Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/646323064C8211EEA67CCF314AD9E6FC.roa
File: 646323064C8211EEA67CCF314AD9E6FC.roa (raw, json)
Hash identifier: OkD5ishEYYNqLnM4/mJmIA3QDXdsb5Xif8LWJgzZ8cU=
Subject key identifier: DE:75:BA:6B:85:E6:D7:6A:FC:14:0A:FD:7A:47:3D:29:77:FD:F6:CB
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 11FA
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/646323064C8211EEA67CCF314AD9E6FC.roa
Signing time: Wed 06 Sep 2023 06:55:41 +0000
ROA not before: Wed 06 Sep 2023 06:55:38 +0000
ROA not after: Tue 15 Oct 2024 06:55:38 +0000
asID: 834
IP address blocks: 154.16.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4602 (0x11fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 6 06:55:38 2023 GMT
Not After : Oct 15 06:55:38 2024 GMT
Subject: CN=64f8226d-e40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:83:5a:69:1c:6d:5d:76:77:12:f4:19:d1:c9:
3d:f4:d4:97:2c:7d:70:73:60:33:d5:3c:fb:f6:17:
2e:f3:51:0f:e9:50:af:e2:a7:54:cb:52:29:2b:30:
34:68:0b:75:f2:1c:2c:1c:16:69:9f:c9:46:c9:79:
b5:61:9b:fa:40:90:81:cd:91:12:d7:c9:7f:96:95:
f0:98:bb:31:e7:54:48:1d:5b:67:22:0b:e1:03:a8:
80:ac:45:ae:57:0a:e1:85:54:90:46:52:1c:b9:90:
f4:9d:c2:90:b1:89:d6:23:65:cd:57:1b:3a:2b:bd:
1f:f5:96:cc:64:70:32:39:ff:5c:62:2d:51:14:09:
9f:51:64:0c:63:a4:d5:8a:96:49:c2:72:c1:f6:b7:
97:d4:3d:73:eb:52:dc:48:89:0c:27:8b:c7:d2:c7:
87:d5:c4:fe:73:a6:fb:aa:47:d8:90:28:86:37:89:
e6:72:55:ad:a3:37:c5:d8:69:0c:87:5f:2a:68:f3:
27:4d:1d:d6:ce:85:73:83:08:e8:ba:23:5b:9d:11:
95:ac:1d:07:ae:33:1f:32:99:af:d3:87:3f:e3:6b:
2b:46:6f:bf:2b:c6:e8:67:5f:53:75:ba:0b:98:a8:
8a:c2:6d:fc:64:95:93:39:16:ea:43:8a:9f:13:85:
d3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:75:BA:6B:85:E6:D7:6A:FC:14:0A:FD:7A:47:3D:29:77:FD:F6:CB
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/646323064C8211EEA67CCF314AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.25.0/24
Signature Algorithm: sha256WithRSAEncryption
70:3b:81:f6:d5:39:c6:fd:ae:a0:33:80:a3:18:df:45:af:07:
93:0d:fe:7f:3a:73:90:6c:cc:44:2a:42:61:28:04:53:3b:d6:
a5:66:c4:ff:2c:44:5e:d1:8a:a2:43:7c:94:88:4b:b8:ec:aa:
cc:63:2c:4e:69:5d:e1:60:17:fe:d9:7e:ad:69:bf:0b:21:08:
c6:36:a9:1c:15:db:39:74:79:cf:bb:44:f6:fc:80:7d:69:b5:
ef:8b:79:63:87:12:1e:fc:12:60:ad:1b:19:f1:ef:a5:0c:ee:
c3:84:b0:a5:e5:7b:bd:78:5a:6a:7e:ee:92:7d:4d:5e:97:99:
c3:ec:76:ff:bb:b1:68:81:bc:63:93:10:36:bb:32:98:e5:81:
6e:bf:33:b8:2a:d8:97:fb:66:58:13:1c:f0:59:dd:07:9b:30:
cd:a0:f0:af:39:0a:bd:c1:93:e1:7e:72:d5:bf:63:a5:a9:cf:
bc:59:fd:5d:78:60:bf:3b:f5:bb:71:25:14:0e:6c:31:53:28:
ed:20:9a:ce:cc:96:87:f1:b3:a3:b0:c1:66:25:4c:ab:a6:67:
cc:05:66:5a:79:ac:c6:e6:c2:61:67:5f:47:39:fb:33:a6:1e:
91:84:1e:48:3a:7f:02:91:e5:91:c9:a4:11:88:33:39:69:a8:
5c:ea:38:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 4 12:33:16 2023 by rpki-client on console-fra.rpki-client.org