Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8BC1F3F436D511EEA0CCC03D4AD9E6FC.roa
File: 8BC1F3F436D511EEA0CCC03D4AD9E6FC.roa (raw, json)
Hash identifier: WpKtWMb29GCVGIVlJZHgl2SxfIIufh45A2sc52Z54e0=
Subject key identifier: 71:FE:01:CA:29:09:8F:85:DA:5D:06:25:D3:3D:5E:3B:8D:AC:B2:53
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1127
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8BC1F3F436D511EEA0CCC03D4AD9E6FC.roa
Signing time: Wed 09 Aug 2023 16:55:30 +0000
ROA not before: Wed 09 Aug 2023 16:55:26 +0000
ROA not after: Sat 09 Aug 2025 16:55:26 +0000
asID: 834
IP address blocks: 154.16.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4391 (0x1127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 9 16:55:26 2023 GMT
Not After : Aug 9 16:55:26 2025 GMT
Subject: CN=64d3c502-4f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b9:97:10:29:7a:9c:d1:03:f4:32:39:c1:dc:
15:f4:34:72:87:fb:04:63:a5:70:5b:1a:93:c6:c7:
51:9b:b6:a8:48:dd:4c:10:6e:ed:fc:5c:6f:6a:e7:
20:d1:e0:dd:9e:1b:81:59:ad:29:ef:c8:92:a4:d0:
cf:73:22:ba:0a:1d:79:f5:b6:4f:f0:39:c8:36:da:
5a:d9:e8:fa:54:a8:69:5c:08:08:78:4b:3a:75:6a:
d1:47:29:96:ce:2d:53:c0:ec:fe:17:72:68:1a:95:
18:0e:41:6f:22:8d:3a:a3:d4:5e:c2:f1:01:7e:34:
87:59:e1:13:0d:12:f5:b3:7a:c2:77:77:57:ef:95:
24:81:b1:b0:46:00:db:de:04:a8:c7:32:cd:8e:60:
54:e0:6a:cd:dc:ab:c5:5f:b9:cc:21:74:1d:6e:86:
6b:a0:fc:d0:7c:3e:03:e4:cd:0e:00:5f:19:32:d3:
34:8d:6e:5f:0f:4b:8a:85:d4:96:a4:53:c1:cb:47:
f6:39:fa:b7:57:cf:4f:ec:ed:9b:81:3f:50:3b:36:
82:de:8a:fa:00:d8:d9:c9:b9:1e:05:b0:7e:0f:31:
cb:f2:1e:77:10:98:03:13:02:e6:05:a6:a3:4a:ef:
f3:49:a5:c4:36:bd:bc:1d:0d:4f:72:f2:47:5d:24:
3e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FE:01:CA:29:09:8F:85:DA:5D:06:25:D3:3D:5E:3B:8D:AC:B2:53
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8BC1F3F436D511EEA0CCC03D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.10.0/24
Signature Algorithm: sha256WithRSAEncryption
37:bd:4e:1e:36:24:f4:5c:d0:26:fe:e4:b0:d8:82:af:c8:5b:
a2:dc:2b:65:9b:a5:ff:7b:ff:66:58:b6:ad:31:a9:fc:70:4c:
fb:6d:de:67:d5:98:9c:e0:22:8e:57:74:b6:b9:e7:b1:1e:0b:
c0:11:88:ff:0b:41:29:fa:4f:47:10:84:db:35:4d:65:a5:19:
e5:a2:57:81:3a:7b:9b:1d:8a:71:82:e7:d1:f0:60:02:a4:4d:
81:39:c4:11:f1:1e:d0:52:86:cf:75:cf:ac:e0:18:60:d3:15:
03:82:a8:c4:d0:4f:cb:61:2f:df:e8:da:c5:a2:1e:b2:3e:0e:
bd:61:18:49:49:58:4c:19:82:08:3d:02:0c:8b:0d:54:6c:84:
19:3c:7c:dc:b4:a9:c3:ab:67:f5:b0:e8:ea:81:62:ca:03:6e:
0b:02:9e:86:7e:cf:63:18:86:0b:81:1b:a4:d7:ec:6d:83:7a:
0a:32:21:f8:d1:da:3d:a9:58:18:d4:16:a0:12:ae:a5:b6:5f:
15:b2:25:a3:56:68:f3:60:b4:b3:b9:11:78:a2:39:86:69:14:
a9:c3:2c:3e:8a:18:51:72:ba:3e:dc:55:6e:b0:e1:25:21:05:
15:7f:d1:65:2f:c4:67:58:cb:03:23:b8:f0:f9:89:64:08:6d:
65:f8:df:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 22 20:57:56 2023 by rpki-client on console-fra.rpki-client.org