Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B85B9CD0B8F911ED988815F9F1222468.roa
File: B85B9CD0B8F911ED988815F9F1222468.roa (raw, json)
Hash identifier: 6HrqJRcoMMvFLL7533fBoF+W8km9roaeGi1yf3fthPQ=
Subject key identifier: 82:A2:F6:56:94:62:03:81:4A:B9:21:1C:2D:49:45:15:3C:5A:75:CF
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0CBF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B85B9CD0B8F911ED988815F9F1222468.roa
Signing time: Thu 02 Mar 2023 12:57:00 +0000
ROA not before: Thu 02 Mar 2023 12:56:56 +0000
ROA not after: Sat 01 Mar 2025 12:56:56 +0000
asID: 61317
IP address blocks: 154.16.240.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3263 (0xcbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 2 12:56:56 2023 GMT
Not After : Mar 1 12:56:56 2025 GMT
Subject: CN=64009d1c-3679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:6f:b9:af:e7:83:8b:0c:7d:a7:7a:72:6c:
6f:42:c2:56:70:56:6e:79:b1:22:21:ea:9e:c1:7a:
e8:4b:7e:48:7e:0f:b8:aa:dd:ba:c6:d4:29:5d:84:
12:79:5f:73:3f:00:2b:bb:71:1a:f8:a7:ff:db:4b:
df:c7:79:8a:89:68:e8:6e:fc:3e:5d:6e:39:41:29:
49:ce:5d:53:af:78:32:fc:71:b4:ae:01:8a:c6:4d:
a2:d3:e8:b2:28:97:1f:dc:e2:58:2a:e5:3c:49:c0:
05:4f:4a:4f:7c:da:86:99:e1:7d:48:ee:aa:b5:1a:
e1:4c:77:31:31:9a:47:cf:be:43:53:76:a7:1b:5e:
17:48:5c:29:b7:45:8a:44:fa:fa:f6:f5:97:66:b4:
0d:97:f8:db:91:39:c1:7d:4f:6b:64:5d:ba:fb:3d:
42:e4:1f:8b:ce:09:d6:1d:35:6e:c8:f5:a9:aa:28:
d4:ce:78:e6:64:f4:ca:65:c8:89:d5:7a:61:77:2c:
53:e4:42:60:40:a1:0a:c9:f4:a7:52:5b:a4:2e:e2:
d2:c0:a7:77:ff:8c:93:f0:eb:98:ba:be:7a:b1:73:
a5:8a:41:10:e7:ce:a0:2c:c2:11:95:80:da:19:2e:
84:a7:19:72:5b:bf:3b:18:15:80:8d:fa:e0:63:f0:
07:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A2:F6:56:94:62:03:81:4A:B9:21:1C:2D:49:45:15:3C:5A:75:CF
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B85B9CD0B8F911ED988815F9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.240.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:4a:c8:04:32:5f:53:4b:9e:ca:e2:fe:d3:f4:2c:a0:97:05:
07:3e:05:26:10:01:9e:c8:ef:e3:cf:33:2e:99:94:3b:c1:bd:
e2:6c:5c:17:f8:b5:8f:ee:07:fb:70:3d:61:8e:81:4e:32:41:
9d:f5:20:2b:ba:49:68:15:35:cd:40:c2:85:dc:c1:95:8a:36:
c7:68:4a:0c:32:5e:a9:c3:7e:21:53:23:3a:af:58:7f:da:dc:
6a:d1:4c:bb:85:2d:d3:75:96:7b:48:61:39:c3:2c:0d:45:60:
54:89:86:70:e4:6e:e7:84:9b:b2:9d:16:ba:63:87:47:9a:ab:
08:2e:72:10:0b:ad:eb:7c:28:0a:58:a4:62:3e:de:10:31:60:
84:a2:b9:64:64:f3:64:b4:8c:74:44:30:85:23:c2:b7:72:b3:
6a:a4:f6:7a:07:5c:49:b5:d1:bd:ae:de:ff:7e:de:18:75:c0:
7c:e3:65:4c:a0:6f:fc:ec:32:79:a3:30:aa:3e:46:a3:9b:fb:
39:34:24:b4:ac:cc:f6:16:50:c6:73:a6:a4:24:c1:9e:c4:db:
98:84:80:57:49:b7:52:a6:4e:e1:85:9c:b6:a3:84:78:49:0a:
a2:da:0e:a2:8e:ce:25:62:46:36:ac:36:4f:4e:c3:12:34:89:
01:91:31:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org