Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/77031E64009F11EE857BD97C4AD9E6FC.roa
File: 77031E64009F11EE857BD97C4AD9E6FC.roa (raw, json)
Hash identifier: SF6p5bBsk1XyByo4h1ef0UxeXLGTAzPb55ppYX9okwA=
Subject key identifier: B1:48:39:82:75:4B:03:47:D1:E9:7B:00:7B:19:39:83:FD:DF:38:98
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0EA8
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/77031E64009F11EE857BD97C4AD9E6FC.roa
Signing time: Thu 01 Jun 2023 17:12:19 +0000
ROA not before: Thu 01 Jun 2023 17:12:16 +0000
ROA not after: Sun 01 Jun 2025 17:12:16 +0000
asID: 208949
IP address blocks: 154.16.23.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3752 (0xea8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 1 17:12:16 2023 GMT
Not After : Jun 1 17:12:16 2025 GMT
Subject: CN=6478d173-8d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3d:5a:a1:fb:83:0c:06:bf:9f:f9:67:86:34:
c8:aa:da:ea:f5:1b:07:4d:b5:36:ff:64:4f:45:ac:
a0:d8:3e:5e:da:1b:9f:cd:d5:4d:27:54:7a:08:7b:
b8:0a:bc:b1:f5:ad:4e:18:67:cb:01:ba:3a:34:ab:
08:d5:6f:45:2c:1b:70:94:e9:8c:3d:20:d2:69:09:
b1:e0:f8:76:b1:23:06:54:36:a6:e5:60:a8:27:64:
a9:93:9b:39:38:10:87:2f:c5:65:4e:8a:74:47:1f:
cb:31:81:1b:54:f2:05:bc:cd:c3:87:b9:05:aa:47:
c6:cb:98:11:17:1a:7a:fb:c9:89:9c:bc:a7:88:e7:
34:52:be:3f:28:af:86:ac:d7:72:35:d3:5c:89:77:
ac:03:8a:82:9b:7b:92:f5:1a:b2:57:32:55:c4:68:
e1:b8:e3:9f:11:23:4b:62:4e:1a:15:ba:ce:37:5e:
e2:c6:c8:e3:ae:8d:ab:89:b8:d1:5f:1a:0b:44:a9:
a1:32:e8:29:2d:95:68:e5:e3:9c:0b:67:84:c4:0f:
62:b2:22:a4:da:4f:e5:d5:4f:12:6a:e2:e1:63:a2:
97:76:88:6b:56:d3:9a:7b:be:1e:45:18:e6:23:2a:
35:0b:7c:5b:f5:12:43:b7:da:36:e2:bc:77:79:4d:
6c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:48:39:82:75:4B:03:47:D1:E9:7B:00:7B:19:39:83:FD:DF:38:98
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/77031E64009F11EE857BD97C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.23.0/24
Signature Algorithm: sha256WithRSAEncryption
28:7b:e9:4f:c9:ae:1e:bd:80:0d:e0:cb:47:4f:7a:e9:37:23:
f1:dd:50:19:c9:e0:87:2a:65:d1:1a:ac:92:61:42:63:8d:7d:
87:3d:7b:6d:64:f2:02:2c:dd:0c:a9:7b:9f:e2:c2:d3:cc:2e:
f9:8a:8e:35:5d:1f:9b:af:7f:8b:d5:4e:7b:e4:1e:04:ca:ef:
53:37:13:58:96:61:1d:a9:37:e5:5d:52:9e:5a:b6:df:bd:2a:
52:f5:c3:ac:1d:af:6b:66:c5:3f:1a:b6:e3:2e:79:ac:69:16:
2d:2f:82:93:d0:69:6f:e8:d7:70:b4:64:70:6b:af:b6:7d:aa:
60:f1:d4:29:83:d8:2c:76:6e:52:66:a1:04:f7:f9:58:dc:61:
d2:83:a4:de:c6:8b:9f:2d:62:2e:87:fe:6d:ab:49:9f:02:90:
1b:d1:c0:e5:d6:1d:2b:dc:fd:a7:a4:79:cc:d8:9f:a3:2b:39:
db:54:40:db:41:89:ea:d8:a4:a3:d3:23:0e:c3:e1:1d:24:21:
33:79:06:17:a6:60:36:01:19:11:aa:48:59:00:77:1a:60:2e:
57:64:9e:68:ea:0b:ad:fe:26:39:e1:42:6c:ae:66:a9:a2:a2:
15:92:f8:77:d7:5a:46:d7:99:91:dc:aa:d4:f9:7a:20:f7:d3:
af:bd:f3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 07:25:04 2023 by rpki-client on console-ams.rpki-client.org