Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9A47E8F88E8111EE82A58FD87D84E21B.roa
File: 9A47E8F88E8111EE82A58FD87D84E21B.roa (raw, json)
Hash identifier: 6wN4YGbRfKoPBgQZFpjrJ9VpWaYGQohyUiRckRdlhbM=
Subject key identifier: 46:55:98:0E:0F:35:88:41:D6:8F:3B:55:C2:EA:29:C4:F4:D1:B3:4B
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1396
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9A47E8F88E8111EE82A58FD87D84E21B.roa
Signing time: Wed 29 Nov 2023 06:36:19 +0000
ROA not before: Wed 29 Nov 2023 06:36:15 +0000
ROA not after: Sat 29 Nov 2025 06:36:15 +0000
asID: 984
IP address blocks: 154.16.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5014 (0x1396)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 29 06:36:15 2023 GMT
Not After : Nov 29 06:36:15 2025 GMT
Subject: CN=6566dbe2-8efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:14:40:42:81:3c:65:4e:77:80:da:96:57:75:
64:8c:4c:78:80:5e:68:6c:05:11:6a:41:b3:9e:1e:
e9:91:67:7c:70:79:bd:68:f9:4f:86:5b:22:ad:3b:
ed:0a:95:34:ed:69:2c:0a:2b:0d:b5:44:6f:5f:9e:
5d:31:6a:71:4a:e2:6a:5f:ae:3a:9b:ff:55:7c:e8:
a7:02:73:8d:c5:fc:5e:a5:4d:1c:50:89:0f:d8:ce:
d6:39:51:1b:3a:d2:1b:f7:3e:8a:22:7d:aa:57:34:
58:55:ea:11:7f:61:c6:4f:2e:dc:96:9b:cf:c6:c6:
26:ff:00:47:c6:83:e6:1f:e6:5a:4f:c5:d9:ac:3f:
9a:2f:e1:92:a4:12:d0:6f:be:96:81:f3:44:56:c6:
ae:ae:d7:a0:95:ab:9c:43:2b:2f:26:d4:23:0a:87:
c7:44:0a:dc:22:f5:5e:c6:78:8b:c7:bd:0d:52:97:
57:08:2b:bb:d9:55:ec:61:31:09:56:a5:9b:65:64:
77:62:fc:41:80:0a:ff:f7:c4:49:f3:bf:68:3b:9e:
33:75:2f:24:cd:e8:16:14:b9:05:31:77:7c:c2:a1:
93:12:1b:0e:55:0c:cc:e3:15:56:b1:df:c6:d5:e6:
93:31:e7:52:02:5d:0f:2b:e0:ac:dc:17:03:f4:70:
95:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:55:98:0E:0F:35:88:41:D6:8F:3B:55:C2:EA:29:C4:F4:D1:B3:4B
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9A47E8F88E8111EE82A58FD87D84E21B.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.225.0/24
Signature Algorithm: sha256WithRSAEncryption
70:a6:94:ee:dc:4c:ea:2e:de:df:ef:2a:bf:87:46:2f:2e:92:
8e:e9:35:8a:9c:79:98:b4:02:fe:b1:aa:eb:e9:5f:0d:3c:df:
b6:5c:65:26:30:ea:b7:c9:cf:16:76:dc:9e:76:c6:21:21:31:
92:0b:94:48:d8:6f:1f:df:ef:40:58:69:4e:24:7c:c9:9a:22:
87:dd:d8:59:e2:cf:d5:83:93:e9:45:9d:f5:60:42:7a:98:c7:
e0:c4:fb:c8:37:9d:64:8e:2b:0c:55:5d:52:f8:3b:1e:7d:c7:
57:97:6a:d0:0f:4d:1b:8c:d9:53:61:1d:50:3b:ec:e5:ff:bd:
6b:b2:4d:d4:c7:bb:63:6b:a5:d7:7d:cc:9a:c4:9f:a2:89:5d:
58:48:9a:f6:4f:53:0e:2b:47:2e:ed:f4:1d:6b:0b:b4:d4:10:
2c:99:d8:f1:95:86:e6:f4:82:c3:07:7a:80:af:74:39:a0:e1:
9c:84:2a:3d:58:27:e2:55:1d:cd:18:46:75:bc:fc:5d:19:75:
7a:88:cc:5b:a4:d1:4c:10:42:86:fc:7e:13:ef:c4:0b:3b:09:
ec:b5:67:d0:16:20:25:56:de:f2:cb:2b:7f:e0:3a:65:39:87:
e9:0f:6a:ca:c6:3c:f6:df:be:14:37:01:1f:9f:36:96:e4:12:
4a:54:15:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 29 08:25:40 2023 by rpki-client on console-fra.rpki-client.org