Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DB7904B2C56711ED9013FFB8F1222468.roa
File: DB7904B2C56711ED9013FFB8F1222468.roa (raw, json)
Hash identifier: J9O6g1k5606okwDMiGEz465s6oikPAOCcfoDrM22t7A=
Subject key identifier: E7:5C:9D:66:6C:AE:E6:B9:9C:9C:05:97:C8:6F:81:C8:86:FE:BA:34
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0CFF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DB7904B2C56711ED9013FFB8F1222468.roa
Signing time: Sat 18 Mar 2023 08:35:37 +0000
ROA not before: Sat 18 Mar 2023 08:35:31 +0000
ROA not after: Wed 19 Mar 2025 08:35:31 +0000
asID: 211826
IP address blocks: 154.16.23.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3327 (0xcff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 18 08:35:31 2023 GMT
Not After : Mar 19 08:35:31 2025 GMT
Subject: CN=641577d9-e603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:55:eb:73:76:f1:e8:e3:85:4d:b4:18:4c:94:
1a:0d:23:d9:b1:18:04:7f:ba:2f:d7:83:3b:4e:89:
e7:b0:7e:d9:c1:12:66:11:79:c3:59:4c:58:05:7c:
10:de:2a:85:99:eb:0c:e3:d7:60:6a:95:79:33:0a:
1c:68:1a:6f:4f:a3:7b:1a:a6:32:92:59:61:e8:f4:
69:2a:93:f4:f1:9e:2f:54:82:09:fd:b5:69:2d:86:
fc:1a:ee:48:e1:cd:d7:31:0a:fd:e6:8b:55:5a:8b:
6c:97:4d:5a:60:8d:d8:79:43:16:17:03:de:c3:7d:
4e:a3:40:56:ae:0b:4b:fe:49:a0:bd:4e:2c:ce:11:
dd:f0:02:4f:f5:0a:59:37:e6:75:84:66:45:ee:99:
89:2a:b8:05:e0:26:e8:cf:94:03:a1:e4:0a:1e:4d:
f5:ee:98:7b:70:f5:5d:dd:d0:14:ce:e7:1e:02:10:
9e:c1:da:3a:1d:16:56:fb:a1:31:a1:fb:60:f9:64:
07:fb:1f:56:76:f0:77:f1:f1:e2:55:32:4b:d7:53:
0b:2c:a1:b6:3b:c2:3e:2d:1a:d3:5b:9a:18:f6:12:
43:e1:db:3d:42:9e:d7:8c:3e:18:53:43:30:96:d4:
05:a7:99:e5:9f:c8:90:0f:47:0f:eb:14:cb:0f:d5:
ad:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5C:9D:66:6C:AE:E6:B9:9C:9C:05:97:C8:6F:81:C8:86:FE:BA:34
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DB7904B2C56711ED9013FFB8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.23.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:21:aa:39:ba:66:5c:4a:9c:da:22:da:ea:29:46:65:56:a1:
02:72:3c:35:8f:cc:4b:ba:bb:73:99:35:92:42:a6:81:e3:a2:
3b:06:7b:fe:70:56:ed:8d:a0:34:ba:af:cb:32:79:85:e3:8e:
11:97:64:79:88:67:3f:1c:4c:ce:36:f2:53:c5:23:d9:28:40:
9b:f2:b3:ed:5d:cc:99:02:4a:d2:b5:66:62:83:4a:fe:7f:a3:
55:e5:80:d8:1b:37:08:0f:e2:59:64:be:f4:f9:9f:a0:6b:65:
e2:43:35:10:73:cb:36:1f:f2:e9:b1:f2:90:19:26:2e:51:c9:
4a:87:90:d8:ad:4b:18:d7:4e:fe:3e:ee:02:dd:d6:83:82:61:
17:ba:c6:1f:9e:7c:6a:56:b4:8b:7a:43:b6:2c:a3:7c:13:65:
b2:86:62:0b:85:53:2d:f7:dd:3f:d0:fd:53:84:14:24:4a:3d:
e2:5b:36:4f:1b:f6:15:0e:2c:3c:d4:c8:81:4d:d0:92:26:83:
5d:72:eb:99:ee:20:7f:55:75:66:08:f9:bd:db:d0:5f:c9:93:
c6:ee:5d:14:db:51:78:de:c2:cc:53:73:b1:09:47:2c:b2:5f:
81:38:9d:5a:a8:de:97:1d:93:d5:40:05:9a:28:3d:db:df:3a:
80:ee:fc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org