Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/760332163D7511EE8B3ECC4B4AD9E6FC.roa
File: 760332163D7511EE8B3ECC4B4AD9E6FC.roa (raw, json)
Hash identifier: tRH63fvUmg8s4r3+Y8YIKV90nTGzSzN0kTmIF/BGTfA=
Subject key identifier: FD:FB:B5:7A:51:37:40:4B:5F:A9:E7:CA:87:BD:0E:91:8A:4D:56:D2
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 118D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/760332163D7511EE8B3ECC4B4AD9E6FC.roa
Signing time: Fri 18 Aug 2023 03:15:20 +0000
ROA not before: Fri 18 Aug 2023 03:15:16 +0000
ROA not after: Mon 18 Aug 2025 03:15:16 +0000
asID: 834
IP address blocks: 154.16.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4493 (0x118d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 18 03:15:16 2023 GMT
Not After : Aug 18 03:15:16 2025 GMT
Subject: CN=64dee247-e533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:91:1b:b0:5b:90:12:c8:6d:f0:04:5c:70:f9:
9a:8f:76:a4:96:cf:1f:de:d5:12:c6:8d:a3:73:88:
34:23:ff:36:24:03:48:bb:cb:b0:cb:03:66:71:3e:
69:3f:9f:e8:f3:83:bc:54:38:53:3d:1a:f7:2c:3c:
b1:f8:c9:32:64:d9:cf:6d:41:e2:8d:74:04:4a:ec:
75:2b:9f:42:48:b2:14:f1:1a:77:b2:b0:97:2c:4c:
e7:ca:32:f1:71:92:a9:91:47:e2:d9:fb:e8:80:28:
51:b3:c1:12:23:63:48:7a:98:73:68:2a:9a:68:7a:
12:96:70:84:32:9d:7b:f4:df:5e:fe:dc:0e:75:a2:
62:ff:70:a8:10:80:1a:18:91:43:0c:90:02:1d:d7:
7e:f7:d2:a0:9b:e8:13:d8:02:c5:6e:cc:83:3c:da:
8a:7c:ae:07:d2:b4:48:3e:c3:fc:23:30:0a:13:fb:
ab:94:ff:38:6f:3b:f2:be:5d:9b:82:9a:4e:67:92:
50:96:79:66:bb:1d:68:fc:1a:3a:5f:b9:a3:c5:66:
7a:92:c0:bf:99:ae:2b:4a:27:78:d1:96:03:c0:e0:
86:87:b5:59:1b:ad:0a:eb:03:e8:e0:6f:9f:b5:54:
7d:aa:cd:f0:1d:b6:95:4e:f3:e5:58:d6:60:07:cc:
6d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FB:B5:7A:51:37:40:4B:5F:A9:E7:CA:87:BD:0E:91:8A:4D:56:D2
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/760332163D7511EE8B3ECC4B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.204.0/24
Signature Algorithm: sha256WithRSAEncryption
be:83:f4:c7:8a:bd:c3:ec:d9:7d:b6:67:e0:70:db:ff:26:15:
db:d6:b6:29:40:2f:a8:d5:40:f2:70:88:37:af:cc:08:a4:61:
a3:61:af:93:1e:ef:fe:78:fe:d1:8f:f6:ad:a9:20:40:0d:4a:
7d:53:2f:5e:64:40:54:1b:35:2d:8b:4a:ec:be:58:e7:56:2f:
eb:55:56:b3:6c:f7:4e:5b:c0:4f:28:c3:00:20:20:07:e2:bc:
0f:6d:fd:0b:2d:07:75:c7:61:23:87:00:ba:6b:c1:0e:3f:53:
6f:bd:aa:ee:a8:f6:0f:6e:91:3e:37:3d:94:dd:32:a9:ae:51:
98:87:c9:5c:6b:8c:42:84:89:05:8d:ec:95:3b:56:a7:9d:4b:
e6:01:39:54:81:6a:89:05:a8:84:6a:0b:22:c7:ba:21:3d:54:
e6:c3:a9:74:ed:ad:de:62:6a:ea:14:f1:12:87:75:72:71:ac:
c8:7c:60:ff:93:f2:e2:e6:26:f6:7a:96:84:45:b3:85:d1:dc:
b0:c0:b2:9d:9a:66:86:e6:82:94:89:dc:c4:42:58:df:5c:d2:
0f:9e:14:ec:af:22:5c:74:3f:86:dc:db:b5:a1:1c:25:73:0a:
4a:d9:a7:1e:6a:07:aa:67:ad:aa:be:39:bd:ce:93:c5:71:73:
5d:2c:04:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 25 07:44:15 2023 by rpki-client on console-fra.rpki-client.org