Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/87B12AA6588011EE97EADF6C4AD9E6FC.roa
File: 87B12AA6588011EE97EADF6C4AD9E6FC.roa (raw, json)
Hash identifier: ewg9XvoYBxUJFOKJ5P535u0KeyIkFPxRRyXRrF2024k=
Subject key identifier: FC:00:D7:21:10:31:6A:2E:75:EF:10:99:8B:DB:72:0C:C8:13:12:91
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1266
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/87B12AA6588011EE97EADF6C4AD9E6FC.roa
Signing time: Thu 21 Sep 2023 13:12:35 +0000
ROA not before: Thu 21 Sep 2023 13:12:32 +0000
ROA not after: Mon 23 Sep 2024 13:12:32 +0000
asID: 213060
IP address blocks: 154.16.100.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4710 (0x1266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 21 13:12:32 2023 GMT
Not After : Sep 23 13:12:32 2024 GMT
Subject: CN=650c4143-c4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6e:56:25:43:85:5b:d7:f9:5b:f4:cf:92:26:
df:22:bf:e3:91:5b:99:bb:a3:74:bb:cb:91:cb:51:
1f:8e:4f:7e:83:fe:a5:98:8a:59:cd:88:18:02:8d:
44:dc:0f:99:a4:68:28:bc:ed:ec:c5:b6:5f:9e:d9:
9b:c4:ce:98:a6:3a:02:39:9f:07:56:8e:42:a1:50:
bc:bb:25:70:54:94:47:18:0e:e0:6e:a2:ed:2b:0b:
be:fa:e9:b2:90:cc:b5:50:46:a7:64:2e:4c:e2:b0:
79:7b:a9:3c:f9:2e:91:f5:22:51:40:de:14:80:a2:
f4:df:96:62:7a:f7:da:a3:a3:cf:3c:c8:5b:a1:3c:
82:b1:a3:c1:41:4d:04:a7:6d:88:b4:47:41:24:59:
ee:85:32:23:09:78:6a:38:14:a0:f3:45:61:89:09:
cd:44:78:2b:0b:47:79:2d:54:c3:9e:d0:ff:c2:26:
d6:63:ec:9b:95:e5:b1:ce:c4:e9:1c:67:4f:26:6d:
ff:db:10:ee:d3:30:eb:70:14:a1:7c:ed:6f:af:c7:
b3:da:61:50:ed:a3:3c:25:91:74:03:52:1c:57:41:
4a:84:80:6f:85:55:2d:39:2b:d4:07:a9:34:71:e7:
12:54:c7:d2:2c:e2:5d:e4:4f:a1:63:cf:82:b7:2d:
2e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:00:D7:21:10:31:6A:2E:75:EF:10:99:8B:DB:72:0C:C8:13:12:91
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/87B12AA6588011EE97EADF6C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.100.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:59:46:3e:46:d7:be:63:4d:3d:d0:76:cf:b0:b6:e1:32:43:
6d:ea:d3:82:2d:14:1a:e7:0a:7b:70:ba:35:62:83:c6:eb:69:
4a:4a:47:6d:41:68:f3:1f:04:9d:0b:c2:9a:85:2a:98:1f:4d:
ed:3a:f1:6b:7f:79:9b:3e:15:4d:22:3d:ba:6e:36:34:84:0d:
66:3c:ed:05:a5:35:d6:af:39:8c:c5:ef:af:88:99:9e:25:bc:
3f:c3:bb:72:ba:02:99:fd:78:c2:ce:3b:ea:32:47:a6:8c:21:
de:41:3e:fd:d9:53:a1:e3:56:c1:d8:ab:b3:54:af:2b:83:8b:
9a:d1:3e:d5:48:b7:04:82:58:c9:92:62:61:ab:93:20:87:b7:
38:4c:b3:7a:b0:e5:e0:25:cb:df:3f:2e:2b:7b:aa:b9:f7:9b:
73:93:ac:d5:88:b4:41:4d:65:5b:af:4f:4d:50:95:1d:29:c2:
0c:7a:12:88:05:7d:63:9c:7d:3e:f5:63:77:10:3e:ba:ec:06:
ea:d5:be:23:9b:68:35:5a:74:e9:08:68:06:25:c1:48:8e:13:
dd:3a:1f:5a:d1:27:ce:6c:1b:be:a2:d3:41:cb:cb:51:e7:50:
da:1b:13:3e:d3:76:a2:d0:33:fc:8f:f4:03:05:31:4e:4a:57:
f2:3d:19:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 09:08:50 2023 by rpki-client on console-fra.rpki-client.org