Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/711EE74609B211EEB02C04694AD9E6FC.roa
File: 711EE74609B211EEB02C04694AD9E6FC.roa (raw, json)
Hash identifier: DbhcaDY2Nzb5YVOr2ubvP+1lQYpcNttDnyslFoy6LsQ=
Subject key identifier: DE:11:22:21:49:F9:35:5A:DB:84:64:3D:22:E4:B5:25:82:0F:68:24
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F3B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/711EE74609B211EEB02C04694AD9E6FC.roa
Signing time: Tue 13 Jun 2023 06:20:50 +0000
ROA not before: Tue 13 Jun 2023 06:20:46 +0000
ROA not after: Thu 12 Jun 2025 06:20:46 +0000
asID: 6939
IP address blocks: 154.16.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3899 (0xf3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 13 06:20:46 2023 GMT
Not After : Jun 12 06:20:46 2025 GMT
Subject: CN=64880ac2-b73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:11:d7:4c:ae:32:53:2e:ab:00:b0:e0:25:f6:
1c:b2:ba:cf:83:bd:94:95:d1:e0:8d:86:ad:f1:f5:
ab:49:7b:d4:04:9c:25:f1:95:56:8a:19:86:20:2b:
5a:56:9e:62:64:a2:9b:bb:b2:4f:2a:76:0f:9e:da:
e5:ec:73:7b:91:42:f4:63:bf:43:a2:ab:7f:88:b7:
a4:8f:0d:14:99:ff:9e:0c:7d:b3:f7:a2:44:d4:62:
99:6c:f9:f7:2b:6b:5a:e9:49:4f:cb:9c:34:f1:ae:
b9:c1:8c:94:9b:a4:57:1c:f1:96:13:9d:26:cd:ce:
9c:27:62:23:6f:2a:62:08:58:1c:98:6f:f6:aa:8f:
5b:a9:75:e6:61:fe:2a:d4:59:fd:10:fd:8a:71:c8:
24:13:40:c1:13:b4:25:cb:16:87:19:75:be:be:61:
38:ff:2b:d0:fd:fc:47:19:63:23:ae:00:ed:fd:42:
49:a6:5a:f8:ec:6a:fa:b2:f0:2c:69:45:c6:b2:b1:
11:ae:89:71:7c:b2:da:05:35:a6:68:15:09:a6:4d:
a5:78:a5:28:73:03:c3:fa:b1:b4:13:75:63:3f:aa:
05:22:f0:f8:ef:64:39:24:4c:7f:8f:8c:fc:85:eb:
01:2a:f0:ed:1d:8f:fd:a4:d8:95:6b:a7:5d:3f:cf:
b0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:11:22:21:49:F9:35:5A:DB:84:64:3D:22:E4:B5:25:82:0F:68:24
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/711EE74609B211EEB02C04694AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.45.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:80:04:7d:1e:e2:8d:65:b2:81:61:06:0b:67:84:5d:2b:30:
fb:e5:40:8e:38:8b:43:2c:45:aa:7e:6e:8c:56:44:ad:7e:89:
c6:de:10:04:dc:b8:e8:0d:b1:56:ce:a3:a9:f2:67:ec:b7:21:
3f:4d:0a:7a:ec:05:4a:8d:86:1e:b8:2d:01:c4:c7:07:bf:f6:
73:52:53:a0:77:31:be:ba:19:4d:48:7a:c3:c5:bf:eb:9e:fb:
a3:db:ed:ce:41:5c:00:3a:95:8b:3d:0e:22:c0:f2:f5:70:64:
c7:52:63:cb:b0:18:fd:78:3e:a6:5f:6b:b3:4e:06:e6:73:62:
05:f3:45:2f:ae:57:74:8b:f0:eb:a7:f3:41:e4:32:89:cf:0f:
f1:86:09:84:7f:ad:48:07:d2:73:33:86:f7:d5:01:c7:98:0a:
b5:e5:7f:3b:bf:4f:89:d6:c8:3d:97:ef:66:05:2d:5d:bf:c2:
15:a2:89:d2:12:fa:c6:af:e2:0a:b6:50:45:51:78:e5:77:c6:
0c:8b:0c:d1:18:80:de:4b:f2:f5:0e:db:2e:79:10:05:1c:c4:
af:5e:f3:af:22:04:b6:5c:a7:36:99:39:5b:70:b0:e4:ba:6e:
1a:dc:6b:1f:38:c7:03:db:08:c9:97:a3:1e:12:41:0c:04:3c:
f5:7a:1d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 12 06:36:07 2023 by rpki-client on console-fra.rpki-client.org