Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7ABC87E87A1B11EEA556B61A4AD9E6FC.roa
File: 7ABC87E87A1B11EEA556B61A4AD9E6FC.roa (raw, json)
Hash identifier: 1UmqEpwLrQWCgLx7zChEWPl7+2I5MAZDyBJ1tljn450=
Subject key identifier: B4:EC:65:84:30:8B:6A:E1:43:05:84:3F:9D:3C:E0:14:A9:41:86:7F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1302
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7ABC87E87A1B11EEA556B61A4AD9E6FC.roa
Signing time: Fri 03 Nov 2023 07:34:54 +0000
ROA not before: Fri 03 Nov 2023 07:34:51 +0000
ROA not after: Mon 03 Nov 2025 07:34:51 +0000
asID: 213060
IP address blocks: 154.16.24.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4866 (0x1302)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 3 07:34:51 2023 GMT
Not After : Nov 3 07:34:51 2025 GMT
Subject: CN=6544a29e-1eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:72:42:0f:e3:ba:a9:bf:88:18:5d:d7:0e:b5:
63:25:e4:3a:61:0d:d1:39:b0:b4:bb:70:1b:8c:1c:
26:65:df:4f:54:0c:17:4f:e9:7a:a8:86:a2:e5:c0:
2d:9f:78:fb:b3:04:c8:c5:cd:ae:04:a1:dd:22:11:
71:4f:02:c2:7d:e6:a9:fa:0f:04:15:a3:d6:a4:0d:
2b:b1:ed:8d:68:c6:51:8a:ec:93:a1:ab:85:e3:f2:
51:7a:4b:5a:bc:78:97:3e:4f:b0:29:77:36:cb:6b:
7b:8c:0e:85:d0:04:ab:f9:45:76:c3:45:64:09:a7:
0a:49:ae:e3:63:33:ed:0b:cf:80:45:59:8c:2c:0e:
e9:74:59:60:58:e6:6e:94:70:ec:c3:6c:95:ff:b5:
23:ea:a8:2c:b0:f3:b6:6c:b8:9a:68:39:03:0e:84:
9f:bc:98:94:2e:d9:8a:43:5d:0f:c7:68:9c:59:2e:
0b:b4:e6:ea:0e:b6:83:c5:7e:4c:ff:bd:11:e1:fb:
60:65:8c:2d:ff:4c:24:01:d7:31:7e:25:59:9d:7a:
93:88:9d:ba:f0:9c:45:62:63:23:fb:7d:d3:d2:08:
71:78:f3:e5:40:14:98:6a:a4:9b:d0:5f:59:6c:8e:
50:7d:87:5a:f4:b3:ea:5f:3a:24:30:ba:84:18:7e:
9c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EC:65:84:30:8B:6A:E1:43:05:84:3F:9D:3C:E0:14:A9:41:86:7F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7ABC87E87A1B11EEA556B61A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.24.0/23
Signature Algorithm: sha256WithRSAEncryption
55:ff:b6:9d:73:43:f7:e3:6e:06:e5:c7:8c:aa:22:81:68:fc:
55:7a:73:50:19:0a:e3:b0:2d:3b:6f:64:36:82:66:30:bf:17:
00:5e:c6:24:33:c1:c3:62:f9:42:12:a1:2c:27:30:41:b5:e2:
cd:43:88:1e:71:d3:14:db:74:11:c6:6a:48:98:f6:f6:6c:a5:
07:be:1c:ec:73:02:04:f0:05:0b:01:7a:43:30:58:3b:a4:6d:
9f:97:1e:a9:58:65:e9:af:fa:50:78:97:a0:e8:af:cb:f4:89:
09:70:47:8e:b4:92:3e:e3:88:c1:44:8a:3f:82:fe:bd:64:e3:
dc:18:ab:cf:8a:57:e0:80:33:29:42:a3:5f:3c:e2:0a:45:19:
8b:ac:17:ac:16:a0:21:8d:f0:55:04:8c:b9:cc:f7:7a:8b:9d:
7e:aa:31:7a:fa:73:db:36:aa:dc:21:04:89:5f:22:73:37:c5:
a0:69:ef:01:23:c3:3a:bf:4d:2f:0d:8b:da:ee:d1:97:1f:2c:
b9:97:ba:9f:27:f7:b7:93:ab:52:41:a3:5b:ed:fb:dd:d3:cc:
28:0a:1d:14:b7:e6:e2:89:17:fd:34:f6:02:ba:0e:f7:88:09:
be:c5:78:a1:e0:83:86:82:80:4c:a6:39:23:34:1d:26:2d:80:
f6:37:58:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 6 10:35:12 2023 by rpki-client on console-fra.rpki-client.org