Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7780B2CEB43811EDA15CA39BF1222468.roa
File: 7780B2CEB43811EDA15CA39BF1222468.roa (raw, json)
Hash identifier: c6B8ZYRvWwoQXc1AgksauN7lI8a3fLQd2ZpnlQc4UTM=
Subject key identifier: C1:FD:AD:64:B2:F5:33:37:EF:46:F8:7D:C5:11:EF:AB:54:E7:95:75
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0BE1
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7780B2CEB43811EDA15CA39BF1222468.roa
Signing time: Fri 24 Feb 2023 11:43:34 +0000
ROA not before: Fri 24 Feb 2023 11:43:30 +0000
ROA not after: Sat 22 Feb 2025 11:43:30 +0000
asID: 61317
IP address blocks: 154.16.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3041 (0xbe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 24 11:43:30 2023 GMT
Not After : Feb 22 11:43:30 2025 GMT
Subject: CN=63f8a2e5-5490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:19:30:e7:72:b1:89:77:2e:70:81:a6:05:2b:
0a:34:77:f1:c3:40:f4:f1:61:6c:4c:91:9f:7f:5e:
64:eb:c6:6e:c8:57:a7:d5:40:0c:ea:38:03:30:7b:
c2:e7:45:dd:5d:10:ee:40:a2:ff:e9:5a:5b:2e:a5:
80:5a:1c:37:02:6a:10:40:bb:de:2a:4d:a8:fd:29:
0b:51:78:6a:97:60:f6:d0:7e:c7:69:d3:18:57:85:
40:f6:aa:15:34:69:d6:49:ec:a2:c8:66:a5:79:c5:
82:72:62:bc:8e:38:75:5b:cb:43:4f:4a:b9:1d:f8:
e2:07:2c:33:39:29:56:7b:76:0e:88:97:da:67:f6:
ab:89:9f:29:bf:ae:0b:ba:0b:d9:37:dd:0a:73:39:
39:1a:0d:ae:3b:0c:6a:3c:52:a6:2f:b3:0b:2e:35:
6c:77:c5:86:fd:aa:ac:f5:87:fe:22:46:35:a9:d0:
6c:ab:46:ca:55:68:24:ee:ac:de:18:fe:74:b9:86:
03:29:4e:f4:a4:e5:3f:66:72:a8:8e:61:6a:59:4d:
9f:7a:25:1f:d5:dc:a1:35:a5:38:e0:9e:8f:5c:c5:
b5:65:2b:ac:19:38:bf:b1:9b:fc:01:fe:83:be:d5:
88:fe:bc:6c:a4:7c:29:28:84:89:92:ce:5a:31:22:
d1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FD:AD:64:B2:F5:33:37:EF:46:F8:7D:C5:11:EF:AB:54:E7:95:75
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7780B2CEB43811EDA15CA39BF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.6.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:88:43:5e:9e:36:d7:e0:b4:9a:cc:a0:79:a2:17:79:ed:71:
3a:83:c8:80:4f:c5:22:8a:af:38:b7:50:58:95:43:5e:1a:83:
ab:2b:1a:1a:b4:13:fe:72:2b:be:36:34:33:52:2d:0a:56:46:
4d:11:f8:f4:a6:93:6b:76:d9:f6:61:3b:5a:fb:e6:f8:74:52:
01:44:76:71:21:1c:e8:e4:73:8f:ce:31:51:35:a7:93:0d:ce:
53:97:7b:65:f0:3a:63:b4:6a:d0:22:0c:f8:bd:c7:8b:48:7c:
89:36:fe:3a:ad:16:49:52:a7:a5:34:0c:08:19:55:c7:ce:a2:
0b:c4:64:e8:2a:36:4f:1a:6b:4a:97:22:98:9e:74:fa:7c:09:
ff:af:95:b9:b4:d6:a1:68:29:e0:d3:da:66:e8:c0:0b:27:2f:
44:76:69:e6:b6:ad:f4:5a:a7:3e:64:ad:20:b2:0d:2e:28:bc:
f7:a3:d4:a5:37:67:5d:cd:25:f7:10:f0:5b:09:a3:6c:7f:69:
05:48:30:7e:bc:a3:42:4e:a0:d3:23:fe:51:c7:e3:c2:a4:96:
33:7b:d1:b9:bd:38:9b:00:cc:19:67:96:b4:ab:b5:04:66:44:
71:57:fc:a7:46:af:84:1a:79:52:d0:16:de:50:48:8e:1f:85:
64:9e:6e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org