Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/63F97230256811EEA5DF017F4AD9E6FC.roa
File: 63F97230256811EEA5DF017F4AD9E6FC.roa (raw, json)
Hash identifier: /BCTbFtzTW1l0JYWjLuzbKb/TKsLF/BhqBlYWANWnaE=
Subject key identifier: EA:1C:A1:25:02:63:BF:02:FA:32:BA:FA:4F:22:3E:9A:4A:AA:E4:B6
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 10AC
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/63F97230256811EEA5DF017F4AD9E6FC.roa
Signing time: Tue 18 Jul 2023 12:41:18 +0000
ROA not before: Tue 18 Jul 2023 12:41:14 +0000
ROA not after: Thu 18 Jul 2024 12:41:14 +0000
asID: 834
IP address blocks: 154.16.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4268 (0x10ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 18 12:41:14 2023 GMT
Not After : Jul 18 12:41:14 2024 GMT
Subject: CN=64b6886e-4837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:53:4b:a0:bb:3b:e3:8b:35:cf:89:0e:13:a7:
c7:e3:c0:51:0b:9f:db:5e:97:4a:a4:3a:f4:a7:91:
4e:b7:6a:4d:02:5c:67:71:7e:3e:dc:c0:81:e3:f9:
1d:ec:57:ff:58:3e:49:df:ac:b2:27:6e:f7:4f:07:
a9:c4:af:6f:28:66:86:2a:ae:23:fe:4c:84:e1:cc:
e1:72:01:c9:fb:d6:f0:40:53:af:70:60:84:e1:6e:
6d:17:b1:47:60:cf:42:dc:9e:1d:ca:bb:80:ef:70:
22:0d:0c:34:71:96:82:f5:5d:6d:e2:1a:7c:c3:44:
a2:d6:08:58:5b:1f:14:38:b7:5f:43:b2:01:1a:9a:
c1:60:d6:c3:7a:68:ab:c2:d4:f6:cd:16:88:43:8a:
10:00:2c:b2:d1:38:1b:f3:e7:a6:0b:23:1d:2d:6a:
34:42:96:58:bb:ef:18:81:c8:f9:8e:da:58:5c:24:
5d:c2:21:52:86:7f:d7:70:cb:ca:3c:9b:00:60:ee:
45:fc:e5:62:50:bb:a7:92:15:b1:77:54:c4:d0:72:
8b:66:20:1e:0e:f0:c9:31:0c:f7:95:2b:aa:e0:27:
29:97:c4:7a:3f:86:17:63:f9:b9:c9:24:db:ae:23:
b5:1f:f5:a7:af:81:41:31:41:41:e9:ea:34:8d:63:
ea:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1C:A1:25:02:63:BF:02:FA:32:BA:FA:4F:22:3E:9A:4A:AA:E4:B6
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/63F97230256811EEA5DF017F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.207.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:1c:48:97:5d:85:8f:c4:bc:59:af:e3:2c:a1:70:bb:c1:4c:
1b:de:d1:af:f2:32:0d:16:e2:c5:36:7b:21:70:d7:d5:58:75:
1c:df:37:60:2f:b8:8d:5f:b2:ae:52:06:45:49:bc:d2:13:89:
75:e5:b9:b1:d6:6e:29:3f:5a:bb:10:51:3b:d9:65:16:70:43:
66:6d:65:8c:71:f8:7e:16:9e:1c:6d:a3:3b:0e:28:f3:a1:5a:
06:f4:c8:56:41:38:5b:23:e7:0d:49:bb:e6:56:6a:db:14:70:
f4:55:af:ad:67:49:46:98:8e:d9:db:43:17:76:4c:b8:ee:95:
03:23:ab:8b:f8:b3:a0:8f:e0:ff:33:b2:68:27:51:aa:4d:c2:
c4:97:1d:3e:0b:06:84:b7:be:64:77:7f:6f:ce:20:8d:d2:0e:
9c:1d:2f:c8:82:a1:f2:d9:79:04:9e:e3:57:d4:35:0f:16:14:
73:69:5b:69:3d:dc:d3:6b:bc:00:a3:2b:b0:99:bb:5d:9b:34:
b4:d4:e1:76:e9:9a:b3:17:9a:06:ca:f2:7d:ba:97:7b:14:4e:
60:53:e6:48:36:97:33:26:00:88:a1:37:86:72:72:36:07:4e:
4d:de:d0:60:b8:b2:1b:10:f2:b7:8a:90:e7:d0:4b:4b:5d:02:
35:15:d2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 29 07:27:52 2023 by rpki-client on console-fra.rpki-client.org