Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3D1902320A8511EE8344896A4AD9E6FC.roa
File: 3D1902320A8511EE8344896A4AD9E6FC.roa (raw, json)
Hash identifier: SIjsN+7LKnQfLlZHvtdKVYP7uz6H1ltM2hvT7zgTbAI=
Subject key identifier: 2E:3D:9B:BC:83:0D:D0:04:72:AE:98:15:44:57:4B:C8:0E:D3:E3:A8
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F58
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3D1902320A8511EE8344896A4AD9E6FC.roa
Signing time: Wed 14 Jun 2023 07:29:47 +0000
ROA not before: Wed 14 Jun 2023 07:29:43 +0000
ROA not after: Fri 13 Jun 2025 07:29:43 +0000
asID: 20473
IP address blocks: 154.16.160.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3928 (0xf58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 14 07:29:43 2023 GMT
Not After : Jun 13 07:29:43 2025 GMT
Subject: CN=64896c6b-6ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:99:29:5e:54:aa:be:c0:a1:4c:be:4a:cb:21:
7d:b8:45:8f:58:af:d2:a9:d5:be:ae:f2:f3:8c:a9:
f6:8a:3c:2f:dd:c8:a5:c2:79:57:9a:c6:11:83:87:
a4:2e:77:db:76:23:7a:41:c0:51:af:4e:5b:0c:87:
92:2d:26:40:5c:45:ca:58:63:19:a9:d8:02:ec:6b:
d6:57:d2:3b:f4:7b:27:a4:76:ec:44:99:2a:35:9f:
ad:2f:5a:45:16:1e:45:21:82:22:c6:92:d3:23:36:
76:ca:54:2c:ae:f9:4f:a1:87:cd:14:b5:7f:84:dd:
74:10:7a:47:7a:1e:d2:43:02:98:c6:e5:99:b7:36:
6d:aa:31:9b:8d:56:cf:e7:7c:85:ef:a2:18:8f:21:
98:af:a7:25:e5:a8:db:71:2a:32:c8:26:c4:c3:40:
c9:a0:c0:66:b4:4b:c9:ef:26:54:fe:e1:39:f5:09:
1b:39:fb:64:40:99:8a:f9:ea:14:51:f5:e5:e9:ac:
61:1b:c7:b3:ad:23:8f:1f:73:58:1a:bb:12:d1:96:
75:54:7f:49:a2:cc:9d:f7:c8:38:d7:89:a2:2a:48:
40:03:9a:fa:77:08:d3:74:bb:cb:0b:00:6e:8f:7f:
25:a0:92:a4:21:67:8f:30:20:48:2d:20:fe:e4:bd:
58:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3D:9B:BC:83:0D:D0:04:72:AE:98:15:44:57:4B:C8:0E:D3:E3:A8
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3D1902320A8511EE8344896A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.160.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:b6:7a:82:04:16:d9:24:ec:63:6d:e7:54:56:b2:1b:2c:5f:
29:ed:eb:aa:2e:5c:9e:26:7c:90:43:46:46:fd:ad:27:cd:6a:
9e:8f:4c:9b:ea:c2:a8:de:9a:08:24:9c:e0:07:6b:e2:46:23:
b1:df:f7:2b:2d:22:b1:5e:e5:84:d0:ea:c1:2e:7b:33:07:63:
42:c7:04:9f:53:bf:96:33:2d:29:dd:91:49:9b:dd:b1:ea:de:
78:d7:58:24:eb:37:ad:96:45:22:2f:7f:f8:3a:37:21:c0:dd:
70:c2:dd:82:ca:6c:81:37:88:b1:6e:86:a4:f4:49:57:95:ef:
e8:54:72:11:67:f8:14:92:7f:09:d6:4c:1f:9f:9d:6a:26:e8:
33:31:c5:8a:e0:de:54:c6:ec:b5:53:2c:ba:c0:cc:11:6d:06:
55:41:e0:81:5e:f0:d7:df:3d:a0:ca:2a:c3:a8:9a:88:e8:65:
eb:77:0e:e1:55:c8:93:58:f6:4a:41:e4:17:6f:d9:9f:0e:b0:
cf:8a:36:73:75:62:b1:50:6a:78:10:f5:af:9a:ac:4c:c0:ed:
9e:98:0b:96:84:e2:3e:3a:15:32:33:d0:f8:0c:31:99:77:37:
99:1c:e2:22:77:12:61:85:42:5f:f5:ff:05:52:cc:ee:8d:a4:
db:04:72:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 06:51:57 2023 by rpki-client on console-fra.rpki-client.org