Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7EBC31DCEE5611ED964691404AD9E6FC.roa
File: 7EBC31DCEE5611ED964691404AD9E6FC.roa (raw, json)
Hash identifier: dzo+0QdE7LIKruYjJUryvbh5C3DvMfpm+l+sEXCTZdQ=
Subject key identifier: E6:39:E4:C9:B8:84:CA:BF:BD:B0:E5:14:51:AE:AF:46:18:B8:E4:8D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0DA6
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7EBC31DCEE5611ED964691404AD9E6FC.roa
Signing time: Tue 09 May 2023 10:44:38 +0000
ROA not before: Tue 09 May 2023 10:44:33 +0000
ROA not after: Thu 08 May 2025 10:44:33 +0000
asID: 834
IP address blocks: 154.16.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3494 (0xda6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 9 10:44:33 2023 GMT
Not After : May 8 10:44:33 2025 GMT
Subject: CN=645a2416-b5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:78:d3:d0:48:09:97:db:9e:dd:1c:4a:26:5a:
d2:e1:36:c9:38:3f:ac:84:d0:b8:7b:d2:6e:e5:c0:
82:bc:39:67:41:ed:4f:f0:d8:bf:58:e3:7b:36:86:
10:6a:ac:15:49:94:c2:d8:4c:58:bb:2c:56:00:bd:
c5:eb:92:3a:05:03:61:90:98:f4:0c:a6:1a:0e:7e:
58:fc:b8:e6:3d:a4:4f:a2:4c:9f:85:af:1c:98:db:
94:fd:b9:30:b6:33:69:de:5c:39:a2:c7:aa:1f:2a:
88:30:25:3d:34:3b:46:13:c1:5a:b3:18:b5:03:72:
6c:76:58:77:0b:71:3a:4f:a9:a7:e6:31:70:60:3b:
95:10:f1:c5:04:a9:57:b0:67:46:05:88:95:2d:8a:
07:53:76:e7:d2:ab:ef:a3:e2:f8:fa:a0:d0:3e:fb:
26:c9:ab:b2:7a:a7:d5:cc:04:fa:05:5d:ef:19:fe:
23:86:e3:17:3e:67:54:1e:d3:14:b1:b4:75:a3:f0:
a4:51:a2:80:77:ed:6d:78:db:bd:b4:d5:d5:2c:ae:
4e:9f:ea:d1:7b:3f:67:4b:d6:ce:b1:82:6f:46:29:
81:bb:cf:52:d8:47:0d:f5:e9:f4:46:c0:5f:78:4f:
69:ce:9c:11:22:db:8f:56:fb:39:46:e2:12:ec:4f:
87:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:39:E4:C9:B8:84:CA:BF:BD:B0:E5:14:51:AE:AF:46:18:B8:E4:8D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7EBC31DCEE5611ED964691404AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.107.0/24
Signature Algorithm: sha256WithRSAEncryption
54:b3:cb:26:ff:04:ac:f4:10:24:16:04:c6:4e:2d:76:63:72:
5f:61:0a:54:8b:7b:78:ef:d7:33:29:c4:f4:53:98:6d:e6:48:
e0:39:85:21:ab:e7:7e:f9:4f:d6:f7:28:d2:1a:4d:09:03:f6:
96:44:31:0d:a9:de:66:a4:83:5e:09:f1:6c:24:5e:08:fb:d4:
e0:72:9b:f8:76:e7:c1:6b:5e:49:c7:c3:47:29:d3:45:82:23:
d7:20:f6:41:d6:d8:c2:77:62:64:fb:2c:7e:b2:84:0f:39:62:
68:78:7d:23:b4:6c:75:30:f1:ee:7d:d1:35:61:8b:f9:93:48:
0a:66:9a:c4:86:44:c2:f9:ae:64:c8:cd:ad:1d:45:01:60:ad:
1a:ed:40:9f:03:a6:fa:b6:1c:87:9e:a4:be:b3:90:7b:fc:af:
a4:02:77:ac:aa:fe:d7:08:18:7a:0d:5b:21:4e:c3:14:91:56:
a8:36:5e:9f:dc:18:60:2f:28:6b:af:c5:1d:4b:e2:70:9c:fd:
b6:58:a4:e0:0d:3a:5a:e8:25:da:c3:e9:e2:cf:df:c9:f3:c4:
d8:ea:de:5c:76:8d:24:ce:90:84:77:b2:04:82:a9:95:d4:c6:
b1:49:e5:d0:40:99:8b:1c:f9:3e:8d:8a:cc:7e:5d:ac:21:41:
08:8c:e9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org