Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3C1147E240E411EEA2ECCA2A4AD9E6FC.roa
File: 3C1147E240E411EEA2ECCA2A4AD9E6FC.roa (raw, json)
Hash identifier: 4o1U/5RWSNNRxf5bx69nFMqpvmTfztDYBQPiolpqor4=
Subject key identifier: 7F:B6:9D:77:78:54:0F:3C:53:D9:50:51:0F:5D:F3:8E:3F:E0:58:5F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 11A0
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3C1147E240E411EEA2ECCA2A4AD9E6FC.roa
Signing time: Tue 22 Aug 2023 12:05:50 +0000
ROA not before: Tue 22 Aug 2023 12:05:47 +0000
ROA not after: Sat 23 Aug 2025 12:05:47 +0000
asID: 834
IP address blocks: 154.16.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4512 (0x11a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 22 12:05:47 2023 GMT
Not After : Aug 23 12:05:47 2025 GMT
Subject: CN=64e4a49e-0b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:22:3a:32:53:13:d1:83:e9:69:50:4f:c5:55:
8d:08:38:6d:02:4b:3b:96:19:b2:55:c8:6e:4f:75:
82:19:2b:57:10:36:84:49:72:8c:a6:ce:31:1b:4b:
e7:f1:25:00:99:6c:2d:5a:fd:59:94:16:54:02:95:
df:db:de:20:2f:97:e0:69:fb:6c:2b:01:05:04:f9:
26:53:1b:e5:50:81:12:bd:14:c5:c2:2e:40:01:74:
80:c2:8f:6a:d3:e3:77:f6:1e:81:da:29:05:6c:54:
40:10:fa:83:dd:45:ec:33:a9:21:68:77:74:a7:02:
d9:a4:b1:f8:8f:88:f9:67:db:28:e8:8a:18:d7:84:
54:bd:3f:fe:62:98:84:9a:5b:ef:8b:aa:0b:95:18:
8d:95:ca:9a:0d:e3:54:9b:0f:c3:d3:cc:25:64:3f:
1f:13:03:97:c7:52:4c:7d:2e:8e:f3:a7:7b:73:a8:
d8:5f:b4:2f:50:2c:bd:8e:7f:f9:e4:03:ad:0e:d0:
15:24:78:13:83:75:3a:13:c2:52:91:bb:fc:a2:a8:
13:0e:a5:5c:f5:9f:c4:b7:42:33:b4:cb:96:95:05:
b6:16:fa:dc:76:65:57:43:b2:dd:e8:2c:eb:30:f0:
74:65:9e:31:f8:90:31:86:46:bb:9e:98:f5:8d:10:
62:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B6:9D:77:78:54:0F:3C:53:D9:50:51:0F:5D:F3:8E:3F:E0:58:5F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3C1147E240E411EEA2ECCA2A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.50.0/24
Signature Algorithm: sha256WithRSAEncryption
48:fd:94:64:d6:bc:9f:e7:9b:b2:f9:ae:d9:3a:15:cc:27:93:
5c:79:7d:d7:e0:31:3f:96:86:aa:20:fa:ad:e8:de:45:55:9e:
92:06:da:99:19:7f:10:d4:40:61:55:3f:75:13:db:7d:f1:7a:
c6:40:50:79:98:fb:f3:dd:9d:41:78:d2:a4:e9:45:22:2d:5d:
dc:96:d1:1d:44:c1:b1:f2:f9:e2:3b:a1:12:99:10:b9:b1:61:
4d:39:a7:54:0a:ba:31:ea:ab:88:b3:c2:9d:bb:a3:a1:0b:2a:
5b:ec:6b:28:1e:13:fc:68:72:aa:80:34:66:a6:2f:4d:37:b5:
54:c0:bd:68:0f:b6:53:ce:a7:f5:5a:f8:7e:40:0f:b6:e1:21:
ae:a1:e4:09:1a:bb:b8:f0:6d:09:22:61:94:fd:48:0f:06:d8:
b5:1e:9f:f3:cc:02:d3:53:35:89:3f:59:bd:7b:de:49:b8:1e:
bb:dd:cf:a9:f9:c8:f2:74:94:2a:07:03:9d:0d:85:3a:7c:0a:
5e:d0:d3:c4:9a:0b:41:81:d7:d1:8a:01:c2:31:a8:f7:1f:b3:
d1:54:96:a7:d2:7a:57:f6:c0:f5:40:62:29:33:2f:1f:92:ac:
d4:a1:6e:0e:49:e1:3b:73:af:08:f5:f9:5a:ec:b4:47:25:44:
2d:3f:2d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 29 15:42:15 2023 by rpki-client on console-fra.rpki-client.org