Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A8AA6C9E935F11EEA10F9744D25BE465.roa
File: A8AA6C9E935F11EEA10F9744D25BE465.roa (raw, json)
Hash identifier: 5h4ymwtnrKrZ1LvphumitQo1j5y5R5qi4m3OMNNSb+w=
Subject key identifier: 75:EC:96:CC:1E:9B:26:48:35:D3:11:0B:CE:1D:9C:80:A9:38:FB:6B
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 13C3
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A8AA6C9E935F11EEA10F9744D25BE465.roa
Signing time: Tue 05 Dec 2023 11:15:56 +0000
ROA not before: Tue 05 Dec 2023 11:15:52 +0000
ROA not after: Fri 05 Dec 2025 11:15:52 +0000
asID: 984
IP address blocks: 154.16.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5059 (0x13c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Dec 5 11:15:52 2023 GMT
Not After : Dec 5 11:15:52 2025 GMT
Subject: CN=656f066c-9993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d4:6d:8d:3e:f8:b4:c0:79:61:6a:3a:1a:92:
28:0a:10:05:f3:ee:b5:d1:d5:0f:e1:9c:85:ca:5e:
89:a8:13:ac:0e:c4:1c:db:70:4c:14:65:6d:11:1e:
1f:96:f7:19:ce:79:0b:d1:52:10:dd:a1:d3:39:25:
ef:8c:ae:8e:88:45:98:7e:e3:40:f5:2e:d4:10:82:
3b:a6:a0:47:c8:d7:f7:5b:8e:51:34:11:3e:c8:97:
65:fb:62:76:3f:21:17:52:be:42:61:71:86:b8:24:
0d:67:83:9a:4b:cc:0a:a7:6f:b7:ba:a5:c2:45:17:
22:b3:7c:39:ee:c8:f1:f3:4b:ae:4e:57:2f:75:ed:
95:43:42:41:1f:4a:d0:ff:81:15:24:ec:15:77:9a:
30:3a:cd:52:dd:0b:7c:db:fa:f4:36:3e:5b:94:9e:
c3:7e:dd:90:e4:38:b1:bd:95:58:b8:42:bd:29:fb:
f6:ee:e9:e8:63:b7:2e:f8:83:ca:91:bc:af:55:50:
2f:f8:44:d8:71:25:92:14:8a:35:db:a8:7b:d3:ae:
65:6f:8a:2c:22:7b:ef:d8:1c:93:cc:11:e7:fa:f3:
dc:fc:f3:77:0a:20:cb:0b:30:d1:ff:b2:7d:cf:2a:
4b:ce:b9:cc:b5:18:26:99:13:6b:97:a2:be:98:c6:
20:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EC:96:CC:1E:9B:26:48:35:D3:11:0B:CE:1D:9C:80:A9:38:FB:6B
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A8AA6C9E935F11EEA10F9744D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.207.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:0c:1c:66:a2:1a:48:2b:3e:8c:d7:87:ba:9a:03:90:3b:7f:
fb:9c:f9:f3:16:c2:1f:35:f4:53:2c:b5:96:cb:80:4e:8b:5b:
b1:3f:9f:ca:ed:3e:09:d7:55:5f:7c:b8:52:a9:b4:45:20:32:
3d:ab:da:ea:e8:f1:69:37:54:e8:22:32:71:b1:2a:07:8f:c2:
58:30:da:f3:3d:0f:1a:d1:ba:ea:f4:3a:c1:eb:0a:f6:68:14:
3a:6c:f2:c8:a6:b5:81:bf:d4:4b:a2:1e:b7:97:fb:1f:14:78:
f4:53:6e:d0:d7:6b:74:e7:0e:56:6f:e6:da:cd:ec:7d:31:d6:
0b:00:08:0f:48:4b:71:65:74:04:7a:4e:64:12:48:d6:cf:a1:
cc:1a:34:4c:13:0e:73:0f:45:e7:38:be:f1:05:d9:ad:8a:65:
d2:48:fe:86:56:2e:7c:d5:95:4f:53:3f:8f:d7:f2:9f:39:52:
f6:35:94:cb:62:1c:e1:13:76:37:9b:84:b0:55:0a:89:e3:9b:
25:5e:39:f2:cf:03:79:a0:13:96:ca:b5:99:28:21:cd:fa:62:
50:61:be:1e:e7:2e:54:e8:a3:79:eb:c6:25:5c:35:9d:d2:e5:
ff:ba:13:28:c3:76:d9:7c:97:ea:39:cf:19:72:87:96:ec:b7:
09:f7:ae:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 29 08:25:40 2023 by rpki-client on console-fra.rpki-client.org