Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BF6818400C1511EEA9D25E2C4AD9E6FC.roa
File: BF6818400C1511EEA9D25E2C4AD9E6FC.roa (raw, json)
Hash identifier: YlMhqBsPwZH5M4q/dWfU7gd5NnlVBT2c2XizLCnHss4=
Subject key identifier: 7B:88:FA:22:57:4C:B0:71:5F:F5:13:1A:81:AE:82:DB:93:08:E6:DA
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F93
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BF6818400C1511EEA9D25E2C4AD9E6FC.roa
Signing time: Fri 16 Jun 2023 07:16:44 +0000
ROA not before: Fri 16 Jun 2023 07:16:39 +0000
ROA not after: Sun 15 Jun 2025 07:16:39 +0000
asID: 140155
IP address blocks: 154.16.241.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3987 (0xf93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 16 07:16:39 2023 GMT
Not After : Jun 15 07:16:39 2025 GMT
Subject: CN=648c0c5c-74d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:09:f9:c0:60:b3:6b:25:b5:5a:48:70:c8:71:
77:b5:80:93:dd:d0:a8:99:e8:be:ca:54:03:4c:b9:
a6:50:6e:f7:78:fc:55:08:00:48:90:27:42:87:41:
47:82:c6:0d:94:bf:c0:1c:aa:05:c7:9f:a5:1b:b0:
c0:77:c1:02:82:1d:bc:57:13:0b:fe:80:ce:83:52:
21:a8:13:e2:6e:97:bb:3e:ee:d1:7c:e8:66:b7:16:
74:41:84:38:98:5c:db:1c:f7:41:86:a4:b0:8d:f8:
48:93:17:d2:6a:61:cb:aa:91:fb:c0:56:16:ba:a9:
a2:eb:66:a2:70:ef:03:4f:f7:f9:5a:75:5f:76:3e:
f2:7a:26:14:b8:b8:e4:bb:fd:03:bb:85:b1:90:3b:
40:c4:76:9c:93:1c:51:02:ff:ea:99:0c:60:91:4b:
64:de:69:44:0c:51:f9:75:b1:d4:d7:cc:1b:1e:e8:
ed:63:c1:2a:fc:f9:53:4d:e5:29:7a:af:c8:fe:d7:
a3:81:c4:2c:39:02:47:55:1e:fb:46:01:83:d4:6e:
15:ab:69:6d:33:c6:59:98:d9:5f:85:2e:10:c7:88:
57:76:46:68:65:3b:8c:92:9b:d9:3b:88:cb:61:f3:
4d:27:2c:5b:19:10:3a:31:0f:a8:f5:c8:5a:42:11:
a1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:88:FA:22:57:4C:B0:71:5F:F5:13:1A:81:AE:82:DB:93:08:E6:DA
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BF6818400C1511EEA9D25E2C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.241.0/24
Signature Algorithm: sha256WithRSAEncryption
64:0a:52:1c:4a:e9:d3:68:d4:dc:d1:a0:db:c2:24:15:d9:c2:
3e:69:50:b7:c6:b2:62:b7:46:70:8a:b2:bc:92:12:9e:8d:04:
82:19:c0:25:ee:a7:dc:5c:07:ca:9e:3a:6e:4c:ab:27:a5:17:
44:7b:94:04:79:53:a1:1b:12:13:c8:54:fb:56:2c:98:3f:ce:
ac:92:67:40:39:1d:12:52:e0:2d:77:4f:0d:20:5c:be:d3:a6:
56:a4:13:09:bd:6f:c0:4b:43:07:4b:c3:08:ea:bd:7f:a1:11:
75:4a:82:4a:7a:5c:35:3c:f8:fc:6f:da:ef:03:40:69:4a:e6:
45:97:7a:68:70:5e:3b:20:5b:4e:ff:95:b9:ce:f9:54:dd:40:
ba:f6:44:68:29:ac:cd:3b:45:77:24:76:25:b6:4b:61:50:ea:
27:93:74:16:a1:0a:bf:12:a3:dc:db:53:52:79:de:fc:9e:3f:
56:f8:ae:21:f9:c4:a2:ed:2d:1b:61:1e:8d:a1:3a:73:f0:f6:
f4:3a:82:b7:a5:fd:b5:7f:d7:b8:66:4e:2d:1e:c2:4e:10:cb:
7b:6c:e5:4c:61:61:e4:6d:d3:ec:41:50:47:a9:e4:a6:13:72:
bd:10:39:32:66:e0:f7:12:04:58:42:7c:85:3d:a8:e7:c4:b1:
bb:01:73:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 14:53:55 2023 by rpki-client on console-fra.rpki-client.org