Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CB8A146C045D11EEBA6CA75C4AD9E6FC.roa
File: CB8A146C045D11EEBA6CA75C4AD9E6FC.roa (raw, json)
Hash identifier: 4VVpV3BwgMureEVbWyLtkQ+1YV6LhR7NS6/ngSwTt1U=
Subject key identifier: 39:26:C0:39:B5:3B:A9:AD:68:CE:8E:74:88:29:98:96:BF:94:0D:EE
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0EC7
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CB8A146C045D11EEBA6CA75C4AD9E6FC.roa
Signing time: Tue 06 Jun 2023 11:32:19 +0000
ROA not before: Tue 06 Jun 2023 11:32:15 +0000
ROA not after: Sun 08 Jun 2025 11:32:15 +0000
asID: 6939
IP address blocks: 154.16.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3783 (0xec7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 6 11:32:15 2023 GMT
Not After : Jun 8 11:32:15 2025 GMT
Subject: CN=647f1943-5f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d7:a7:77:2f:ba:d6:e2:28:44:e7:8c:a8:8f:
aa:31:a2:29:17:10:e5:63:26:be:01:60:bf:da:7e:
8a:f7:6f:b4:85:75:83:70:ac:d0:eb:99:f3:68:5f:
1b:f6:f6:72:b2:02:99:0b:dd:67:87:15:fc:11:14:
49:7a:aa:3b:18:06:3c:93:30:e2:29:3c:54:42:2d:
49:b4:f9:cb:97:41:4f:1f:f7:19:92:4c:d2:58:03:
fc:23:5f:27:8e:5e:b4:5d:a7:e7:91:16:bc:3c:c5:
3b:8e:7d:da:c3:4a:57:ce:d5:3a:cb:e8:d3:b1:0a:
76:f3:4a:14:b4:82:0f:bd:b4:31:95:a5:c0:13:0f:
53:16:95:63:f2:dd:39:7d:bb:ae:dc:7b:b7:58:9f:
aa:7b:25:e7:ae:8e:f4:a8:b8:c8:59:34:25:4b:f0:
25:95:ba:66:d5:69:91:6f:3a:10:0b:5f:5d:e1:d2:
79:03:9a:a7:16:21:ff:54:95:66:b7:09:74:9f:8c:
da:ad:65:ba:fd:4a:80:d8:19:0c:8e:71:e4:54:1c:
0a:09:84:64:d5:b5:3e:63:6e:a1:b4:03:2c:e5:9a:
c0:08:92:14:45:64:38:5b:64:57:42:c9:eb:3e:4f:
b5:af:c1:70:26:d9:a8:29:20:8f:74:7c:79:9d:18:
5b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:26:C0:39:B5:3B:A9:AD:68:CE:8E:74:88:29:98:96:BF:94:0D:EE
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CB8A146C045D11EEBA6CA75C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.207.0/24
Signature Algorithm: sha256WithRSAEncryption
35:91:5d:da:3d:7f:bd:c6:56:f8:47:67:af:66:c8:fd:92:af:
bb:0e:e7:ec:96:cf:e9:73:69:65:fd:1d:a5:83:39:5c:dd:18:
8a:5d:0d:a4:25:a6:43:6b:9c:2e:94:fd:20:a0:b0:53:1b:37:
40:7c:a3:5f:7d:86:df:a9:4b:48:ce:92:40:76:ae:da:e5:ac:
8c:29:e8:d0:23:45:4a:65:44:e8:d4:f0:8d:c5:4f:68:48:11:
5c:59:48:76:a3:1a:e5:54:3b:e4:f4:46:01:55:23:40:64:ce:
1a:eb:ad:bf:b4:1f:7d:75:5d:2e:57:47:c6:b1:a1:eb:88:18:
ce:a4:bc:27:be:b2:9f:3c:52:ae:52:00:69:a1:46:9b:b6:70:
8a:d1:97:b8:e7:36:f5:71:cf:e1:51:21:b9:4e:fd:06:eb:fa:
2a:7e:ef:53:d2:9d:56:84:2a:5e:2d:3e:e0:4f:90:8d:47:73:
95:bf:cf:97:6b:e1:17:76:89:59:81:c2:65:9f:ca:df:75:b7:
13:03:32:18:1b:e7:e3:ae:f4:2e:3f:09:01:16:db:31:6b:78:
22:0d:3b:b7:9a:ac:38:ad:83:6c:24:31:8d:29:85:b3:ba:e1:
e9:26:ff:10:6b:e4:29:0c:27:f9:21:d1:0e:ef:c9:7f:ed:96:
65:90:1c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org