Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B73836E877C511EEB8BED72A4AD9E6FC.roa
File: B73836E877C511EEB8BED72A4AD9E6FC.roa (raw, json)
Hash identifier: L9GLvqksd00ahXECNcA3xB6QJxwvVfaEijYQIJLR+Lo=
Subject key identifier: 11:E8:9C:4E:2F:86:2C:7B:E6:86:37:98:22:F7:75:C6:90:79:6D:4F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 12F8
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B73836E877C511EEB8BED72A4AD9E6FC.roa
Signing time: Tue 31 Oct 2023 08:15:56 +0000
ROA not before: Tue 31 Oct 2023 08:15:53 +0000
ROA not after: Fri 31 Oct 2025 08:15:53 +0000
asID: 213060
IP address blocks: 154.16.24.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4856 (0x12f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 31 08:15:53 2023 GMT
Not After : Oct 31 08:15:53 2025 GMT
Subject: CN=6540b7bc-754d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:02:8f:23:77:29:d2:8c:8b:d0:e1:7c:4a:cc:
b3:86:37:55:5b:c9:05:ea:42:52:7d:d4:9c:f6:6a:
27:70:57:9e:03:89:a5:eb:7d:09:ef:54:84:ed:bc:
7f:75:c1:6e:58:0b:2c:4a:45:68:be:4c:9e:2d:cd:
45:f1:32:10:05:3d:ae:b0:8a:ff:af:ab:4d:2f:d3:
1b:7a:85:b1:80:a4:a6:6b:a9:06:eb:fc:ff:06:b1:
e8:4d:cc:ae:10:a4:c2:96:09:44:90:9b:d3:7b:95:
d3:50:3d:ea:55:04:ff:40:7d:92:1f:76:cf:17:1e:
d6:2c:4b:6c:a7:b6:eb:16:e0:6f:47:e9:1e:62:b8:
93:eb:48:b1:10:6e:82:66:a0:4a:17:43:61:38:0b:
49:05:14:18:3d:4b:fd:ab:04:c4:3e:92:a8:de:d2:
dd:b9:da:10:25:34:90:40:46:19:5c:84:67:c2:2a:
35:60:c4:b9:84:c8:03:08:32:8d:bc:1c:b1:eb:6f:
38:23:b6:18:0b:f3:e1:82:f2:7c:00:20:cf:27:c2:
20:d7:1d:83:b3:76:5f:74:be:71:c0:52:4e:e2:15:
f8:dc:c2:3a:72:3b:c0:12:01:75:54:9a:72:2a:7c:
c7:a6:fa:f7:40:ab:4c:c7:5e:c7:fd:5c:d3:c7:9e:
ca:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E8:9C:4E:2F:86:2C:7B:E6:86:37:98:22:F7:75:C6:90:79:6D:4F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B73836E877C511EEB8BED72A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.24.0/23
Signature Algorithm: sha256WithRSAEncryption
15:fb:cc:f8:fa:f9:5f:2e:f5:25:30:2b:f9:93:bd:3a:5a:de:
2a:8e:3b:8a:d8:9b:94:a6:c1:ad:cb:c1:b0:14:f9:62:ba:da:
86:4b:84:3e:46:b9:08:93:e7:3b:79:37:98:45:5c:89:bd:9c:
85:1c:6c:63:22:4f:29:5b:52:b9:f5:dc:cb:af:10:0b:2f:12:
9c:ae:6c:91:48:80:1b:97:f2:29:c6:8d:bd:16:8e:dc:04:34:
45:90:f4:df:19:dd:7d:02:64:bd:5a:31:7e:24:8e:4f:81:99:
96:0a:9b:0d:97:ff:1f:1e:35:0f:5d:b4:cc:f5:c6:7e:eb:ca:
eb:24:2e:d4:64:2f:5b:7a:61:b5:25:8f:b1:bf:50:83:6c:c8:
5c:d7:6a:8d:4d:33:0c:9d:ad:59:68:f5:5d:46:94:26:96:7f:
b6:8b:27:82:ca:7b:0e:cf:b4:e1:ff:60:68:47:b9:01:dc:5f:
31:9e:80:ba:b2:5f:1b:39:62:3e:de:79:bb:27:a4:bb:fa:c3:
0c:9d:05:b9:af:c3:6e:98:12:43:0a:b0:a9:81:15:e9:0f:9d:
ad:e9:65:8b:d2:fa:a6:93:fe:59:4e:86:d3:29:4d:05:ff:e8:
47:ad:95:23:6e:68:de:f8:32:28:e9:5c:75:6f:06:1a:22:10:
13:1e:2d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 07:26:31 2023 by rpki-client on console-ams.rpki-client.org