Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C96D7EFE092A11EEA3C5D6444AD9E6FC.roa
File: C96D7EFE092A11EEA3C5D6444AD9E6FC.roa (raw, json)
Hash identifier: qs0BJ5Cns9NPZVa5gRPF+hfG4u1PN36csSnztzFfJoo=
Subject key identifier: 71:75:24:3B:4C:4D:C2:BB:F1:F4:07:35:B7:9C:64:E8:38:F0:28:B1
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F34
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C96D7EFE092A11EEA3C5D6444AD9E6FC.roa
Signing time: Mon 12 Jun 2023 14:09:47 +0000
ROA not before: Mon 12 Jun 2023 14:09:43 +0000
ROA not after: Wed 11 Jun 2025 14:09:43 +0000
asID: 204843
IP address blocks: 154.16.22.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3892 (0xf34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 12 14:09:43 2023 GMT
Not After : Jun 11 14:09:43 2025 GMT
Subject: CN=6487272b-3975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:07:64:42:b5:c2:21:4b:b9:6c:12:ef:47:6f:
d3:b3:78:19:4b:b0:3e:fb:bf:36:d0:97:14:c5:81:
b9:c4:8b:47:c3:9a:ab:0b:04:01:77:e8:10:64:d4:
61:fb:61:a3:7e:ce:50:83:5e:15:d5:f2:d2:8c:ce:
8e:5e:40:38:a5:6e:32:e4:c1:89:af:40:08:c9:a3:
af:df:6f:e5:31:69:7a:c2:bb:1c:b7:c1:ab:15:9a:
75:ea:88:0f:c0:f0:da:a6:92:21:8f:18:06:bc:a8:
af:fe:17:52:c6:d9:22:8e:03:0c:a3:08:15:a7:1e:
33:88:32:c4:ed:b5:bf:9a:7d:7e:76:06:be:89:92:
82:ae:59:2c:ef:1a:39:bb:9c:83:e6:4b:20:5e:6c:
88:f8:f1:8c:81:d5:a9:77:69:1a:69:60:3f:45:8c:
46:0d:46:f5:79:f2:c3:af:62:9d:ad:ea:38:4d:a6:
87:94:dc:97:33:ba:11:aa:ee:27:bb:6d:e6:b1:28:
31:1d:9d:a0:a5:3c:44:a1:c4:47:53:c7:07:5b:5d:
cc:ab:11:2f:d3:e6:c2:5b:f8:24:52:ae:56:24:84:
05:88:f9:2d:7e:be:fa:98:84:d5:1b:60:76:a2:17:
d0:25:ad:b8:31:81:a5:b6:27:38:4e:1a:97:4c:bb:
45:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:75:24:3B:4C:4D:C2:BB:F1:F4:07:35:B7:9C:64:E8:38:F0:28:B1
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C96D7EFE092A11EEA3C5D6444AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.22.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:15:b7:43:43:38:9b:db:07:6d:67:97:6d:e6:d0:d0:31:e4:
89:f7:9a:ab:c8:5c:d2:8b:4e:7c:99:a5:42:c0:84:1b:00:3a:
c5:cc:ad:9b:4f:91:bd:cb:13:b4:71:65:b4:0b:3d:18:71:4c:
fa:d2:ba:8e:17:64:56:44:e7:5b:cf:fc:74:2e:55:c1:d7:fe:
e7:97:3b:51:0a:49:9e:f7:67:0a:be:93:c6:e9:00:88:42:ad:
1b:2b:46:05:08:81:89:a0:2e:2c:9a:54:9d:0c:12:e6:46:32:
28:9a:28:0a:e3:54:1d:6e:de:01:d3:cc:23:be:8c:37:46:03:
7a:b5:b0:fa:4d:b3:32:df:a4:6e:8e:97:53:4f:0a:73:a7:6f:
3f:2c:b1:ab:f0:11:b9:e6:74:3c:29:3c:cf:e0:f0:6e:a1:9b:
8f:f8:ef:ef:a1:3e:f1:7c:ee:31:42:02:c8:56:02:de:41:ee:
b7:59:a0:b1:07:b6:e0:ba:bd:37:b3:9a:1e:d4:b8:90:de:b9:
b5:fa:e6:27:e5:34:31:50:9d:45:f2:26:ac:47:dd:33:51:06:
19:29:ae:d4:8b:aa:f0:47:91:83:7e:49:7d:86:4d:6a:fb:e7:
e8:0b:80:c2:33:14:d3:d7:cd:dc:c5:be:b9:38:c1:3d:4c:5f:
ff:4d:0c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org