Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6F455E5E2C8611EEA17928574AD9E6FC.roa
File: 6F455E5E2C8611EEA17928574AD9E6FC.roa (raw, json)
Hash identifier: Xh4g4816EQ9MX34YTReJrVD5Z0vBMhlxvgnWaVn7qyo=
Subject key identifier: 08:D1:4C:30:9E:35:BA:0B:5B:6F:D3:09:32:0A:D5:26:E4:43:5E:26
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 10E1
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6F455E5E2C8611EEA17928574AD9E6FC.roa
Signing time: Thu 27 Jul 2023 14:04:00 +0000
ROA not before: Thu 27 Jul 2023 14:03:56 +0000
ROA not after: Sun 27 Jul 2025 14:03:56 +0000
asID: 197644
IP address blocks: 154.16.30.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4321 (0x10e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 27 14:03:56 2023 GMT
Not After : Jul 27 14:03:56 2025 GMT
Subject: CN=64c27950-ae46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:83:0b:f4:dd:54:56:0a:6a:d2:d4:0d:63:cf:
a4:ab:96:07:1e:c2:29:1e:03:56:a5:d6:b1:2b:71:
98:77:78:aa:f9:f9:32:9b:31:83:af:98:e4:d8:cd:
d7:15:7e:5f:17:74:f5:cb:40:d8:7b:78:91:15:cf:
33:33:19:67:7f:6b:d8:57:47:a8:44:c2:6d:b6:55:
6a:18:6f:21:27:3f:2e:04:8c:a7:81:90:1f:d2:9c:
7a:11:b1:8c:95:09:df:69:7e:d5:26:d6:b6:15:fe:
7c:32:de:89:e4:50:b8:8e:bc:dd:36:27:c2:33:ba:
e2:d7:58:0b:14:6c:db:b3:0e:69:cb:91:4c:79:e0:
66:a0:8b:8d:58:17:51:c0:95:ee:90:92:e5:d5:53:
0a:e6:fd:05:f5:4b:ab:73:23:43:21:c6:83:63:f3:
8e:c4:bd:f7:1c:b1:e3:f6:c0:bc:bc:7d:d0:ef:11:
77:77:86:2e:5d:88:a3:7a:32:6a:21:38:56:76:b2:
63:f3:e9:20:17:34:58:3c:07:ed:82:0c:aa:4f:dd:
ea:74:20:1f:c6:56:78:dc:48:18:01:a9:23:af:7b:
c8:40:27:a0:5d:c8:29:31:72:28:b1:6a:c3:07:67:
a3:84:38:e6:5f:89:be:76:a6:27:59:ba:d6:ab:a3:
0e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D1:4C:30:9E:35:BA:0B:5B:6F:D3:09:32:0A:D5:26:E4:43:5E:26
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6F455E5E2C8611EEA17928574AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.30.0/24
Signature Algorithm: sha256WithRSAEncryption
09:dc:77:27:7f:86:dd:74:47:37:2a:91:b4:fd:3e:3b:d9:e2:
8c:b6:2c:ab:e9:17:b1:a2:48:f5:75:4c:b0:68:50:3a:52:8f:
ca:a9:67:f0:8d:81:3d:ae:62:e8:09:62:8c:40:7b:77:07:2f:
2b:ab:7e:75:09:f7:e1:15:49:23:34:05:2b:b2:c8:7c:5b:3f:
14:ea:cd:61:b6:b3:6e:41:ff:f7:67:a0:c9:09:79:50:cd:21:
40:b2:05:ee:f1:8a:d4:a6:ca:66:b6:96:1a:3c:c1:2d:4e:70:
f1:6f:61:d2:12:d5:2f:ce:b4:54:dc:dc:88:b4:6b:8d:56:17:
6e:5a:5f:54:21:26:e0:3c:cd:98:84:45:6a:f1:7a:9c:6a:4a:
a7:40:95:53:41:ce:68:a7:6e:1e:f7:f4:89:ec:69:cc:0a:56:
a1:aa:5f:5c:17:48:1f:93:19:fd:07:7c:a4:9d:2a:1a:a8:4d:
f0:19:c2:f6:4f:35:33:f1:1c:da:67:a8:53:38:90:e4:6e:e4:
fb:fa:d0:63:66:69:42:6a:68:4f:b5:d3:6a:7a:b1:ad:ed:8c:
76:f6:bc:52:d2:32:7c:8f:86:02:02:ab:a0:16:38:32:7c:2f:
32:85:7d:71:67:f7:94:72:b4:01:77:1c:f6:6a:5b:34:f6:fe:
5f:7f:8a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 08:39:30 2023 by rpki-client on console-ams.rpki-client.org