Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A17F502A0B6911EE8DA023204AD9E6FC.roa
File: A17F502A0B6911EE8DA023204AD9E6FC.roa (raw, json)
Hash identifier: RUCcx0/gxFKcebGrpQPa8lcwvZE5HpPDa8K+iSfFeiU=
Subject key identifier: 53:2A:38:B3:32:FC:E9:79:C2:AF:8F:33:4F:08:5C:69:25:C0:56:8A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F79
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A17F502A0B6911EE8DA023204AD9E6FC.roa
Signing time: Thu 15 Jun 2023 10:44:40 +0000
ROA not before: Thu 15 Jun 2023 10:44:37 +0000
ROA not after: Sat 14 Jun 2025 10:44:37 +0000
asID: 146943
IP address blocks: 154.16.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3961 (0xf79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 15 10:44:37 2023 GMT
Not After : Jun 14 10:44:37 2025 GMT
Subject: CN=648aeb98-6e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:04:66:f8:93:bb:02:5f:a6:e1:e0:27:f8:94:
3c:f9:a5:1f:08:0a:a1:b0:b7:60:ea:31:65:e1:b5:
ef:db:a2:e7:3f:09:57:bd:0a:e0:8a:9d:2f:ab:16:
77:c4:6b:13:27:22:f6:56:04:df:6c:a6:49:64:5b:
59:12:0a:e7:3c:b5:11:f4:51:85:20:66:1d:0a:bc:
d2:47:72:97:9a:ad:ae:5f:f7:bd:d8:36:3b:c8:b3:
91:33:ae:9d:be:5a:6d:fb:c0:ad:00:51:dc:de:34:
8a:66:b2:49:56:10:59:39:4d:d7:0d:1e:89:6f:55:
23:63:ed:3d:52:94:0b:20:0e:c0:23:fa:34:ae:0b:
a8:d9:45:9c:ae:ac:82:3c:58:3a:71:cb:51:64:f8:
e8:4b:e6:2c:28:9a:d7:e3:66:91:0c:b0:81:b5:13:
3d:dc:35:fb:ac:cb:89:36:28:29:00:2d:61:2d:b0:
80:ed:2f:d1:66:b2:d4:8f:6b:44:27:bd:20:bc:86:
9e:ff:56:fc:86:eb:e9:d7:68:df:04:80:fc:42:10:
69:3e:76:8a:0e:26:81:9f:bc:18:a9:3f:6f:63:19:
57:f9:64:39:5a:d9:69:4e:01:b9:2a:69:67:5f:d9:
c6:41:49:39:d4:ca:4c:5a:9d:06:c5:ce:a9:39:54:
f9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2A:38:B3:32:FC:E9:79:C2:AF:8F:33:4F:08:5C:69:25:C0:56:8A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A17F502A0B6911EE8DA023204AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.50.0/24
Signature Algorithm: sha256WithRSAEncryption
87:92:3c:93:e6:3e:e3:0a:fb:31:50:df:e3:13:7c:76:b6:58:
31:f6:35:87:43:22:b2:65:95:3e:4c:ae:e8:53:81:e2:d9:df:
fb:99:80:d4:e7:ca:89:10:f3:da:1b:12:9e:a5:10:6a:1f:25:
1d:92:7b:96:5f:9b:87:03:58:e6:f5:62:cd:75:58:fa:9a:0d:
f2:aa:83:ff:d9:1b:b6:ac:8f:5d:af:fd:74:82:d3:67:2c:4a:
0d:54:d4:66:dc:99:09:ef:88:20:7b:da:78:4d:8f:17:ea:c1:
9a:72:52:63:2f:50:c9:a4:75:54:05:df:f7:91:d2:c5:3b:6f:
32:24:4c:58:7d:7d:37:95:7c:03:29:92:57:8c:5d:14:cc:f8:
51:9f:cb:2b:04:95:8a:5f:ba:a8:13:23:fd:bb:ef:db:49:48:
4d:75:c4:97:c9:1f:d9:9e:d7:bf:63:f7:1a:44:6d:89:b4:22:
c7:0d:b5:b1:d9:71:28:6c:f7:e7:3f:2b:71:63:86:46:b8:c6:
5b:ae:91:f1:71:23:ee:6d:6e:0d:be:f0:21:ea:18:90:c2:59:
57:aa:ff:23:d0:99:fd:c5:2c:0c:4a:af:e6:6e:2d:1b:db:47:
79:5b:94:99:f3:87:80:b6:41:57:eb:ca:46:33:f3:7a:97:0b:
9d:6f:ec:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 9 14:38:31 2023 by rpki-client on console-fra.rpki-client.org