Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B3B68CA26BF611EE874C7C6C4AD9E6FC.roa
File: B3B68CA26BF611EE874C7C6C4AD9E6FC.roa (raw, json)
Hash identifier: KEMM85m0TaUjHThrfR0LvIhicHB8O3JlS9CwlPRQON8=
Subject key identifier: 6F:6A:AA:1B:96:CA:DF:CA:F1:64:CD:D0:C5:D0:C3:A3:95:2E:7D:17
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 12DB
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B3B68CA26BF611EE874C7C6C4AD9E6FC.roa
Signing time: Mon 16 Oct 2023 07:36:22 +0000
ROA not before: Mon 16 Oct 2023 07:36:18 +0000
ROA not after: Wed 16 Oct 2024 07:36:18 +0000
asID: 213060
IP address blocks: 154.16.24.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4827 (0x12db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 16 07:36:18 2023 GMT
Not After : Oct 16 07:36:18 2024 GMT
Subject: CN=652ce7f6-9d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f5:0f:eb:0b:86:fd:fa:4d:d3:1f:c3:0b:c0:
98:9c:1f:f0:77:5a:da:90:b2:fd:6a:76:dd:eb:34:
2a:3b:69:30:93:be:b0:f7:c5:34:4a:0b:35:b8:ae:
58:58:2c:6d:91:b0:99:68:0c:0e:ca:26:52:8c:74:
19:1e:59:7f:88:5a:c5:a0:4a:be:35:77:36:7f:b1:
d0:cc:42:80:52:de:ef:36:5d:8f:a3:ba:6d:26:c7:
b7:71:62:78:1e:24:2f:43:65:c4:df:4f:eb:dc:ad:
8a:b4:dc:5d:5b:33:1f:39:bc:43:2b:35:15:60:5e:
09:bb:38:3b:b8:cf:8b:75:8c:73:b4:35:71:66:c3:
79:fd:f0:b1:5c:f7:54:04:49:27:6a:31:79:00:75:
c1:ae:ae:68:94:27:1a:ea:d3:c2:92:61:65:54:39:
21:7f:f1:52:38:5b:ea:fe:fb:52:77:97:87:7d:3d:
d4:e5:a8:e0:7b:67:6b:0f:14:51:0e:9a:aa:50:f5:
25:e0:ec:f2:27:59:a5:79:fa:34:c2:ef:ea:86:cc:
e3:ac:cb:de:b1:1a:3f:d5:66:77:00:c7:ed:60:d7:
35:b7:67:01:9f:9d:4f:d2:97:a5:8f:fd:c3:93:a8:
d2:b7:01:fb:bb:fe:6a:a2:30:57:21:36:6a:4b:6e:
c8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6A:AA:1B:96:CA:DF:CA:F1:64:CD:D0:C5:D0:C3:A3:95:2E:7D:17
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B3B68CA26BF611EE874C7C6C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.24.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:88:dc:a8:6b:f7:3d:ba:c3:16:0e:5f:a3:22:e9:f4:22:a3:
e4:3a:11:c6:e5:f6:2b:7c:2f:1e:5c:71:d1:42:a8:dd:d0:e9:
1d:5f:8d:55:8f:b3:91:9a:f9:0f:55:0a:31:dc:78:45:29:e9:
7a:80:c3:81:cb:e3:fd:c4:5a:56:33:8b:4a:c5:40:45:b9:72:
9f:26:b0:e5:9c:31:b6:a6:d2:99:03:b4:f3:34:5e:cf:7c:91:
e5:28:34:7e:f8:ef:6a:07:bf:a4:31:87:33:9a:a3:ec:86:d5:
0d:c4:ce:fd:0b:e0:88:bb:ac:02:ef:cf:89:dc:54:30:7a:77:
6d:cc:60:3e:f6:b8:72:fa:28:02:09:99:05:52:f2:ed:1b:e3:
07:ec:25:37:9d:4d:d9:19:21:5b:27:f7:7b:16:cf:2d:5a:67:
ac:e5:b7:db:14:6d:0d:26:2e:db:e4:c8:b0:3e:0e:88:7d:34:
5f:67:4f:9f:92:3c:6b:0c:5e:d5:e9:5f:37:6f:f2:82:8c:3d:
27:72:9d:96:fd:66:ce:f0:06:c2:36:ab:4f:03:a8:31:fc:37:
5f:e4:31:d7:4c:ac:ff:44:09:ee:2c:ea:34:7b:8b:61:11:7a:
6a:c3:bb:29:cc:a2:ab:f0:7f:5c:9a:66:14:d4:d0:f0:ee:e7:
14:ab:e9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 18 16:20:08 2023 by rpki-client on console-fra.rpki-client.org