Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D852C754524411EE9EA135884AD9E6FC.roa
File: D852C754524411EE9EA135884AD9E6FC.roa (raw, json)
Hash identifier: Ki6bdNgoU4xM3je6LCRCcdVG78U3PxtuX7mfffZQOew=
Subject key identifier: 13:DE:D5:6D:75:8F:D3:B4:5C:C0:09:C9:B7:35:BC:6E:97:97:29:9E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1228
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D852C754524411EE9EA135884AD9E6FC.roa
Signing time: Wed 13 Sep 2023 14:50:14 +0000
ROA not before: Wed 13 Sep 2023 14:50:10 +0000
ROA not after: Sun 15 Sep 2024 14:50:10 +0000
asID: 210030
IP address blocks: 154.16.100.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4648 (0x1228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 13 14:50:10 2023 GMT
Not After : Sep 15 14:50:10 2024 GMT
Subject: CN=6501cc25-443b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:13:ba:9e:15:ad:76:10:0d:7a:f1:7b:89:
70:f9:08:0f:d9:d4:45:f8:dd:6b:0a:a0:8f:e5:31:
a8:5b:1e:55:f2:21:b6:96:ea:e3:2f:e0:79:26:e4:
e1:8e:eb:73:ee:2c:f8:08:22:db:ad:d9:c0:ff:6e:
75:e3:dc:4f:07:30:08:f3:30:ab:f6:b0:a8:db:c4:
b1:5d:f3:4c:95:73:6c:b5:1b:07:47:51:e9:15:14:
93:6b:e7:ae:aa:5a:98:85:fb:6c:db:f8:89:b0:51:
f1:de:e1:ad:f4:84:70:31:fb:fb:55:aa:69:2a:7d:
d4:91:1d:ca:62:6f:8b:f5:01:45:41:64:b8:ea:2c:
f6:f1:16:7e:44:81:6f:f1:e7:29:ea:1f:b2:8e:56:
e4:40:44:c8:b7:0e:ed:43:c8:ea:c6:9a:42:5c:cc:
26:67:c8:bd:51:fe:0d:05:33:c4:95:9f:67:af:12:
de:09:f7:64:f0:83:78:fa:6c:8f:4f:57:bf:dd:76:
c3:ef:74:db:6b:57:d8:58:1f:86:5d:c1:2a:23:98:
f2:cb:09:03:e0:86:0b:59:7c:ed:90:7d:a2:84:d6:
a6:7f:a6:ce:64:d3:16:e4:fc:14:bb:52:c3:f4:11:
37:88:d1:b9:03:ff:e2:c7:df:82:c3:72:d3:e5:7e:
a3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DE:D5:6D:75:8F:D3:B4:5C:C0:09:C9:B7:35:BC:6E:97:97:29:9E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D852C754524411EE9EA135884AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.100.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:8a:a6:47:92:d9:09:86:93:bd:8a:34:ca:f5:81:88:e0:12:
56:88:ca:ee:ba:81:c5:ff:1f:01:81:6d:8d:fe:fa:88:72:b6:
1d:d1:57:95:81:10:66:58:c5:6a:86:9a:96:36:fe:e2:94:e2:
13:1c:ce:21:02:94:08:e4:5b:6e:b8:cb:eb:b8:14:b2:95:06:
7c:4d:39:57:4c:68:1b:b0:e1:22:2c:25:0b:e0:87:16:f2:a8:
3e:45:8b:15:6f:f8:17:d8:ae:1a:19:e1:a8:5a:e1:8e:c4:27:
a3:ba:a6:04:7a:49:64:87:b6:0f:69:9a:43:95:32:c3:08:d6:
ba:d9:16:e7:d2:b5:e6:cb:aa:df:be:56:b0:90:ac:1c:ab:46:
c0:e6:5a:ca:45:24:c6:28:2c:b7:f2:d3:8c:d4:0c:90:3c:28:
61:a6:ad:f0:d6:1c:61:d8:e2:32:fa:bb:74:b1:0f:b6:06:05:
dd:b1:a2:00:40:01:d5:d7:9e:f1:b4:10:e4:7a:55:82:05:1c:
ab:24:da:9c:2e:46:a5:dc:49:a0:f2:e6:46:85:65:6c:81:17:
75:6b:d6:64:cb:b8:14:36:f7:e6:43:13:43:62:63:fa:86:76:
96:b6:06:9a:ba:c3:53:7b:d9:23:7e:29:5d:89:5c:f0:c4:94:
5d:50:77:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 12:12:59 2023 by rpki-client on console-fra.rpki-client.org