Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B9AEC97ED51211ED8FA11EB9F1222468.roa
File: B9AEC97ED51211ED8FA11EB9F1222468.roa (raw, json)
Hash identifier: xsQLoRROj7nfbQZXlknnLgfwowcmD0hzSXValHNJsBk=
Subject key identifier: B7:41:C1:E4:4F:31:39:56:0A:B9:54:26:69:39:5A:E7:B5:AD:05:7E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0D3A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B9AEC97ED51211ED8FA11EB9F1222468.roa
Signing time: Fri 07 Apr 2023 07:06:32 +0000
ROA not before: Fri 07 Apr 2023 07:06:28 +0000
ROA not after: Sun 06 Apr 2025 07:06:28 +0000
asID: 207279
IP address blocks: 154.16.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3386 (0xd3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 7 07:06:28 2023 GMT
Not After : Apr 6 07:06:28 2025 GMT
Subject: CN=642fc0f8-58fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e3:51:60:d9:88:7b:92:6f:99:76:c5:57:4b:
55:9d:6f:9b:64:7b:fc:ed:5f:cd:00:a2:f2:2e:f3:
78:6f:05:c2:5d:e1:e2:9c:10:8a:94:2b:c5:4d:8a:
b9:e8:5a:93:55:bd:91:71:d1:9e:fb:1b:9e:d9:87:
87:49:33:ca:bd:0d:99:12:08:87:f4:25:16:86:65:
e6:1b:98:15:c0:3b:bb:9e:11:e3:71:c3:94:c4:9b:
e5:13:a6:99:fd:c6:1f:2c:9f:c1:62:d6:f0:b3:c1:
40:9b:a8:48:6e:6f:e6:75:9a:8d:b8:0b:de:b0:17:
e1:08:76:bd:c4:38:ef:3d:db:1d:81:ad:2e:3a:e0:
97:19:80:30:0e:94:77:ad:2c:3c:3b:05:9a:1d:82:
76:e5:88:51:88:03:e3:19:cd:f9:50:29:d2:8a:df:
7a:fa:63:09:42:b1:d5:0c:c2:cd:5e:80:e9:02:1c:
e8:40:c8:cb:a6:ea:79:17:68:d5:e2:2c:72:38:3d:
98:db:0c:3d:62:7a:ce:4c:6b:b2:1d:fa:cc:5a:c9:
c9:3e:85:34:59:af:eb:ee:d7:b0:71:ad:df:b7:a9:
28:58:e2:58:3f:2b:ff:45:13:2b:10:2a:ad:fc:c0:
c4:53:67:63:aa:ae:c2:07:cf:62:d6:3b:99:57:89:
21:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:41:C1:E4:4F:31:39:56:0A:B9:54:26:69:39:5A:E7:B5:AD:05:7E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B9AEC97ED51211ED8FA11EB9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.183.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:a0:7a:3b:5a:47:21:e5:cc:ee:08:54:55:f4:00:ef:f6:c9:
f9:b5:a2:68:d5:10:d1:ad:ed:ed:df:dc:27:24:cf:87:d0:2d:
d4:a4:7d:4a:32:4a:b3:43:25:dc:a0:0c:52:10:7b:08:02:c5:
d9:86:50:f1:26:5f:b8:48:6f:fd:5e:c6:7d:fe:00:bf:3a:4b:
79:7b:13:d2:f1:12:d5:f0:e8:f7:32:a8:8e:73:a6:d2:55:90:
e0:fd:a7:1c:e2:9c:23:b2:28:77:2e:4e:cb:06:92:3b:32:4c:
f1:5f:fc:f3:38:04:6b:a5:a6:7a:47:6e:1a:8a:fc:f7:80:96:
49:e9:1c:2a:31:a0:6e:1c:e6:2b:3e:b5:07:32:e2:e6:36:c7:
54:6f:67:a1:d4:9c:21:56:89:cf:45:8d:b6:01:1f:0d:22:e6:
51:5a:38:8b:93:bf:9b:99:97:53:82:f6:bb:1f:6f:f4:f6:0e:
b0:2f:51:0e:75:05:4f:ee:66:6e:47:5e:59:99:a1:1e:4a:a6:
5c:67:74:44:b6:c3:21:4d:c8:37:55:9e:df:cf:7d:ab:28:f4:
81:3f:57:51:c5:2f:23:f1:91:45:c4:6f:51:ee:56:b7:5e:ce:
c0:69:1c:5b:c8:25:60:a7:76:64:46:8d:02:a7:52:87:ec:3f:
e7:42:08:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org