Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6554D8B00FC711EE84D54A534AD9E6FC.roa
File: 6554D8B00FC711EE84D54A534AD9E6FC.roa (raw, json)
Hash identifier: fWCJuRT0R1KYOc7wqXAyV2WBYH+ljdQjO+v8PCHj4zc=
Subject key identifier: 93:2F:A7:C8:52:9C:76:18:8E:C8:BB:15:57:AA:42:67:6E:78:D0:72
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0FC9
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6554D8B00FC711EE84D54A534AD9E6FC.roa
Signing time: Wed 21 Jun 2023 00:05:57 +0000
ROA not before: Wed 21 Jun 2023 00:00:53 +0000
ROA not after: Wed 18 Jun 2025 00:00:53 +0000
asID: 395517
IP address blocks: 154.16.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4041 (0xfc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 21 00:00:53 2023 GMT
Not After : Jun 18 00:00:53 2025 GMT
Subject: CN=64923ee5-8c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c0:5a:05:2d:ca:4b:ec:e8:71:24:1e:07:6e:
52:3e:7d:01:9b:e0:49:1e:8d:e9:6d:7b:8e:5a:19:
8a:dc:1d:2a:8f:3b:f6:5b:81:01:84:53:5d:59:60:
a9:f2:66:95:02:19:fc:22:b8:72:14:f7:da:7d:9c:
29:f9:6b:90:ca:43:68:8b:ac:d9:d1:79:a2:59:ea:
53:b6:41:0e:67:37:48:e5:de:2d:34:50:05:e6:b6:
cd:8e:ad:c8:39:83:eb:e7:37:4c:ec:66:ef:6e:4a:
bd:46:b7:59:55:9e:72:ea:1e:9c:c6:35:3c:4d:31:
b0:36:76:62:0b:47:08:e4:55:88:d6:97:95:a3:63:
07:b4:62:a6:11:c9:d0:ae:a3:6e:bb:f5:14:03:f8:
eb:19:84:04:57:d5:26:44:8b:74:6b:67:e4:48:e5:
e8:0c:12:be:32:b5:ba:80:af:e7:73:29:78:8f:6a:
ed:f4:c0:8c:f3:cb:bc:c9:09:8a:f1:f9:87:f7:35:
14:36:c4:00:01:7e:30:84:84:5f:0c:9f:8f:0c:4e:
f5:3f:14:7e:6b:d1:38:93:f5:a2:92:98:da:fc:3d:
aa:74:50:0b:31:08:bc:8e:60:9a:78:fa:1d:b5:53:
9b:13:2f:22:92:29:a9:a3:08:06:ce:66:47:28:ec:
bc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2F:A7:C8:52:9C:76:18:8E:C8:BB:15:57:AA:42:67:6E:78:D0:72
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6554D8B00FC711EE84D54A534AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.9.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:23:53:2b:34:3d:d0:77:af:f5:79:3d:f0:bf:c2:1c:80:3d:
28:84:01:70:e2:fa:7d:23:15:e9:31:7b:70:44:14:3d:96:ab:
46:65:16:85:e0:77:a5:fc:7f:c7:25:b9:fe:4a:f8:29:52:a8:
af:34:56:4a:5b:ad:2f:70:76:aa:0d:f1:10:79:f6:db:b1:a6:
04:c2:3e:05:86:14:3d:72:8c:5d:ac:c1:7a:66:46:74:ae:67:
53:e9:05:60:7a:dd:17:5f:ce:85:36:02:c9:c4:54:b3:47:34:
21:1d:0e:f7:e3:6a:5d:1e:a5:0e:e7:0f:6f:a9:56:36:86:02:
90:8c:34:ce:69:84:2c:5d:0b:f9:31:ce:63:be:64:25:13:56:
50:89:c6:53:e0:fa:39:08:be:bc:05:98:4f:f2:a5:50:df:08:
3f:9f:13:61:96:74:01:15:c4:63:99:40:b1:8d:9d:56:0b:b8:
64:fa:7c:2c:f5:96:92:33:ab:0a:af:2a:1d:da:b7:04:aa:0c:
bb:49:b2:d1:b2:e7:59:f5:64:d0:02:d4:a2:04:c9:0c:8e:87:
0c:cc:e2:9d:0d:47:72:98:b7:20:e1:b3:04:4c:ec:6d:ee:d3:
7d:da:87:ce:3f:07:16:d6:66:0a:4f:40:04:9c:f4:da:28:17:
f5:8e:31:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 06:59:11 2023 by rpki-client on console-fra.rpki-client.org