Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D453BC8615DA11EEB54706424AD9E6FC.roa
File: D453BC8615DA11EEB54706424AD9E6FC.roa (raw, json)
Hash identifier: uUFibuKGk5/XeLbqxbG6bxnB8/vNwlmArSpOdsvyttM=
Subject key identifier: 7E:0A:5F:52:20:63:C8:76:A7:8C:73:C5:7E:C8:F1:D7:52:98:EE:25
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1025
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D453BC8615DA11EEB54706424AD9E6FC.roa
Signing time: Wed 28 Jun 2023 17:40:10 +0000
ROA not before: Wed 28 Jun 2023 17:40:07 +0000
ROA not after: Mon 16 Jun 2025 17:40:07 +0000
asID: 834
IP address blocks: 154.16.82.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4133 (0x1025)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 28 17:40:07 2023 GMT
Not After : Jun 16 17:40:07 2025 GMT
Subject: CN=649c707a-df45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:49:18:5c:55:6a:5c:02:1d:aa:2d:3c:34:
8c:3d:0e:05:8a:b9:fe:8a:c9:a4:f1:fa:f0:ed:78:
40:1c:0a:f1:3d:15:35:e5:30:64:4f:7a:c7:aa:dd:
42:67:26:37:33:18:0c:74:5a:bb:0f:e6:8f:e9:c8:
07:9b:7f:76:48:f7:d2:ab:36:28:d1:29:7a:67:b0:
ad:2e:a8:cb:37:a9:69:53:17:7e:af:ee:a8:e6:38:
3f:0b:3c:03:90:21:43:12:a1:57:74:23:68:b2:c6:
3f:7f:b1:9d:16:41:3f:4a:6e:11:05:e6:23:7d:58:
57:7e:09:38:4f:8c:31:e0:11:45:6f:29:33:80:ef:
45:83:92:b9:a8:80:b3:61:c6:f8:9c:95:fb:52:85:
00:54:b9:0c:96:ed:86:c5:a4:20:3e:63:c9:a5:95:
ea:cc:46:13:41:ed:d6:d6:32:ff:fd:58:69:4a:ae:
b5:d8:f0:e1:1d:c6:8e:7e:e2:75:ec:94:35:b3:a8:
5f:ca:e3:b4:7c:1b:e8:8f:53:9d:2c:e3:91:70:eb:
ca:9f:85:e3:57:8c:63:b5:47:85:75:31:3f:06:bd:
6d:f7:4c:29:5a:6c:75:23:aa:65:63:b8:fe:03:02:
a8:04:1e:08:18:d1:d6:95:51:e8:e8:70:00:0d:a4:
47:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0A:5F:52:20:63:C8:76:A7:8C:73:C5:7E:C8:F1:D7:52:98:EE:25
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D453BC8615DA11EEB54706424AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.82.0/24
Signature Algorithm: sha256WithRSAEncryption
85:07:58:25:b7:f3:65:bf:ee:b8:cf:0d:6d:83:5c:c7:b9:cd:
9b:2a:7d:9c:87:12:7a:ca:94:4e:98:d4:13:9c:19:cd:1d:2a:
63:e2:e2:b7:44:fe:42:c1:6e:14:62:16:80:58:04:d6:e8:c4:
94:0a:40:97:4a:9a:0a:0a:9f:13:07:77:2a:15:8e:20:3b:b7:
f5:ef:d1:d2:87:47:f6:f1:55:b2:b1:a3:d2:d4:d3:88:94:3c:
52:dc:c6:05:d7:35:3a:41:ab:c3:c9:f9:10:5a:f9:3e:27:80:
41:e0:98:ad:f2:d2:32:1f:2c:7c:96:d6:ca:62:fe:bb:b9:51:
ec:af:ac:4b:e8:d8:65:fa:56:47:47:c7:6e:8c:ca:36:a9:79:
23:f6:50:ef:31:49:73:87:14:a7:0f:48:9d:30:32:74:28:16:
c9:31:21:54:cb:7c:3a:85:3e:52:27:46:71:90:63:78:53:42:
fb:30:82:f2:14:ba:99:13:65:79:26:82:dc:b9:dc:dc:e1:1e:
0b:0b:2d:a7:d4:ea:6a:89:43:4f:c9:ff:3d:35:6c:50:9c:1c:
9d:c4:4d:8a:17:31:9f:42:c3:90:ee:40:2a:68:e4:8b:0a:60:
40:f1:1c:8c:43:56:17:39:f3:49:ff:90:1f:6e:16:b6:0e:80:
22:ac:d8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 28 08:42:49 2023 by rpki-client on console-fra.rpki-client.org