Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E141620605ED11EEABE50D1F4AD9E6FC.roa
File: E141620605ED11EEABE50D1F4AD9E6FC.roa (raw, json)
Hash identifier: h/BAtNoxZJAJKwkZei9R2cbs77Kcexm/G3gjhq0F34w=
Subject key identifier: 7B:5D:9A:57:9E:E9:BB:15:27:EC:64:93:11:6F:99:F0:9E:98:26:8C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0EFF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E141620605ED11EEABE50D1F4AD9E6FC.roa
Signing time: Thu 08 Jun 2023 11:16:14 +0000
ROA not before: Thu 08 Jun 2023 11:16:10 +0000
ROA not after: Sat 07 Jun 2025 11:16:10 +0000
asID: 61138
IP address blocks: 154.16.214.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3839 (0xeff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 8 11:16:10 2023 GMT
Not After : Jun 7 11:16:10 2025 GMT
Subject: CN=6481b87e-805d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b2:ef:dc:64:9e:d1:f2:c2:54:a2:f2:14:de:
31:0a:3e:f5:6f:23:00:c2:8e:cc:e4:ea:ff:e3:73:
9e:cd:00:32:b1:97:03:cf:48:26:1d:5f:f7:e2:77:
46:ec:68:2a:9c:7d:01:8a:98:07:5a:93:09:17:75:
55:f8:86:c1:02:54:f4:84:da:d8:29:01:92:18:2d:
23:37:10:35:9d:4b:cf:5d:35:ac:a8:4c:f6:9f:51:
74:e5:b4:78:78:80:ec:c1:d1:84:c5:5a:3b:50:7d:
19:73:d5:51:73:0c:c7:0a:59:19:1e:64:61:17:ce:
7a:02:0a:2b:57:44:6a:ee:44:7f:5e:b6:88:5f:c7:
db:4f:6f:12:59:bf:b1:a5:b5:22:d8:11:f9:8f:34:
7e:7b:d7:74:24:54:96:33:c4:e0:f7:49:c3:7b:35:
64:5a:f3:19:dc:11:5b:37:02:d7:77:c8:8c:af:6b:
a5:e0:fc:18:a3:71:15:d3:42:93:f4:39:61:26:56:
95:21:da:f1:94:b8:6f:ff:32:68:f2:95:ca:33:f6:
4b:1f:fc:6c:3b:49:55:df:94:9b:b0:24:c0:4b:cb:
9d:a2:25:36:ba:3b:5c:65:2f:d4:26:db:44:79:33:
e5:93:2c:06:a4:b1:33:6a:e8:b1:a2:31:85:a1:5b:
1b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5D:9A:57:9E:E9:BB:15:27:EC:64:93:11:6F:99:F0:9E:98:26:8C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E141620605ED11EEABE50D1F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.214.0/24
Signature Algorithm: sha256WithRSAEncryption
44:08:95:61:47:43:22:d9:6f:71:83:b6:cb:98:68:b0:57:34:
df:e9:c1:31:53:e6:01:e0:e0:d5:25:29:55:9f:6b:0e:d5:6f:
fe:28:82:3e:08:6c:1a:e7:7d:df:4f:77:ec:1e:ae:9c:3e:76:
ad:77:3b:a0:fd:41:ac:94:0e:e7:d8:00:b7:7d:42:a9:37:cf:
44:f6:6d:39:bd:7e:10:3c:3b:69:d5:59:1c:66:25:c8:04:11:
79:5e:e9:39:8d:a7:c8:d9:12:a9:ca:c4:91:af:f0:82:72:4c:
67:ca:cf:6a:64:da:68:65:bc:1b:5f:ad:23:b8:1b:5b:ea:9d:
27:31:e5:ea:72:8d:65:96:05:73:57:33:8c:3b:51:95:b8:9f:
8d:87:42:08:86:7b:d5:5b:3b:c5:28:fe:f3:52:44:b7:ee:16:
0d:74:72:46:ec:a8:c1:14:a8:a3:80:70:2a:d5:fd:3f:98:83:
a4:39:36:e8:f9:4d:48:2a:7b:45:96:1d:6a:45:61:44:ce:1c:
eb:53:31:16:12:d8:be:73:c4:81:d6:da:62:11:10:26:71:6c:
5d:53:22:d8:46:a5:09:aa:86:cc:c1:0a:02:65:9d:18:9e:67:
2f:9b:54:ce:68:1f:f1:cf:dc:5d:55:a6:99:91:0a:b8:00:fa:
a8:06:72:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org