Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6807DBB4205E11EE91726C474AD9E6FC.roa
File: 6807DBB4205E11EE91726C474AD9E6FC.roa (raw, json)
Hash identifier: wqnUKU5R197WM2NthLRRtGpGrVFUh9Vz3Y6OXKMDUs0=
Subject key identifier: 44:79:F1:AE:9B:81:9B:90:E9:0A:51:63:92:D4:73:4F:6D:F9:DF:1F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1072
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6807DBB4205E11EE91726C474AD9E6FC.roa
Signing time: Wed 12 Jul 2023 02:47:14 +0000
ROA not before: Wed 12 Jul 2023 02:47:10 +0000
ROA not after: Sat 12 Jul 2025 02:47:10 +0000
asID: 834
IP address blocks: 154.16.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4210 (0x1072)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 12 02:47:10 2023 GMT
Not After : Jul 12 02:47:10 2025 GMT
Subject: CN=64ae1432-2600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d3:45:b5:23:40:0f:bd:a9:51:e5:f6:d7:d1:
00:73:e6:83:e8:d3:3f:59:dc:51:1f:20:18:c7:aa:
a0:ff:eb:20:00:8d:35:a5:b7:3e:9b:91:eb:b0:78:
30:fe:94:ed:14:40:6b:d5:55:11:c6:74:e0:c1:03:
b4:47:58:49:7f:56:a4:b7:a7:c4:03:3a:7e:16:fb:
de:34:da:a4:2a:e6:48:7f:62:c5:72:d1:eb:34:c5:
c6:21:8b:15:39:46:c7:46:ae:e6:90:be:17:a8:c7:
6a:7f:c6:ba:3a:2f:60:5f:85:1a:19:a5:76:05:d9:
8f:26:cb:c5:1c:63:73:d2:64:73:55:26:01:84:d6:
e4:87:26:57:61:30:75:ab:f6:5e:b3:c3:ef:69:3f:
03:6b:61:2a:c9:6f:94:90:89:20:6b:3b:65:c4:59:
3f:9b:90:c4:01:4c:00:e4:80:4f:f9:5f:2f:a7:c6:
db:d6:02:2d:ce:54:0a:88:71:83:bf:55:5a:91:9f:
25:23:89:37:55:88:e4:4d:08:1f:09:a8:22:1e:5e:
8e:af:3b:44:d9:49:97:0e:d0:70:1a:c8:c1:70:54:
c0:a5:e4:df:18:1d:93:b2:73:6c:5a:fc:f1:73:94:
e7:dd:f9:6e:4b:d2:5e:e5:6c:b5:24:55:26:7f:ce:
34:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:79:F1:AE:9B:81:9B:90:E9:0A:51:63:92:D4:73:4F:6D:F9:DF:1F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6807DBB4205E11EE91726C474AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.2.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:03:8c:d6:ef:bc:83:71:94:9e:e8:ab:f1:fd:bb:7d:6f:a1:
a0:48:40:67:91:15:ad:76:7b:fa:e2:c5:d1:c2:4c:57:87:31:
a3:f2:2e:21:28:55:23:bc:91:27:f3:ae:25:95:fd:83:de:12:
cc:a9:3f:8e:e2:71:b9:aa:18:d7:96:19:9a:dc:36:e6:ea:86:
64:aa:d3:a7:29:a3:39:a2:6e:68:65:50:c2:f4:f5:d6:cf:d8:
9c:eb:7b:ed:24:15:a3:ce:d4:da:67:31:71:95:61:2c:86:56:
b8:d8:cb:3a:3d:e8:c5:87:06:75:65:84:db:24:4d:b8:9b:f6:
1d:39:79:46:f4:7b:67:2a:20:1b:c6:da:2f:12:d1:52:9f:f3:
04:e3:99:2e:5a:dd:4e:db:b5:bd:fe:85:6e:3d:d6:6c:2e:8f:
74:44:1a:22:0a:03:cb:99:be:c5:52:74:33:bf:a7:8d:5b:5c:
ce:a6:78:91:07:50:9e:db:0d:ff:84:6e:1c:2d:e2:7f:7f:2c:
61:d1:f2:4a:86:d3:ee:22:a0:1a:83:16:11:93:bf:c8:1e:bc:
b7:7a:55:42:6c:3c:7a:0e:5b:03:76:55:54:17:ae:c3:94:e4:
63:8f:58:f2:19:57:25:f3:bf:8b:df:69:70:e6:f5:9c:72:4b:
55:a0:6d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org