Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/32C56E7C078511EE80D829694AD9E6FC.roa
File: 32C56E7C078511EE80D829694AD9E6FC.roa (raw, json)
Hash identifier: QL4WmSj7qbh99BY/bZhwba+7w9KwHeXvbcMVGhdxBGg=
Subject key identifier: 10:24:6F:40:4D:2E:28:A3:F8:D3:2F:23:C1:B9:B1:4C:0E:8A:98:75
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F2C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/32C56E7C078511EE80D829694AD9E6FC.roa
Signing time: Sat 10 Jun 2023 11:51:56 +0000
ROA not before: Sat 10 Jun 2023 11:51:52 +0000
ROA not after: Tue 10 Jun 2025 11:51:52 +0000
asID: 61138
IP address blocks: 154.16.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3884 (0xf2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 10 11:51:52 2023 GMT
Not After : Jun 10 11:51:52 2025 GMT
Subject: CN=648463dc-080d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:92:71:f6:c3:f4:1e:7e:bc:cb:45:10:d0:f7:
1c:2e:9e:a3:81:2a:04:6c:b2:1c:24:82:cd:7f:85:
c8:7f:e4:92:37:89:6d:68:a0:26:df:b0:7b:6d:b5:
96:fd:ee:c2:38:46:43:88:aa:ac:5c:24:2e:96:a5:
ea:fa:46:14:64:f2:76:c9:b9:1e:08:12:6e:60:b1:
88:57:d4:98:48:3a:65:e4:09:33:29:ba:4c:64:0c:
b5:00:6e:a3:33:c7:2c:1d:47:da:3e:57:55:c3:68:
f3:f7:af:0f:26:6e:0d:14:f5:9d:d4:6b:8e:b9:85:
7d:82:e3:a3:92:5d:0f:e7:e1:0b:cf:f4:3f:9c:01:
db:8f:fa:ef:19:da:fe:ac:62:ea:3c:e2:fa:50:a3:
a8:d5:9c:6c:c3:90:00:ae:53:52:99:f4:69:c7:8d:
41:0c:1a:a8:3d:20:37:32:51:fe:20:7b:44:e3:71:
ce:5d:38:c9:b8:f6:65:79:0f:d0:10:f7:98:ec:a0:
fe:f3:a3:a0:b0:c1:8a:a9:10:fd:7f:71:f6:b4:f6:
41:e3:2d:a8:93:b4:d3:7f:56:8b:ff:64:3f:f1:07:
bb:d0:b8:13:e2:08:7f:3b:30:86:1b:6a:e1:f5:59:
1a:d5:99:1f:4f:06:05:bd:00:dd:7b:c5:b7:72:51:
bb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:24:6F:40:4D:2E:28:A3:F8:D3:2F:23:C1:B9:B1:4C:0E:8A:98:75
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/32C56E7C078511EE80D829694AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.42.0/24
Signature Algorithm: sha256WithRSAEncryption
56:03:27:be:a4:b0:a8:9e:98:84:c1:cb:70:bf:1c:b3:5d:32:
76:6b:bd:e2:24:7f:ec:b2:de:04:0b:56:d3:f7:b5:ff:a8:aa:
7e:7c:1e:88:f6:52:fd:f6:df:64:2c:9e:c4:6a:f1:26:48:ca:
06:f1:6e:36:52:07:7d:36:d9:0a:5f:f4:1d:d2:24:0e:98:a6:
74:6c:e1:3b:07:c9:a3:d1:f5:80:1b:3b:6b:7d:b8:0c:89:32:
0b:48:55:70:83:e8:0c:90:af:cf:29:a9:bb:d5:1b:02:13:84:
1f:6e:ef:18:b0:44:0f:ac:9e:57:38:87:19:69:e7:69:82:1b:
d8:4e:d1:b7:aa:3d:4f:0b:81:7f:63:60:d0:d3:8c:c5:51:36:
a8:60:02:5a:03:92:e7:fd:2f:65:81:62:8f:cc:90:69:4b:08:
fa:20:a7:90:13:8d:b3:3b:33:73:0d:be:e8:34:29:1d:db:e2:
a8:bd:28:12:2a:92:8d:26:72:f0:8b:71:c3:4b:bf:3e:9b:7d:
fd:17:d2:9d:4f:86:bc:64:d2:d7:05:54:56:68:df:37:85:21:
57:4e:f2:cb:a8:0b:3d:eb:47:ea:0b:09:2e:78:7a:d8:30:11:
4c:42:f8:3d:6b:e8:f4:3f:7d:5c:85:4a:ea:f2:d6:fe:13:46:
fc:8a:cb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org