Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/78BFDB0405FC11EEA03AE8494AD9E6FC.roa
File: 78BFDB0405FC11EEA03AE8494AD9E6FC.roa (raw, json)
Hash identifier: rOGqP8GFOXoeUbPXNtiS4X1U5t4VGgR+/Zsc9hYKm/0=
Subject key identifier: B6:9C:BE:9B:32:2A:B1:88:68:C2:5D:91:79:F5:D0:78:42:75:6C:C7
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F08
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/78BFDB0405FC11EEA03AE8494AD9E6FC.roa
Signing time: Thu 08 Jun 2023 13:00:41 +0000
ROA not before: Thu 08 Jun 2023 13:00:38 +0000
ROA not after: Sat 07 Jun 2025 13:00:38 +0000
asID: 49999
IP address blocks: 154.16.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3848 (0xf08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 8 13:00:38 2023 GMT
Not After : Jun 7 13:00:38 2025 GMT
Subject: CN=6481d0f9-d7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e9:c9:35:9c:75:3f:d0:e1:2c:88:75:bc:87:
7d:4f:e7:49:57:34:0c:18:f1:b5:c8:61:29:41:4e:
64:51:15:7f:e4:bc:3c:a1:6e:ed:78:01:b9:72:3e:
72:af:46:81:c2:93:52:16:20:d1:d7:ed:d3:ba:4b:
f2:1a:5e:60:45:f9:88:ff:9b:3b:21:4d:06:14:ac:
df:1c:b7:e2:4a:bd:34:03:78:56:60:7f:48:99:d8:
ee:ee:80:1f:ad:2b:54:02:08:86:47:6a:6f:53:e7:
26:d9:ad:4e:b8:8f:dc:55:bb:c8:32:e1:0d:fd:d7:
ad:34:f8:60:da:69:e0:11:db:a0:08:b4:a2:e0:2b:
74:97:3f:ac:6b:ed:89:eb:d1:6c:7d:62:f2:5f:6d:
ed:d2:19:f5:5a:cd:f2:a6:9d:1e:ae:15:67:66:5d:
67:65:fc:be:6b:c0:f8:5c:1e:53:ec:be:9f:2f:90:
22:1f:d4:f9:e7:43:ea:b8:7b:f9:5e:e6:bd:f2:31:
4b:f0:5a:a6:54:ce:ec:d6:3b:df:7d:20:bc:39:9a:
d1:27:66:5d:03:ad:43:0c:76:8e:44:fc:6c:00:6f:
77:d0:89:d5:f0:0e:26:93:36:bb:95:e1:70:d6:e6:
e0:9a:35:2a:71:1a:be:f3:a3:2a:94:c0:db:a9:3d:
f9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9C:BE:9B:32:2A:B1:88:68:C2:5D:91:79:F5:D0:78:42:75:6C:C7
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/78BFDB0405FC11EEA03AE8494AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.18.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:f7:ae:72:25:59:29:5a:e5:fa:da:65:db:dd:85:30:c8:5a:
15:86:1e:f1:8f:49:b8:1c:b1:46:bb:44:94:cd:21:7a:b2:08:
82:be:5f:3d:8e:50:e0:64:a2:15:86:8b:21:d1:5e:73:74:f3:
bf:62:f5:44:ce:7e:b6:6c:e1:42:78:80:99:e5:52:9d:08:d1:
cf:75:52:9a:9e:8a:57:40:a6:f3:be:fc:65:df:21:e8:3b:e2:
5f:72:30:a0:04:44:4b:15:56:a1:6a:be:4f:74:e6:47:39:3d:
94:f7:e2:14:de:86:96:73:7d:b0:f7:7f:84:37:3f:a5:26:f9:
cc:df:2b:b5:6e:9b:54:32:1d:b4:46:33:e2:62:2a:7f:b8:bb:
3c:89:5c:de:80:6f:0f:7e:fb:b0:9f:3f:3c:77:ea:1d:fe:10:
4f:c2:6d:61:b1:1d:e1:3b:aa:3e:36:7b:94:44:44:f0:55:46:
54:af:0c:ee:57:9a:0e:61:42:6d:34:04:f3:f9:5d:ac:5a:ae:
24:ba:59:b3:9d:e7:04:f1:47:03:ac:67:3a:a7:43:14:bf:56:
f8:f3:09:7b:6d:37:bd:4d:52:4e:22:80:e6:83:5c:f0:05:4d:
2b:47:0c:b3:9c:1b:39:df:b9:f7:1f:f0:70:b0:e2:ba:c9:76:
2a:3c:23:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org