Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7EE6FDA0077311EEA4F5A7364AD9E6FC.roa
File: 7EE6FDA0077311EEA4F5A7364AD9E6FC.roa (raw, json)
Hash identifier: tPSPa9h6veyvS1WcuyoDaYSu9SwzkvXDFdhXLh7aRrs=
Subject key identifier: C2:59:93:20:8E:4E:9B:04:19:74:B6:B6:7C:42:76:B2:F7:3B:27:93
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F1C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7EE6FDA0077311EEA4F5A7364AD9E6FC.roa
Signing time: Sat 10 Jun 2023 09:45:13 +0000
ROA not before: Sat 10 Jun 2023 09:45:07 +0000
ROA not after: Tue 10 Jun 2025 09:45:07 +0000
asID: 199035
IP address blocks: 154.16.27.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3868 (0xf1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 10 09:45:07 2023 GMT
Not After : Jun 10 09:45:07 2025 GMT
Subject: CN=64844629-d136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:53:5d:d9:86:c7:1b:c8:61:29:95:d6:b4:
20:d6:ca:cf:80:b1:4a:c9:78:a8:b9:6c:d4:21:08:
ed:84:93:a4:21:8c:78:ac:79:89:30:66:18:8e:87:
bf:bc:10:16:a6:1c:93:20:db:0c:70:d9:3f:74:3f:
9f:ab:05:e4:cb:c3:f2:f0:06:05:8d:fb:1d:a8:6b:
95:49:6a:2d:7d:6a:13:a5:7d:62:90:93:4a:81:38:
62:d6:ab:8a:14:00:46:33:af:81:2a:12:5f:37:ac:
33:76:99:bb:42:6e:93:9f:f1:79:b9:b6:91:ce:83:
3c:fb:66:93:b6:5d:6a:59:48:11:90:df:f0:16:64:
ca:b2:d3:56:8e:2e:49:7e:0d:67:8e:a8:72:c1:14:
8f:b6:81:ca:d8:b5:2c:a9:d6:90:3e:1f:04:22:1a:
e4:92:4b:da:73:c6:d0:1a:cb:d7:1d:58:ee:52:80:
1c:5f:d9:c8:38:d8:ae:d6:45:c6:73:84:2a:dd:b0:
a1:0c:9f:1f:f2:0c:65:54:1b:59:85:94:15:2a:a8:
2f:77:0d:d4:b8:83:92:d4:d9:ea:40:35:b8:95:a8:
9d:3f:e6:4f:e7:5a:17:b7:8b:f3:03:95:6b:c9:4f:
3c:3a:7e:a3:91:62:cb:3d:4b:03:6e:98:4e:11:e5:
71:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:59:93:20:8E:4E:9B:04:19:74:B6:B6:7C:42:76:B2:F7:3B:27:93
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7EE6FDA0077311EEA4F5A7364AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.27.0/24
Signature Algorithm: sha256WithRSAEncryption
51:59:6c:cf:3e:ae:12:fb:97:db:ad:d7:4a:40:02:7b:fe:1a:
12:c7:2f:a4:81:8a:f7:52:36:08:91:0a:0f:b4:59:65:71:74:
cd:d3:78:f1:23:7b:60:3d:03:02:96:91:2a:42:66:86:25:60:
d4:a9:ef:07:c9:95:30:67:ab:7e:3d:de:50:90:92:de:a2:4c:
36:f4:82:2e:1d:3d:46:97:48:9b:08:8b:d0:0d:53:61:11:b8:
1f:f7:0e:59:cf:be:5f:82:c2:d9:22:bd:f6:35:4b:28:87:62:
95:d5:9b:ac:56:a8:d6:6c:d9:ec:b2:49:2e:8c:46:bb:0c:b0:
16:e8:33:c8:8a:29:2c:f5:e7:e2:77:58:83:37:f8:d9:c7:bc:
d7:d1:b5:8e:2b:ad:a1:a9:4f:3a:a7:15:b5:86:59:dd:55:71:
35:74:b6:35:91:0f:33:1b:be:de:6b:59:41:34:76:31:ca:c8:
fd:74:24:5c:3d:c0:14:29:61:74:22:6e:c2:42:ca:9d:07:65:
cb:e3:3c:5e:06:96:ec:cb:fa:2b:b6:b9:06:8b:c9:6a:af:ce:
fa:39:12:7f:19:3f:6e:d7:ad:09:1b:db:52:b2:d2:17:40:e6:
47:65:f3:bc:b1:23:27:68:f3:b2:c1:7b:d1:cb:d6:0c:14:e6:
ad:48:d1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org