Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BFC1B4120ABD11EE844DDA134AD9E6FC.roa
File: BFC1B4120ABD11EE844DDA134AD9E6FC.roa (raw, json)
Hash identifier: JT9jZ1KxseQvhmThQYmEEM7s4lb9JnQoQAwDQs+zajg=
Subject key identifier: EE:0E:8D:BA:F2:10:51:18:94:BB:5D:88:79:DA:08:6A:B7:AD:DA:58
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F64
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BFC1B4120ABD11EE844DDA134AD9E6FC.roa
Signing time: Wed 14 Jun 2023 14:14:18 +0000
ROA not before: Wed 14 Jun 2023 14:14:14 +0000
ROA not after: Tue 10 Jun 2025 14:14:14 +0000
asID: 140641
IP address blocks: 154.16.240.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3940 (0xf64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 14 14:14:14 2023 GMT
Not After : Jun 10 14:14:14 2025 GMT
Subject: CN=6489cb3a-2580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f6:d7:06:2d:51:3d:59:83:86:11:ac:fb:cf:
4d:5b:a4:13:18:00:a3:89:17:0d:6e:90:df:7e:85:
d4:0e:24:04:ec:29:55:9a:db:07:f9:35:df:bd:2f:
18:2f:cc:4c:a7:96:a1:66:ce:66:98:38:ff:64:bf:
09:2f:f9:7f:35:83:f4:39:ce:1b:aa:0b:a9:c5:b5:
b4:e7:51:3e:4f:af:31:af:4e:5a:fe:24:34:8d:52:
32:7c:d6:0e:2a:d7:c8:5c:35:97:4a:82:d6:c2:1a:
da:c0:1d:a5:c9:ea:76:3f:a8:40:8f:89:22:69:c0:
07:2b:76:3e:e1:f4:0b:fc:45:6d:9b:6f:98:1e:23:
f7:6f:a1:9d:4d:55:3f:e5:2c:8d:0a:b6:5d:b5:71:
4f:68:1e:13:af:2e:bd:2f:27:77:ec:06:cf:64:db:
30:6a:37:7f:9e:b3:fa:9a:19:7a:ca:4d:6b:02:4d:
ec:ad:5f:a2:92:37:e3:82:03:f7:1a:40:d6:12:eb:
c1:63:b7:c9:e2:e9:e0:92:2d:87:8c:f3:b0:35:fb:
d1:bd:69:48:b1:ad:66:32:97:24:bc:96:55:c3:7e:
14:c9:f2:dc:8c:f6:dd:cd:94:c4:ab:88:70:93:53:
ce:04:ba:a2:ef:e5:51:7d:e2:82:cf:82:8b:97:79:
ac:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0E:8D:BA:F2:10:51:18:94:BB:5D:88:79:DA:08:6A:B7:AD:DA:58
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BFC1B4120ABD11EE844DDA134AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.240.0/24
Signature Algorithm: sha256WithRSAEncryption
34:5c:68:96:31:17:ea:4e:fd:25:19:5a:09:72:39:d5:94:fe:
44:31:95:d4:0f:6c:6f:a2:71:a7:f3:94:e7:0f:dd:1e:1c:c3:
77:44:b1:35:a9:8c:39:e3:4c:e8:ae:76:c7:a6:bd:54:d5:5a:
d5:c8:3d:88:b9:c6:f1:9a:49:cf:f4:c4:7b:3e:05:5b:0b:a5:
67:59:34:e0:33:ff:0a:cf:4b:f1:c6:a4:6e:ed:c4:f8:63:9b:
ba:86:2b:7a:58:7f:f7:48:8e:58:9c:81:c4:df:b1:c5:bd:dc:
6c:32:57:8d:34:2d:07:12:f0:09:9a:88:f5:73:0f:60:a6:96:
28:a2:19:ed:c6:36:b6:be:e1:a9:e8:33:ad:ab:a4:86:29:5c:
66:60:7f:0d:11:a1:59:b8:63:d6:fd:f8:35:3d:8f:8f:1c:81:
08:ab:32:33:2b:9d:47:ae:4b:00:bc:95:eb:27:cf:0d:f3:de:
48:31:4b:fd:58:8f:a6:3f:18:09:9f:50:bf:13:aa:af:f5:1c:
5c:d7:30:02:47:81:76:18:b4:c4:0b:f3:0f:39:4d:34:09:cd:
e1:d4:91:b4:da:16:6f:f8:3e:76:77:19:41:63:4d:9d:b1:ef:
48:2e:97:00:5a:58:3a:10:f5:2e:88:9b:5f:fb:cd:59:04:11:
5c:a3:19:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org