Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8C5EC8D00FC711EE9B0BBA534AD9E6FC.roa
File: 8C5EC8D00FC711EE9B0BBA534AD9E6FC.roa (raw, json)
Hash identifier: RY0fpP+w0lgQTE1gAIoaBsyAPg6KPig9wMla1nlJ4Ak=
Subject key identifier: EC:37:C0:46:05:49:6A:38:21:03:EC:EA:AC:10:AE:73:10:B1:5C:CD
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0FCB
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8C5EC8D00FC711EE9B0BBA534AD9E6FC.roa
Signing time: Wed 21 Jun 2023 00:07:02 +0000
ROA not before: Wed 21 Jun 2023 00:00:59 +0000
ROA not after: Tue 17 Jun 2025 00:00:59 +0000
asID: 46844
IP address blocks: 154.16.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4043 (0xfcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 21 00:00:59 2023 GMT
Not After : Jun 17 00:00:59 2025 GMT
Subject: CN=64923f26-8f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3b:8e:03:12:4a:0b:08:50:71:6c:97:86:1b:
5c:22:dd:18:f4:f3:42:f7:c4:ee:eb:79:13:aa:b9:
cd:6c:ee:02:8b:0d:dc:8a:e1:fb:29:c9:fe:c8:97:
77:9d:60:f5:0a:e3:b6:3a:3b:5f:2b:ec:1c:3b:aa:
73:58:a8:69:04:45:bf:fe:e2:2d:42:5c:72:e3:e4:
12:a7:b4:ab:2f:01:8a:58:ce:b5:22:78:4c:6f:24:
54:ac:7a:3f:99:23:7b:39:df:71:2b:5d:2b:75:85:
9c:b2:c7:ea:78:bd:e8:78:7d:5c:4d:39:4a:6b:20:
3f:99:7b:36:ed:7f:af:ce:2a:23:ac:0c:3f:28:f7:
54:5d:92:0f:9f:51:2a:b5:f0:50:e5:88:22:33:4b:
82:39:45:0e:0b:0a:f7:f7:f6:4a:82:8d:39:1a:26:
6e:1a:60:4e:8d:5c:0b:64:6f:48:61:28:bf:98:b2:
0f:d7:ed:4e:4f:7b:df:3e:88:55:1c:b4:17:47:8d:
e8:de:ae:92:b4:41:0d:18:b7:3e:ac:79:c8:2e:20:
02:d3:61:c1:4a:1a:dc:db:74:45:60:f3:7b:16:10:
6c:7f:b4:28:ee:28:20:94:ad:e7:3a:5d:c8:b6:20:
4c:1d:97:06:d8:69:32:0a:84:95:9f:bf:ca:88:77:
42:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:37:C0:46:05:49:6A:38:21:03:EC:EA:AC:10:AE:73:10:B1:5C:CD
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8C5EC8D00FC711EE9B0BBA534AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.9.0/24
Signature Algorithm: sha256WithRSAEncryption
82:a3:93:35:87:c7:cb:97:f5:fc:c9:11:20:6f:cd:5c:8a:d4:
0f:d2:1e:34:0c:7d:3f:1e:0b:6a:17:32:01:86:37:c7:b0:56:
63:92:0b:34:16:34:d9:ff:25:74:63:56:8e:31:91:22:3f:d1:
e7:2d:3b:8d:3e:4b:cf:d2:57:20:14:3b:8a:0c:61:12:03:89:
fb:98:2c:ca:8b:02:ff:c1:30:a2:90:aa:2e:e0:06:bc:80:62:
9e:8c:02:d7:e1:f2:a2:6f:9c:0f:24:c8:35:4d:ed:aa:74:a5:
f5:41:53:8f:65:6d:e9:4a:eb:9d:7a:4a:3f:dd:f1:04:26:58:
09:11:f4:8b:ea:02:f3:ea:0a:57:85:75:59:32:6d:9b:ed:36:
5d:2e:de:32:c0:58:1d:c5:cf:33:24:68:fe:80:98:00:0f:2e:
f6:4e:5a:b1:19:d4:b9:82:9b:83:0b:61:f4:f5:43:61:e3:7b:
f9:5a:51:00:64:e9:69:e5:07:88:34:0b:91:d1:f1:e5:ff:80:
a2:1d:bb:a6:45:d5:75:b6:01:1d:0d:df:fb:c0:2d:af:83:5b:
dd:5a:8a:bf:11:f5:85:48:88:85:38:2c:ef:17:74:81:f0:25:
d0:61:e4:c1:09:ce:b0:40:f7:9f:a6:6b:31:58:1c:da:d6:90:
b1:c7:a0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 06:59:11 2023 by rpki-client on console-fra.rpki-client.org