Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D3697D221C3C11ECA349C706D8A014CE.roa
File: D3697D221C3C11ECA349C706D8A014CE.roa (raw, json)
Hash identifier: SQ40Lue/H/Fhv/X156HH6XnNthoG+aZ7VWEQhmWrsYY=
Subject key identifier: BC:C6:3B:9D:5D:DB:82:CF:8E:D2:93:84:AB:E8:83:6A:06:AF:4F:CB
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0693
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D3697D221C3C11ECA349C706D8A014CE.roa
Signing time: Thu 23 Sep 2021 07:06:51 +0000
ROA not before: Thu 23 Sep 2021 07:06:46 +0000
ROA not after: Sat 23 Sep 2023 07:06:46 +0000
asID: 30535
IP address blocks: 154.16.184.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1683 (0x693)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 23 07:06:46 2021 GMT
Not After : Sep 23 07:06:46 2023 GMT
Subject: CN=614c278b-b1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a3:3d:f4:12:59:98:2e:34:37:f6:9a:7c:dc:
4d:75:f0:16:39:ae:5c:9f:f3:15:71:0f:0f:61:e6:
1f:0a:3f:97:f0:45:89:e7:93:08:40:9c:32:ca:c7:
43:af:54:7d:55:9c:32:3d:21:e8:0e:51:eb:d5:da:
5f:11:be:c7:67:c4:d5:52:c5:17:28:c0:29:52:b9:
24:ce:a0:a5:07:6d:8c:80:66:46:76:7d:ea:c6:d7:
24:fe:4c:48:69:f2:bc:d4:35:e8:e6:f7:11:a6:75:
30:88:c8:a0:9d:cf:68:52:cc:c7:73:31:fa:7b:58:
c1:cb:e9:fc:bb:08:38:55:dd:0f:e7:4b:ff:10:90:
1b:26:b0:af:f5:6b:aa:83:73:7f:97:5a:e3:a7:1f:
7f:5d:29:14:17:b2:3b:e9:c2:35:c5:a4:9f:cd:30:
0e:b2:5b:4a:71:df:41:82:06:50:30:91:15:97:ca:
aa:e0:6f:43:08:16:63:04:06:2c:25:15:42:f1:ed:
40:4a:10:22:49:42:47:55:12:66:16:7a:d0:70:26:
00:b8:df:5d:c3:48:32:2d:4c:d7:0d:2d:02:a7:ce:
96:8a:7b:0c:02:a1:5a:15:f7:f2:69:da:00:39:2c:
78:d1:ef:22:44:7f:83:96:98:00:c5:df:2c:f5:64:
46:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C6:3B:9D:5D:DB:82:CF:8E:D2:93:84:AB:E8:83:6A:06:AF:4F:CB
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D3697D221C3C11ECA349C706D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.184.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:af:99:d2:a6:a7:cc:e4:82:ae:0f:ba:b8:90:5a:c0:32:fc:
7e:29:56:87:aa:1d:bc:2c:8f:b8:63:f4:b0:50:e2:5c:dd:bb:
71:eb:39:19:27:16:38:69:8b:22:20:9c:e8:e1:30:af:1b:bc:
2e:fb:aa:56:91:cc:22:db:39:34:36:18:d1:a5:de:db:5f:75:
15:11:0a:42:ad:d0:4f:e4:01:81:4b:db:0b:f2:2b:c0:7b:72:
d5:d0:34:2b:d8:85:dd:d0:27:ed:63:a1:af:be:cd:cd:4c:b9:
a1:a0:da:1e:c6:d2:bd:69:0d:27:bb:dd:29:9d:11:c6:26:95:
e8:38:ae:4a:7e:8a:bd:27:d0:64:9a:35:af:fd:4b:41:b4:a8:
ee:2b:f5:5e:d3:b5:2c:f5:2e:c5:39:dd:46:9d:47:68:a2:78:
71:f1:08:a8:55:63:c5:df:6d:81:45:4b:5e:c4:1c:cf:f3:9c:
fc:8e:fb:92:82:c6:71:86:f4:65:78:5c:35:91:fd:31:e1:1a:
d2:40:8c:25:74:ef:63:7a:8e:81:dc:2d:7b:ec:d0:72:0d:19:
80:4a:9f:41:a4:99:c3:ae:b4:75:94:c1:b4:32:2d:26:50:bb:
00:c0:0d:76:5a:b7:10:ca:69:87:20:2e:03:28:8d:89:49:4c:
2c:1d:04:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org