Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3B671466520F11EEB208EC614AD9E6FC.roa
File: 3B671466520F11EEB208EC614AD9E6FC.roa (raw, json)
Hash identifier: SDb1B/Wx32UezYgm8AQpmfno8bWYYh06zZyDihS52i4=
Subject key identifier: 63:07:D7:6D:F9:95:8F:9E:AD:19:0B:98:C9:4C:48:BD:32:13:E2:7A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 121B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3B671466520F11EEB208EC614AD9E6FC.roa
Signing time: Wed 13 Sep 2023 08:26:27 +0000
ROA not before: Wed 13 Sep 2023 08:26:24 +0000
ROA not after: Sat 13 Sep 2025 08:26:24 +0000
asID: 213075
IP address blocks: 154.16.24.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4635 (0x121b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 13 08:26:24 2023 GMT
Not After : Sep 13 08:26:24 2025 GMT
Subject: CN=65017233-8048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:52:7f:2d:21:f6:ba:5b:5e:30:80:de:02:bc:
06:39:a2:a1:f1:27:7c:2c:15:34:8e:92:27:af:6f:
1b:56:a8:67:7e:54:66:9d:10:70:99:52:f6:fb:8a:
b9:8c:70:c3:66:5e:4b:56:d4:ee:fc:4d:fb:29:f6:
fc:78:9a:de:d9:ec:17:28:36:cf:c8:ea:90:84:8c:
1f:7b:5e:aa:1a:30:a8:31:6f:46:fd:97:ef:fe:52:
81:0b:23:40:b0:2f:7f:fa:50:c6:ff:0e:d2:21:39:
70:dc:a8:99:72:97:4c:61:0a:42:5b:48:55:eb:ee:
0a:09:94:b4:18:06:47:67:7f:0f:65:be:ca:fa:e4:
78:21:7b:8f:a7:20:08:c6:8f:3d:0a:f3:6c:c1:a2:
37:5c:fa:e3:da:e2:da:29:2f:91:e5:3a:a5:d9:8f:
d6:11:61:b7:a4:ac:b7:fb:03:c1:93:c1:e4:d3:36:
13:ee:1b:c9:d4:16:4a:e3:5a:5a:ad:4e:d3:b9:af:
74:5f:30:81:6f:46:94:44:fd:14:31:7f:88:1f:58:
9d:d5:7d:0b:3f:b7:e4:ee:0e:65:01:73:d3:e0:ef:
36:3d:96:a4:2d:92:2b:e4:58:ff:bf:29:28:fd:c3:
88:85:9a:01:33:f0:dc:0f:f5:6c:82:ae:1b:56:2c:
b8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:07:D7:6D:F9:95:8F:9E:AD:19:0B:98:C9:4C:48:BD:32:13:E2:7A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3B671466520F11EEB208EC614AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.24.0/23
Signature Algorithm: sha256WithRSAEncryption
12:a6:36:d6:43:b2:8f:fc:e2:ca:48:e4:ea:96:0e:76:39:1f:
e6:88:bc:74:15:76:24:fc:77:b4:7d:fa:02:8c:b1:c4:75:f6:
c5:9f:ae:19:81:be:a1:4d:90:20:a8:23:a8:88:16:bc:b5:38:
34:2b:04:1c:69:71:c7:30:22:60:e3:90:11:cb:bd:f5:71:1c:
29:b6:47:5c:1e:e8:6d:be:17:19:85:05:ed:ad:4c:e8:ba:95:
c8:5a:19:7a:94:7c:41:9e:7d:07:b5:ef:14:7f:c0:05:0b:66:
b5:02:6d:a3:46:bc:05:e0:ab:71:6c:98:62:ff:14:aa:0e:54:
ed:87:1e:06:90:1f:e4:3f:8f:05:39:a7:4f:9c:63:eb:20:70:
d5:69:3e:14:70:bf:14:3e:02:4c:c0:2d:7b:e0:bc:3e:7c:74:
85:ca:48:58:cb:2e:e4:11:50:85:72:8a:7f:c1:4a:a2:9c:ef:
07:04:ee:ae:ba:00:ea:54:96:9c:ea:3c:71:d1:1f:13:40:03:
07:c5:0a:3e:55:60:f8:2d:46:ea:64:b1:fd:58:0d:82:a3:ab:
7a:f3:d1:a4:6b:8e:c2:27:90:d1:37:fc:5d:2c:f7:83:f3:75:
ec:0e:8e:60:87:48:b0:de:35:48:1b:b2:55:c0:dd:62:81:63:
f3:27:04:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 09:59:26 2023 by rpki-client on console-ams.rpki-client.org