Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B7F162EE39A911EE8A72DA304AD9E6FC.roa
File: B7F162EE39A911EE8A72DA304AD9E6FC.roa (raw, json)
Hash identifier: oPI5s3PWWywfGLdvu9aJzm6R7fXYUrKSxgLf+sCQGL0=
Subject key identifier: 2D:DE:D2:B5:D1:5D:FE:2E:62:CE:42:6D:10:80:3C:96:B5:B7:B0:89
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1144
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B7F162EE39A911EE8A72DA304AD9E6FC.roa
Signing time: Sun 13 Aug 2023 07:19:19 +0000
ROA not before: Sun 13 Aug 2023 07:19:16 +0000
ROA not after: Wed 14 Aug 2024 07:19:16 +0000
asID: 834
IP address blocks: 154.16.90.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4420 (0x1144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 13 07:19:16 2023 GMT
Not After : Aug 14 07:19:16 2024 GMT
Subject: CN=64d883f7-d239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1b:f2:08:3b:ba:66:c7:b8:6b:67:dd:90:20:
a6:66:54:b0:8c:e7:2f:69:82:95:44:fd:f3:05:ae:
ee:18:db:6e:ec:12:b8:bc:33:3d:1e:ad:b4:3f:ed:
22:32:c3:ca:08:21:58:8b:84:98:63:f7:57:38:a0:
af:75:58:1c:f0:5b:fa:8a:6e:23:09:99:6e:1e:ab:
80:54:bb:91:6b:15:ec:35:3a:4f:d3:ae:b5:d7:45:
a7:47:37:ab:4a:e5:3b:0b:e0:7c:c0:c8:8f:11:96:
84:a7:db:59:ca:34:97:69:66:00:f9:b5:f6:2b:44:
8b:32:11:93:25:d9:c6:6b:c4:5c:5a:02:ab:d5:34:
bd:74:78:07:15:e8:32:e5:93:02:c2:96:62:ec:6d:
fd:05:38:d8:17:af:f6:ff:74:ba:9b:f9:98:c9:1c:
f8:a6:eb:ba:4e:bc:98:8f:0e:cc:27:d9:7a:08:89:
4a:bd:1d:fa:b7:c8:ae:5a:df:d0:de:54:15:67:10:
5c:e4:95:93:93:33:31:b6:ac:8e:8a:de:d5:fa:40:
ca:d8:98:30:29:e9:2d:2d:2e:69:c8:dd:2a:d5:f5:
c2:55:e3:6e:b6:bc:5a:f4:92:3a:ed:02:89:78:af:
45:e4:c2:b6:9c:6f:e0:6e:a5:9c:79:f9:7a:67:71:
dc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DE:D2:B5:D1:5D:FE:2E:62:CE:42:6D:10:80:3C:96:B5:B7:B0:89
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B7F162EE39A911EE8A72DA304AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.90.0/24
Signature Algorithm: sha256WithRSAEncryption
53:37:9c:c1:fa:c4:ea:51:ea:00:77:c2:8e:bc:ef:87:5c:cb:
a4:8d:53:ce:4d:5a:3e:78:09:89:c6:6a:ca:ea:36:d8:4c:86:
3e:e8:cb:48:cb:e7:1b:15:f9:37:c7:f1:3b:bf:0f:e3:03:31:
e5:7f:f6:c7:d3:0c:fe:40:c6:9d:59:3f:24:a3:c5:92:a9:e5:
51:94:b7:c8:e8:90:b3:1d:2e:40:da:4f:93:60:8a:23:59:b6:
d5:29:a2:7f:3a:db:40:b8:38:7f:2e:ae:d6:8a:e4:89:92:68:
f2:fe:85:21:4a:cf:80:ee:f6:1a:1d:91:a1:9a:f5:44:9b:88:
ad:32:05:1f:13:8e:5d:b7:b9:91:77:1c:60:6c:58:33:57:dd:
9b:42:2a:87:37:9d:c5:36:e5:b8:0d:e3:0d:e2:4d:5d:33:8d:
ca:f8:75:06:a3:e1:36:f0:98:26:e8:03:c3:7a:c6:b4:54:70:
6f:5d:1e:31:73:d9:84:84:2a:06:11:37:83:a9:e0:ce:8f:43:
92:6a:62:05:4b:4f:17:27:3e:52:01:5c:6f:a5:55:0e:d7:7b:
71:00:37:cb:b9:b1:76:a8:1f:6d:fb:73:ab:37:04:e5:2b:58:
e0:ae:15:4b:ed:b0:c3:3f:a5:7a:e3:8a:72:85:96:ce:bc:13:
1f:57:1c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 25 11:37:52 2023 by rpki-client on console-fra.rpki-client.org