Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9F69DA9A165311EEB7D4D7374AD9E6FC.roa
File: 9F69DA9A165311EEB7D4D7374AD9E6FC.roa (raw, json)
Hash identifier: O85FQ32zFhukjCEv8W8hTNAClHBG1a6/jf7Bm6OBLdE=
Subject key identifier: 68:B9:31:B2:04:DC:4B:9A:81:99:00:01:AB:0F:3D:BD:FC:8A:C3:44
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1029
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9F69DA9A165311EEB7D4D7374AD9E6FC.roa
Signing time: Thu 29 Jun 2023 08:04:51 +0000
ROA not before: Thu 29 Jun 2023 08:04:47 +0000
ROA not after: Wed 18 Jun 2025 08:04:47 +0000
asID: 834
IP address blocks: 154.16.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4137 (0x1029)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 29 08:04:47 2023 GMT
Not After : Jun 18 08:04:47 2025 GMT
Subject: CN=649d3b23-2b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:63:1b:36:05:40:3a:42:c6:3a:3c:3f:8e:
ec:cf:da:63:2c:37:5d:e4:c6:9d:e8:c9:2c:f8:4f:
82:05:50:6c:de:bb:35:c7:89:09:74:4f:6c:f5:19:
14:d3:2d:51:3f:7a:3f:97:b8:09:72:2e:88:d3:03:
b8:c9:ce:21:32:76:d8:64:80:b5:b9:39:82:e7:a2:
fa:32:04:5a:3e:a6:8e:07:77:c5:d7:e4:70:85:76:
d2:cb:1c:f7:c4:c0:08:73:d9:93:af:5d:fc:6a:ca:
18:49:b0:23:2b:5e:5a:ed:b1:58:69:fc:e6:04:26:
6a:ba:13:72:db:59:b8:4e:ac:22:82:38:47:a9:0c:
f0:bb:cd:f8:86:98:36:4e:c5:72:9f:20:85:cd:4a:
fd:8d:cf:54:b4:5e:18:5f:41:62:ed:dc:5e:6a:30:
8d:6d:01:ce:ce:cd:65:7b:ec:06:08:31:49:6f:ee:
d7:f3:10:cb:b3:0f:d4:3f:10:cd:1b:3a:b0:20:84:
a5:a0:84:c8:83:9d:d4:23:3c:dc:92:3d:70:40:dd:
08:32:b0:77:5b:2f:6a:31:7c:f7:7a:81:9b:05:5f:
53:21:c7:d6:0f:6d:e5:e2:d2:28:1c:8c:5d:24:d1:
c2:fd:7c:0a:26:c6:3f:9a:06:0d:3d:59:83:ac:99:
36:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B9:31:B2:04:DC:4B:9A:81:99:00:01:AB:0F:3D:BD:FC:8A:C3:44
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9F69DA9A165311EEB7D4D7374AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.204.0/24
Signature Algorithm: sha256WithRSAEncryption
46:01:c1:3a:7b:17:1b:c2:60:95:2d:10:e0:7b:73:3c:f2:e2:
87:77:69:a8:a0:8b:a7:50:1a:30:d8:03:e6:7d:52:d7:73:eb:
69:1b:68:19:08:88:ed:ee:92:fa:0d:57:15:48:68:44:48:1e:
03:45:64:c9:b0:a9:c5:f2:fa:57:cd:ef:a6:91:8d:43:e2:c8:
d8:b4:08:7b:06:ee:ee:4d:f4:e2:39:0d:98:af:9b:06:b7:23:
21:d9:ea:35:f1:99:e2:d1:93:91:4b:51:ea:1e:e2:3b:43:73:
46:5f:6c:64:24:90:20:f9:5b:19:ef:81:d2:bd:9e:8f:37:74:
43:9f:6a:3b:9e:13:56:81:05:e3:9a:14:0f:64:99:b8:d4:6c:
f3:c6:bd:10:9e:6a:9b:78:c6:14:b6:58:4b:4b:62:f8:2e:48:
3a:eb:3d:c5:4b:55:eb:40:41:0f:6c:db:6c:6c:87:a4:df:c6:
00:fc:2e:7f:42:12:ed:61:32:63:28:b1:86:c3:24:95:7a:18:
aa:81:26:f5:32:a1:8a:91:a5:b2:68:c6:75:22:af:ed:4a:79:
d3:4e:bc:44:c0:3a:56:f2:53:5e:d2:9e:8e:98:b8:75:78:19:
68:2f:94:2d:4a:69:63:f0:59:b7:11:19:32:fe:ae:e1:b5:42:
11:83:ec:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 13:51:07 2023 by rpki-client on console-fra.rpki-client.org