Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C06D3FC4B30311ED8091B39DF1222468.roa
File: C06D3FC4B30311ED8091B39DF1222468.roa (raw, json)
Hash identifier: dg+hc8/5dp6xMnrvRD30VikJr6CyECtxr8mtHqlhzdU=
Subject key identifier: 3E:6A:29:65:C8:AC:24:9E:E5:D8:79:AA:36:7C:B0:65:25:47:38:15
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0BCC
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C06D3FC4B30311ED8091B39DF1222468.roa
Signing time: Wed 22 Feb 2023 22:53:41 +0000
ROA not before: Wed 22 Feb 2023 22:53:38 +0000
ROA not after: Mon 24 Feb 2025 22:53:38 +0000
asID: 204843
IP address blocks: 154.16.75.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3020 (0xbcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 22 22:53:38 2023 GMT
Not After : Feb 24 22:53:38 2025 GMT
Subject: CN=63f69cf5-a26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:0b:9f:00:40:f5:bd:f8:23:4f:18:62:13:
02:f5:5a:5d:35:1d:39:d5:5c:af:04:d4:39:3b:33:
b7:ec:08:56:1b:06:35:d9:fe:68:07:ff:41:a2:a7:
08:49:e5:84:3e:7d:51:aa:64:bd:ea:5c:4d:91:81:
eb:b9:5f:28:83:20:57:76:21:7f:17:2a:98:35:b0:
88:e5:32:09:80:5d:5d:1d:9b:f7:e8:4f:0c:64:e1:
c3:a4:8a:7b:f9:c5:5e:2b:bb:e3:2c:43:3f:fd:08:
b7:5d:73:12:f1:bd:99:33:0b:f7:6c:bc:05:2b:a6:
bc:ab:53:86:c1:e8:0a:b6:83:3d:fa:6b:89:a2:92:
8c:4d:ae:33:89:c4:53:85:7a:fd:cb:a3:2f:be:64:
d4:59:0a:56:ed:61:5b:f7:3d:8b:8d:fe:d2:e7:3b:
53:a7:56:4c:60:88:d1:ff:c9:99:48:1f:3a:58:49:
79:39:d1:20:3a:c5:61:f5:e6:b3:2c:4b:50:b0:46:
1b:c0:ca:ee:88:a4:1f:85:99:7f:f2:38:e9:18:06:
36:58:bf:3f:e3:91:62:1e:8f:65:4d:ea:e5:8b:bb:
be:83:20:5d:68:24:11:60:14:99:63:05:b9:ae:86:
2b:76:45:65:3d:b8:84:98:d2:9f:d6:ea:3f:89:84:
04:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6A:29:65:C8:AC:24:9E:E5:D8:79:AA:36:7C:B0:65:25:47:38:15
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C06D3FC4B30311ED8091B39DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.75.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:a7:cd:c1:7b:d4:6b:5c:6d:9b:8a:70:b8:35:db:e9:69:c3:
dc:2d:ea:a1:c3:0c:5c:95:88:e9:7b:b8:5d:0d:98:ca:2c:52:
33:f7:6a:48:4c:7e:17:51:77:32:68:c3:8d:12:c6:f4:77:ed:
23:60:8f:d4:95:23:19:ec:e4:69:50:20:a8:62:b4:24:f5:d8:
8f:fd:7c:4f:04:56:01:11:7a:8d:9f:03:e3:95:99:1b:ff:e2:
33:0c:da:c7:47:28:fe:c2:2d:3f:40:a4:9f:45:82:7c:7e:89:
47:d3:40:6d:2d:c8:bb:99:84:93:6b:ff:8f:b1:ef:af:51:bb:
82:35:d3:70:b1:4b:a2:a9:cb:39:bf:e2:aa:53:2c:43:c7:23:
46:24:69:4a:06:ea:11:bb:3c:4f:c3:eb:12:7d:78:39:2a:9f:
e1:24:d4:dc:9e:dc:6a:77:38:62:1d:fc:29:2b:28:26:08:75:
98:0a:12:90:3b:be:78:eb:5d:ed:f5:77:31:ad:e1:6a:23:df:
40:91:58:b3:cc:f5:7c:2d:7c:03:bb:e2:57:fa:d9:2f:86:c9:
f0:38:5c:37:f1:fa:14:02:b6:f4:94:d6:6b:85:a4:b7:e5:b8:
cb:dd:0e:28:e5:83:96:41:fb:f6:b2:d8:38:c4:7f:90:4a:a8:
9d:b9:cb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org