Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D009309A27CB11EEB239B76C4AD9E6FC.roa
File: D009309A27CB11EEB239B76C4AD9E6FC.roa (raw, json)
Hash identifier: 8xBV808IE3SVT6I/iMtkP+tIwlWEadoMDrhZCtrfuWs=
Subject key identifier: 53:80:68:E3:B6:A5:1C:6A:E9:8E:7A:30:18:08:7C:5D:64:85:DC:BE
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 10BF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D009309A27CB11EEB239B76C4AD9E6FC.roa
Signing time: Fri 21 Jul 2023 13:38:02 +0000
ROA not before: Fri 21 Jul 2023 13:37:58 +0000
ROA not after: Mon 21 Jul 2025 13:37:58 +0000
asID: 200482
IP address blocks: 154.16.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4287 (0x10bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 21 13:37:58 2023 GMT
Not After : Jul 21 13:37:58 2025 GMT
Subject: CN=64ba8a3a-cd93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:42:18:e6:d8:a3:38:f9:69:b8:38:e7:00:5a:
04:dd:ca:80:58:f2:85:69:90:ac:72:7a:eb:1a:83:
e8:93:b0:eb:c2:62:20:da:89:c6:bd:fa:4a:77:1d:
40:e4:0c:f9:22:76:e9:6e:94:d7:50:a6:04:2e:ad:
68:9d:08:a6:fb:8a:c4:f3:b5:3f:b0:69:7d:bc:26:
06:0e:52:fd:ac:2c:a9:79:84:b5:3d:10:b0:3b:f1:
42:9a:c0:ed:a8:8c:1c:6b:c3:7b:b1:58:42:05:5d:
44:cc:9e:74:4a:27:59:f3:8f:d4:0b:16:67:a0:b2:
ec:80:28:63:82:17:7f:66:6a:98:d9:40:4b:2a:9c:
e1:a2:9a:a8:df:fc:1e:4f:f3:55:25:54:5b:bb:cf:
38:a1:0d:1b:b5:fe:55:ec:57:9d:d2:65:1f:ae:d4:
9f:ec:0e:ca:b8:c7:73:17:e6:12:43:99:bf:29:fb:
3a:8b:9a:f8:1f:96:a1:98:a5:f9:bc:b2:06:88:45:
34:b7:63:60:c0:4d:a9:b0:99:c7:c1:e4:1c:74:28:
78:c8:fb:d2:70:20:6a:b1:31:5c:9a:8d:0f:13:17:
1d:e7:30:36:f0:1e:62:74:be:f5:1c:60:72:d5:1e:
b5:ed:08:a7:84:7a:7a:8c:eb:9a:b3:b8:22:08:b5:
c4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:80:68:E3:B6:A5:1C:6A:E9:8E:7A:30:18:08:7C:5D:64:85:DC:BE
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D009309A27CB11EEB239B76C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.203.0/24
Signature Algorithm: sha256WithRSAEncryption
83:5c:61:1d:79:9a:de:05:f9:f7:e2:63:a6:08:f5:2e:a2:42:
e5:e8:f7:10:82:52:74:77:4e:91:b2:23:47:f6:ad:70:69:eb:
a5:07:5d:b6:7b:3d:f6:af:97:34:db:eb:02:41:cf:fb:51:58:
e4:a9:14:97:e0:c3:01:de:b2:ac:fb:34:ed:ce:4c:ab:f6:d2:
02:2e:e4:87:30:8d:66:c7:f5:b5:d0:85:02:95:94:3b:e1:fa:
02:75:23:a5:3c:93:2f:7e:84:ad:80:40:ea:f7:59:8c:e7:2a:
15:70:d1:2f:5a:d6:c0:15:df:78:8c:8d:54:50:93:01:90:57:
0b:71:29:86:66:df:32:d2:fb:52:83:76:db:fa:78:1c:90:7c:
98:86:e2:54:df:d6:3f:fa:39:64:09:f2:ea:9a:45:72:87:e1:
66:aa:16:b1:dd:72:c2:56:bb:bf:3b:eb:04:55:93:d1:f6:23:
2d:62:6e:95:2f:45:24:b9:4d:95:0d:dc:42:4f:70:64:af:57:
67:5f:c4:78:7d:d9:22:de:33:21:7b:40:1d:cf:0d:7d:9a:0c:
a3:d4:6f:9a:8a:c1:a2:6b:e6:fe:40:f8:27:6a:a4:08:b8:a4:
ae:73:92:b1:d3:a7:23:09:00:04:05:f5:6a:be:56:73:ab:fd:
b8:5e:96:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 15 07:12:35 2023 by rpki-client on console-fra.rpki-client.org