Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/948D452C884911EEBD4003414AD9E6FC.roa
File: 948D452C884911EEBD4003414AD9E6FC.roa (raw, json)
Hash identifier: mxYT6i3E/iVE4+nwTH1juu1q0FTafiG0NPnaiNe7y2w=
Subject key identifier: A2:9A:13:16:90:44:46:8E:84:80:49:29:49:65:BE:65:1E:A8:02:B9
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 132D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/948D452C884911EEBD4003414AD9E6FC.roa
Signing time: Tue 21 Nov 2023 08:40:10 +0000
ROA not before: Tue 21 Nov 2023 08:40:07 +0000
ROA not after: Sat 30 Nov 2024 08:40:07 +0000
asID: 834
IP address blocks: 154.16.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4909 (0x132d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 21 08:40:07 2023 GMT
Not After : Nov 30 08:40:07 2024 GMT
Subject: CN=655c6cea-a3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b2:67:4e:9c:81:90:a4:5a:c8:5c:ad:99:99:
0d:dc:63:27:45:3b:ab:fa:ef:48:7f:66:1b:41:c9:
15:01:2a:c2:06:60:fb:cd:47:60:e0:d6:3e:9b:0a:
1d:62:ae:77:a4:a8:6b:56:54:8b:32:02:d6:18:2e:
4a:0e:63:2f:2e:07:52:87:8c:4c:80:13:d9:5c:e4:
26:bd:80:50:f7:86:c5:72:a8:1a:33:34:4d:ad:24:
94:15:e0:cc:e6:44:91:4c:bf:2a:f8:66:09:a3:0c:
cf:07:30:4f:47:24:a3:73:61:c1:34:2e:51:6b:86:
ae:ff:97:2f:d7:c7:11:f0:f2:16:a9:84:0a:40:56:
84:c0:c6:05:ea:2e:d1:c4:c0:3b:fe:7c:30:eb:c4:
b7:de:2b:0d:4f:6b:42:f9:22:9e:9c:b6:c0:63:e1:
df:67:bb:58:d7:70:c0:3d:c3:59:25:c9:68:d8:ef:
a2:f5:6c:de:78:1b:b6:59:9b:1b:3c:c9:ae:dd:cc:
12:85:81:6d:5c:c2:4e:d7:ef:7e:62:3b:b8:34:0c:
02:10:2a:f0:46:7c:ef:b7:59:e6:c7:87:55:cf:a4:
0e:da:a4:d0:f7:02:ee:fc:56:42:ea:cf:23:0b:5a:
df:43:eb:6c:9d:50:45:2c:52:9d:1a:19:2d:ff:42:
0f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9A:13:16:90:44:46:8E:84:80:49:29:49:65:BE:65:1E:A8:02:B9
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/948D452C884911EEBD4003414AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.89.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:d3:a6:a1:5a:cc:f1:f4:b2:b1:63:08:bc:21:8e:08:97:60:
1d:55:ec:66:e3:4a:b1:c1:23:8d:73:9d:01:c3:c8:2e:95:b1:
2f:f6:48:ba:c5:92:04:34:a5:9e:ab:20:8b:f0:0d:68:f3:19:
2b:64:1f:2c:a4:39:85:09:12:c6:e1:23:04:4e:d0:47:c3:7e:
0f:2f:aa:27:dc:75:8e:a1:2b:bf:ef:c6:6f:4e:55:f2:d2:55:
4b:64:c0:8f:6c:a1:87:df:0e:49:57:2c:45:d5:b7:f6:18:d9:
95:eb:4c:f2:05:dd:40:60:f5:4a:11:6b:91:9e:b2:41:38:e5:
3d:e4:82:c0:bc:9e:f0:8a:a5:77:8a:1a:75:d9:0f:81:c6:ce:
4c:6f:29:03:af:6e:be:fd:70:8b:3c:0e:eb:f2:9d:c8:26:d2:
00:ef:80:36:e0:ad:85:eb:36:ca:44:46:8c:ca:56:4d:41:50:
aa:b9:dd:a9:e0:a6:97:c6:4c:c6:9c:83:c0:aa:15:3c:02:f6:
9b:ad:97:1f:78:4b:29:ed:54:5d:46:ac:88:f4:a3:5c:89:35:
38:f3:88:1a:65:7b:5f:1e:d0:30:4a:35:f4:01:e8:be:e3:b9:
6d:e4:3a:38:2b:9d:e8:68:90:7b:b8:b5:14:a0:10:2c:af:2c:
99:2a:3f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 25 11:37:52 2023 by rpki-client on console-fra.rpki-client.org