Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3B21793A5C6711EE85EE0D5F4AD9E6FC.roa
File: 3B21793A5C6711EE85EE0D5F4AD9E6FC.roa (raw, json)
Hash identifier: YIQVgHUrLr8ITaNDdFNVZsoKJf0la9vZNVSmlZ9O5p4=
Subject key identifier: 96:E1:3B:85:AC:BF:C0:A9:D4:FB:B0:84:23:16:BB:00:A8:36:F1:E3
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1284
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3B21793A5C6711EE85EE0D5F4AD9E6FC.roa
Signing time: Tue 26 Sep 2023 12:21:34 +0000
ROA not before: Tue 26 Sep 2023 12:21:31 +0000
ROA not after: Fri 26 Sep 2025 12:21:31 +0000
asID: 211376
IP address blocks: 154.16.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4740 (0x1284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 26 12:21:31 2023 GMT
Not After : Sep 26 12:21:31 2025 GMT
Subject: CN=6512ccce-74c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d6:a4:b8:87:01:f0:96:d6:fd:c1:8d:c0:d1:
ae:66:70:65:b6:1e:d2:88:bc:e6:a6:47:50:04:c2:
39:ba:fb:07:54:6e:a5:af:08:02:c1:d2:1f:fc:c5:
fb:a9:f7:7d:89:06:bd:b4:3c:b9:c3:d6:be:f2:36:
db:e7:cd:6a:c4:45:8b:c0:5e:09:37:ad:9f:62:e4:
2a:c3:60:12:33:fe:da:77:76:ce:5a:00:d7:dd:9d:
b6:a4:02:ac:df:e4:0b:7f:79:c9:b3:21:93:6c:1c:
96:94:05:09:0e:80:9e:0d:bb:9d:a8:16:50:7c:15:
c1:a6:b2:50:46:4c:45:c6:3f:a2:af:50:49:86:f7:
3c:79:6d:68:62:54:86:5a:83:a0:21:59:41:a5:92:
20:d9:30:30:76:a9:c6:ac:0b:29:7e:4a:b4:f4:7a:
83:ce:ac:2c:e5:2b:54:28:c9:97:5a:5c:06:4e:9d:
b4:17:25:20:20:09:a6:cf:ae:0e:de:d0:d5:dd:04:
c0:27:cc:75:c6:26:48:3b:8f:81:eb:a7:ab:6a:23:
48:1c:4b:5d:42:e1:46:92:83:17:57:80:ee:de:7f:
06:e6:58:e5:e0:5f:52:b6:fa:fe:1d:17:77:de:69:
9e:24:f6:a5:5d:35:56:fd:9f:f3:3c:ca:75:0f:0e:
14:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E1:3B:85:AC:BF:C0:A9:D4:FB:B0:84:23:16:BB:00:A8:36:F1:E3
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3B21793A5C6711EE85EE0D5F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.85.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:45:26:0b:e2:be:6f:cc:1c:ef:20:81:c4:a7:f5:78:e0:14:
bf:ad:59:bc:d9:c8:ac:44:15:f9:b9:09:bc:3a:2b:16:96:9e:
8e:3b:2c:c0:b4:47:3b:f1:ea:28:3e:c4:1d:cb:ef:7a:dd:46:
21:03:b5:51:eb:de:c1:bc:fe:71:99:d2:6f:2d:71:91:ec:93:
0b:94:e0:c0:af:88:5a:06:be:2b:a3:5e:dd:82:84:d9:b5:89:
bd:90:dd:74:39:ad:2c:ea:d8:21:2a:dc:f3:ca:65:08:50:72:
65:2a:a6:79:ed:75:ad:2e:c6:5a:0e:a8:11:d9:d6:c2:74:63:
6d:f6:d7:a3:42:d9:16:48:54:6c:35:a3:90:de:e5:b2:8f:53:
7a:b4:ae:7e:00:27:d8:6c:62:c1:cd:65:89:16:6c:fd:8a:56:
d5:48:5b:80:23:15:d4:27:93:7b:ec:4e:8f:2d:eb:ff:ac:45:
f5:b1:ba:a7:20:ef:6e:19:d0:43:38:b8:c0:3a:2d:b9:1c:a8:
87:ce:b9:53:db:f3:ef:f5:cd:67:02:e2:84:76:88:10:d8:f8:
51:29:44:b4:dd:f5:fb:d8:b2:94:9e:56:ef:ae:38:4a:af:e5:
b3:01:eb:b8:e8:41:4e:fe:fd:ce:5a:03:06:69:88:8d:1e:c3:
13:3f:5e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 26 07:58:52 2023 by rpki-client on console-fra.rpki-client.org