Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D987DB3A241A11EEAE96A0174AD9E6FC.roa
File: D987DB3A241A11EEAE96A0174AD9E6FC.roa (raw, json)
Hash identifier: Lj6Zt9s+Pz8Fv9FidaBQbgCKaXvaYjJ9B6C1Q76z9c8=
Subject key identifier: 68:59:FC:7F:FC:57:30:A2:06:4B:41:8F:20:8C:7B:F6:BD:06:BA:68
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 10A4
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D987DB3A241A11EEAE96A0174AD9E6FC.roa
Signing time: Sun 16 Jul 2023 20:53:43 +0000
ROA not before: Sun 16 Jul 2023 20:53:40 +0000
ROA not after: Tue 15 Jul 2025 20:53:40 +0000
asID: 834
IP address blocks: 154.16.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4260 (0x10a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 16 20:53:40 2023 GMT
Not After : Jul 15 20:53:40 2025 GMT
Subject: CN=64b458d7-2b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:80:43:45:46:61:0f:dd:d7:35:3d:ed:05:48:
b7:91:1b:2e:38:06:cb:71:6d:3b:37:4f:7d:c1:fa:
88:20:b5:73:09:cf:4d:30:a6:e0:59:93:d0:77:14:
91:c1:38:6f:eb:0f:8b:9e:f3:65:f8:6c:eb:3d:3e:
c9:91:5e:1b:ef:98:74:21:75:f5:3f:36:94:93:17:
a4:77:b7:23:cd:94:77:df:bd:67:ca:ba:d3:88:49:
10:55:c0:88:3c:48:49:c8:56:3e:2e:c0:d6:c1:64:
95:a1:e4:8e:71:bf:dd:5d:c7:96:5c:1a:69:9d:97:
bc:ec:3f:ca:b6:65:f7:ae:13:65:1e:ae:a5:f7:2d:
39:35:72:95:20:55:ac:06:24:8a:16:9a:d8:b3:d2:
04:d5:6d:ac:c9:c5:85:41:32:79:94:06:cf:47:20:
47:6e:fb:cf:a6:f3:83:e5:29:f0:35:05:1d:14:1d:
de:a4:e0:fc:38:9d:c0:6d:c7:25:ec:f8:40:a3:56:
78:3b:3a:0e:25:1c:16:a7:0a:a0:5e:2a:be:43:47:
4f:f1:7e:71:79:b0:df:c4:1f:6a:cd:fc:30:b8:31:
01:b5:9d:f9:10:bc:4e:a3:f1:8e:3a:11:ab:4b:c4:
cf:71:7c:9d:6a:e4:f6:a4:ba:14:80:ef:05:30:b6:
93:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:59:FC:7F:FC:57:30:A2:06:4B:41:8F:20:8C:7B:F6:BD:06:BA:68
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D987DB3A241A11EEAE96A0174AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.76.0/24
Signature Algorithm: sha256WithRSAEncryption
79:00:40:fe:05:5f:30:6c:e2:af:ad:d4:47:f4:43:eb:52:7b:
25:da:f3:70:72:2a:4b:58:a8:48:39:13:a4:12:9b:e3:44:a1:
a3:d4:dc:61:b5:d6:97:68:13:89:e0:cd:4e:c4:d8:2c:42:b4:
c8:c7:28:f9:88:74:dc:65:6d:76:2e:a1:fd:1f:dd:5a:9f:bf:
ec:36:49:ab:9d:b0:ba:a2:c9:70:95:2f:84:6e:38:bc:68:db:
5d:a0:5f:f5:f0:9a:22:1b:21:9f:db:aa:52:9f:8d:e8:50:9c:
a4:37:5c:b2:1d:dc:c7:79:a5:5d:e3:6b:df:62:07:2c:d7:95:
b2:1d:9b:64:cb:cb:c7:8b:57:1e:85:f3:9d:c3:2c:dd:0d:08:
28:70:4e:74:21:bd:b2:f1:e9:34:88:88:46:5c:ee:26:b5:13:
8a:b1:ec:de:33:ab:c4:e2:35:78:06:1d:d8:3c:d7:9f:97:64:
0e:0f:b8:39:89:4a:ac:51:32:fa:0e:72:eb:9d:26:c8:5b:11:
2b:14:e6:60:f5:8f:ce:eb:95:b4:01:7a:cc:0c:3b:b0:36:b0:
9d:ea:15:25:8f:c6:f7:c2:41:4e:ac:d3:76:3f:23:5c:3f:08:
a4:bd:95:ac:33:d8:87:05:69:28:ef:dc:00:68:6c:d0:dc:77:
79:04:99:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 07:25:04 2023 by rpki-client on console-ams.rpki-client.org