9:f3:d8:d4:97:d6:69:e2:68:
cc:64:eb:77:0e:0f:ee:23:91:d4:3c:4b:91:d1:22:fa:67:34:
d5:fa:ea:59:ca:22:ee:dc:73:87:c2:ba:03:54:25:45:7f:14:
94:39:28:14:86:3e:c3:85:bf:74:3d:5a:60:c4:1a:ed:fd:99:
1c:75:ef:8b:e1:6e:9b:6a:26:c2:b1:12:19:32:ec:37:08:09:
28:1d:4b:b0:67:9b:31:4b:29:55:63:3f:75:f2:c7:d7:17:22:
f1:23:63:9e:fc:28:63:49:01:15:46:8d:96:6b:bc:2b:7e:1a:
d4:93:01:a3:c2:97:01:e5:80:ea:cc:c0:ae:8d:b5:b3:a2:04:
d4:b8:d9:06:0f:55:91:6c:3b:a4:dc:20:74:54:46:a6:91:79:
d1:01:7a:ab:fe:47:1a:87:8a:f9:01:f9:02:e7:64:6f:59:8d:
26:ab:0a:9f:3f:c4:54:97:92:eb:17:8f:82:e9:01:7e:e9:78:
c5:4b:69:b3:39:de:ae:07:56:16:46:9d:84:60:71:3a:22:b9:
21:f9:d3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 25 11:37:52 2023 by rpki-client on console-fra.rpki-client.org