Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/44779D4A305011EE8B27E35A4AD9E6FC.roa
File: 44779D4A305011EE8B27E35A4AD9E6FC.roa (raw, json)
Hash identifier: 4OV1kwXO6t2RMYVPivKrD+W2D43AHXFKpboSVAGBGlg=
Subject key identifier: 65:C6:2C:36:6E:8E:0D:7F:C3:8A:25:AE:A7:2A:30:5D:B2:BE:27:8C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 10F5
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/44779D4A305011EE8B27E35A4AD9E6FC.roa
Signing time: Tue 01 Aug 2023 09:46:20 +0000
ROA not before: Tue 01 Aug 2023 09:46:16 +0000
ROA not after: Fri 01 Aug 2025 09:46:16 +0000
asID: 834
IP address blocks: 154.16.100.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4341 (0x10f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 1 09:46:16 2023 GMT
Not After : Aug 1 09:46:16 2025 GMT
Subject: CN=64c8d46c-cf67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:41:40:9c:fa:9a:73:10:d2:68:a0:6b:66:bd:
86:25:78:18:f8:4d:39:db:44:41:8c:a0:2c:43:b7:
75:a8:9a:b6:10:00:4c:c9:4d:39:68:26:fd:ab:e7:
df:c0:16:4d:64:b5:1b:a8:95:1d:90:d6:10:d7:af:
ba:2c:a3:d9:fc:8c:9a:ad:9a:e8:22:7e:32:37:2b:
42:64:8c:e9:57:5b:7f:e9:c2:73:72:c3:37:c9:e8:
31:69:d8:4e:81:29:83:ce:66:6d:2a:bd:5e:76:aa:
cf:19:a9:87:17:10:e6:d8:b4:c3:34:ff:68:b9:e0:
e4:4e:f9:26:36:da:52:e5:dd:23:4d:c1:73:52:75:
62:93:d6:8e:fa:bd:ba:4e:39:96:05:1f:93:c9:94:
eb:47:bf:ca:9a:f6:91:1f:20:de:b9:e9:53:c6:cf:
56:1b:49:be:87:6f:ab:d5:46:05:9b:1c:75:6c:8d:
53:69:77:07:34:41:ec:52:1c:9d:b1:9e:80:9a:69:
6d:17:17:48:b1:5f:77:b1:73:c7:6f:d7:66:18:ab:
62:5d:2e:4e:1c:78:81:be:77:6e:42:34:f1:73:e4:
a9:24:74:2e:cd:69:4a:87:81:fb:74:35:d2:3e:70:
7a:f3:2a:e4:f0:01:41:2f:51:b2:7b:6d:96:de:c9:
fe:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C6:2C:36:6E:8E:0D:7F:C3:8A:25:AE:A7:2A:30:5D:B2:BE:27:8C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/44779D4A305011EE8B27E35A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.100.0/24
Signature Algorithm: sha256WithRSAEncryption
63:97:f7:96:4c:0d:43:7b:a8:05:af:2f:a7:02:a4:3a:5d:f0:
d9:ed:f3:54:8f:1d:5b:d7:33:68:58:fa:50:92:cb:03:10:cf:
0a:4e:4b:76:c6:bb:6b:fa:58:5d:9f:c6:95:56:01:0d:c7:75:
05:46:6e:f0:33:22:46:7c:f9:0f:2f:de:4c:1d:0d:92:3a:98:
bd:bd:88:ad:61:2c:07:56:80:f1:00:0b:89:cd:f5:2b:a3:f7:
f9:7e:45:6f:42:7d:4d:a2:1c:ff:2b:4d:15:6a:de:ed:37:03:
4c:e4:5a:0d:61:9d:bb:ea:7b:fa:c2:02:5e:65:c5:0c:e5:44:
4a:51:9b:2a:68:1a:1c:5c:94:d9:df:19:3a:1e:53:01:33:ec:
1b:4a:2a:54:69:b5:30:78:a5:99:bc:72:c3:8a:64:73:71:03:
8b:e9:30:4c:04:9f:3f:7a:78:b6:8d:c5:f9:54:4b:ed:37:6e:
7d:54:2a:73:aa:b6:82:29:7b:e7:27:aa:50:6f:68:b9:af:72:
e8:ad:4a:8c:44:59:03:03:fa:15:4a:ab:c0:07:d0:9b:94:53:
67:ea:7f:7a:64:45:fb:fa:e8:40:76:21:e4:cd:45:84:14:60:
8e:21:e7:8f:83:ba:79:7d:1c:3d:74:e8:cc:ff:cb:c3:f6:cc:
da:98:5b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 13:51:07 2023 by rpki-client on console-fra.rpki-client.org