Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B2D762D8A54A11EE9CB9F63AD25BE465.roa
File: B2D762D8A54A11EE9CB9F63AD25BE465.roa (raw, json)
Hash identifier: tspGN/zVjYebx47PzVAMbvctftBjCgDrI+5WJTPQs/Q=
Subject key identifier: 23:4A:A3:09:DB:6C:41:88:D5:A3:52:72:95:91:51:0B:9F:A0:71:4B
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1405
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B2D762D8A54A11EE9CB9F63AD25BE465.roa
Signing time: Thu 28 Dec 2023 06:31:14 +0000
ROA not before: Thu 28 Dec 2023 06:31:11 +0000
ROA not after: Sun 28 Dec 2025 06:31:11 +0000
asID: 3320
IP address blocks: 154.16.231.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5125 (0x1405)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Dec 28 06:31:11 2023 GMT
Not After : Dec 28 06:31:11 2025 GMT
Subject: CN=658d1632-ffda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:db:1f:7e:84:ed:b7:27:94:c4:1f:e9:97:a9:
34:01:81:85:8b:c8:ec:ab:b3:b6:ee:f6:05:4d:70:
75:d9:98:c3:45:e6:a7:7a:1c:c4:43:e1:ae:c3:2c:
9a:f0:21:95:cd:43:81:3f:89:9a:11:0e:66:b4:8f:
1d:82:06:1d:6e:93:d6:4e:41:59:ab:c8:a6:65:14:
fa:90:25:9f:4e:f2:56:58:74:b6:83:08:28:61:9d:
7e:97:83:2f:b0:98:fb:3e:a8:26:9d:2f:59:40:5b:
7e:71:7d:c9:35:50:aa:96:bf:e4:da:31:b4:21:47:
af:b4:05:f4:0b:6d:b2:a4:12:fb:80:6b:09:eb:53:
3a:af:2e:fb:57:90:16:74:3e:95:a5:94:18:a8:33:
31:e8:90:3c:f6:48:fb:6d:d6:df:ad:8e:8a:66:a5:
27:76:71:a3:c7:4d:cc:2f:7e:87:19:90:4d:f0:d9:
be:93:35:ad:c0:d2:d5:44:45:eb:81:27:16:8f:e6:
c4:81:95:a7:b1:10:8a:e9:3f:31:9b:93:e1:ab:f4:
6a:2f:90:4d:6e:ad:82:01:ef:90:ba:27:f8:62:57:
69:0c:8e:66:51:31:80:94:92:ff:69:3c:d6:60:a4:
d1:dc:b4:7a:d4:d4:a3:e5:f8:f9:ca:bf:1b:97:ab:
56:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4A:A3:09:DB:6C:41:88:D5:A3:52:72:95:91:51:0B:9F:A0:71:4B
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B2D762D8A54A11EE9CB9F63AD25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.231.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:a8:ef:00:b2:93:9d:ec:2f:5d:7b:0e:05:d3:f7:31:01:7f:
42:f8:65:76:3f:29:a5:8c:5e:69:7b:76:41:ae:ec:76:c6:8a:
6a:c0:c5:53:1a:fa:fa:d6:42:5b:3b:27:33:62:55:c2:a7:64:
a8:7c:4a:8b:fe:5b:b3:e0:2b:07:bb:1b:5e:c8:5c:0b:cc:41:
ee:bd:a6:66:49:29:a9:b6:6a:79:02:3a:7c:1b:f6:93:18:98:
16:ed:d7:38:85:a5:48:2c:56:66:e9:dd:ae:94:70:c4:ed:02:
de:a5:b3:c9:64:35:99:a7:81:5b:e4:1e:c0:16:80:27:69:a4:
66:b2:32:e5:0a:ab:92:d5:a7:03:2a:0e:3b:46:8b:4b:88:41:
fe:02:ea:46:a8:4e:d4:f4:de:47:ec:6f:46:2f:21:5a:a3:20:
c2:4c:42:e1:4e:db:62:02:c9:96:90:16:a7:2a:a6:d8:d9:77:
bd:52:d9:82:f0:91:0a:9f:bc:f8:dc:07:99:c9:8d:97:3f:bf:
ee:64:30:bb:59:05:17:24:31:9b:7e:ae:04:1b:25:c3:d6:39:
1e:4d:04:6a:36:b6:c3:77:f3:45:ef:bd:2d:df:1e:58:af:67:
f6:c6:d9:26:2a:c7:b2:14:c3:83:a3:3f:9f:ce:d5:17:40:51:
00:4d:2b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 29 08:25:40 2023 by rpki-client on console-fra.rpki-client.org