Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/713D8D26216E11EEAA799D804AD9E6FC.roa
File: 713D8D26216E11EEAA799D804AD9E6FC.roa (raw, json)
Hash identifier: Q+gZkKvW7cY38oLgvhL/at+EpU2tnQQhJVDEKQ/MBLI=
Subject key identifier: E6:B6:04:4B:E1:40:AE:56:FB:30:D0:36:4B:27:86:E6:68:64:DA:F4
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 108B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/713D8D26216E11EEAA799D804AD9E6FC.roa
Signing time: Thu 13 Jul 2023 11:14:33 +0000
ROA not before: Thu 13 Jul 2023 11:14:29 +0000
ROA not after: Sat 13 Jul 2024 11:14:29 +0000
asID: 200482
IP address blocks: 154.16.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4235 (0x108b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 13 11:14:29 2023 GMT
Not After : Jul 13 11:14:29 2024 GMT
Subject: CN=64afdc98-0a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:08:df:3b:00:7a:8e:b4:3b:d8:44:d3:7a:07:
c6:ba:0d:5d:b0:f3:e0:07:a3:70:fc:2e:da:c2:62:
7b:bf:d2:f1:fc:3d:c4:ec:74:25:ec:80:cc:a0:f2:
fd:f5:58:bc:f4:24:c0:c2:ab:b0:f4:0a:e5:f3:f6:
3e:a3:4e:f2:13:6d:e4:16:3c:4e:ab:f9:10:8e:d9:
f2:9d:a5:88:20:7d:97:2a:bf:da:6e:24:1f:7f:dd:
27:48:f8:85:79:8d:58:5e:d9:d4:cf:72:d1:62:ee:
d0:79:1e:88:dd:03:a0:32:1c:df:59:90:48:0d:4c:
ed:6c:8e:04:94:2d:75:61:8b:c8:1d:17:88:62:b7:
e4:de:cb:68:41:29:fc:17:da:9c:45:f1:0e:49:e1:
fb:6a:17:db:fe:2f:93:46:c7:14:5d:31:60:7a:6b:
ba:af:9c:e5:94:dc:e5:69:6f:a6:3f:c7:bb:6f:52:
d0:58:0e:3c:87:06:8c:9f:2a:19:af:e9:57:f1:c8:
c5:02:8b:c3:90:f0:9f:bb:f1:72:5c:e6:69:03:af:
88:5c:1f:79:99:47:e1:a4:32:13:3b:c0:30:8a:86:
b9:cb:97:55:ee:ca:c5:72:5c:a1:2a:92:6b:e3:0d:
73:b4:57:41:88:07:8d:a9:73:fc:3d:01:b0:fc:ca:
26:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B6:04:4B:E1:40:AE:56:FB:30:D0:36:4B:27:86:E6:68:64:DA:F4
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/713D8D26216E11EEAA799D804AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.2.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:a0:1d:db:ba:30:20:0f:ab:b5:a5:6d:0a:ba:5c:b4:d1:e3:
c3:ca:d9:21:f7:ef:e0:09:0a:4b:e6:37:5a:d9:91:26:b7:aa:
02:dc:40:c2:c3:35:55:5e:4c:dc:be:78:9c:bf:e8:48:32:63:
f3:3c:d6:d2:a2:64:20:d5:37:c4:aa:39:15:45:4d:57:e7:7f:
cf:33:d3:14:0d:6a:5c:d5:ce:b0:6a:25:ea:71:22:74:7b:66:
aa:af:bb:d8:89:25:c8:dc:f7:66:03:39:e3:61:8d:39:24:cc:
60:2d:d1:5a:b9:6d:f0:74:f4:24:9d:52:3d:c7:a0:57:bd:2f:
a6:7f:be:80:83:b0:b7:29:cc:bb:24:b6:2b:43:28:17:7f:e1:
f0:81:a2:a6:6a:09:5a:e9:dc:95:67:e0:4b:61:c2:98:f9:93:
72:5a:bb:a9:fa:3a:bf:8f:eb:db:4b:a0:ad:a8:51:a1:a3:e7:
fd:dd:4c:2a:b3:4a:f9:9a:37:a2:71:81:16:44:38:aa:c1:06:
7b:d4:06:b5:14:16:e4:31:70:62:9d:09:99:85:9d:f5:d8:b0:
50:3f:e2:94:d2:a8:a8:88:40:d8:75:6f:85:0c:f5:5f:53:a4:
42:de:a2:d7:42:36:99:f6:3c:5d:96:48:13:ce:a7:ad:11:1b:
6f:ad:d9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 12:19:59 2023 by rpki-client on console-fra.rpki-client.org