Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E225ABF20C1711EEA96387324AD9E6FC.roa
File: E225ABF20C1711EEA96387324AD9E6FC.roa (raw, json)
Hash identifier: 02OkQ6B4euW+RQDHqtzoLvdweI8RR4PLAEPGciWi7bY=
Subject key identifier: 17:99:4E:62:D8:0E:E2:7C:14:07:42:83:C7:C5:6F:17:F7:EB:D6:C6
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F98
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E225ABF20C1711EEA96387324AD9E6FC.roa
Signing time: Fri 16 Jun 2023 07:32:01 +0000
ROA not before: Fri 16 Jun 2023 07:31:57 +0000
ROA not after: Sun 15 Jun 2025 07:31:57 +0000
asID: 140155
IP address blocks: 154.16.213.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3992 (0xf98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 16 07:31:57 2023 GMT
Not After : Jun 15 07:31:57 2025 GMT
Subject: CN=648c0ff1-1c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:77:89:e3:38:42:34:6a:ff:77:02:f1:93:
b0:3b:3b:86:9f:6c:32:29:9d:de:51:9f:48:f2:17:
fb:0c:14:fe:03:e3:c2:ed:0e:7b:8c:2c:c2:46:a8:
10:32:fa:ae:ce:cf:11:ab:cf:cd:ea:92:9b:41:1e:
67:84:f7:ad:90:e8:86:1e:f4:55:75:78:33:42:f6:
91:76:11:ac:46:61:e4:d4:b1:76:09:e2:27:7c:68:
55:ad:14:e6:3f:b3:5e:71:b1:39:f0:3a:52:f1:05:
d7:70:7b:a0:d1:80:78:84:06:21:c6:5e:2a:c6:79:
53:38:e3:b2:59:76:76:e8:03:9e:10:5c:5a:ac:21:
bd:37:7a:75:e7:e5:3d:94:56:3b:57:a5:ea:b3:41:
e9:f4:a2:6e:60:1a:64:f1:59:85:ee:d1:3f:b3:a7:
d7:ff:bb:ae:12:ae:f1:db:71:cd:9f:5c:47:3d:96:
4d:50:94:48:73:0c:6b:3b:a7:c1:e9:8e:55:8f:0b:
6c:b6:1e:5c:9a:82:32:63:0e:e3:8c:43:6a:4c:63:
f2:fa:d0:64:55:d1:9f:56:21:cc:89:e5:98:6a:57:
69:a0:b5:6f:ff:1a:12:cd:99:cc:fc:4b:70:8f:4c:
df:7b:b2:2d:87:d3:1e:c7:47:bc:55:b5:60:81:17:
3a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:99:4E:62:D8:0E:E2:7C:14:07:42:83:C7:C5:6F:17:F7:EB:D6:C6
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E225ABF20C1711EEA96387324AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.213.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:e7:a6:ca:c0:59:07:3e:ef:81:d1:d8:f4:5b:3f:94:ee:d3:
db:88:6d:d3:11:05:9d:21:74:b6:49:60:31:7a:c4:25:d4:68:
55:d5:a8:80:90:4b:73:6b:44:c5:9f:9b:da:9d:40:7d:8f:8c:
83:26:16:3a:ef:da:ba:60:c0:3b:85:7d:09:a4:54:f5:cd:6f:
07:28:bb:b8:05:08:2a:e1:72:e7:2c:a7:38:75:7c:d2:6c:2c:
7c:10:6b:af:7e:25:cf:ce:3a:2a:00:5f:b3:39:a5:96:fd:44:
85:33:3b:07:8e:11:fe:3c:df:32:9b:04:30:89:70:3f:82:a6:
b4:59:9b:b1:51:ec:2e:99:bd:40:1b:87:4d:18:88:f7:ec:7a:
fd:25:9c:bd:93:9c:03:28:8a:6a:28:ab:31:06:ac:bc:8c:b4:
0b:55:b0:dd:fa:2a:3f:94:99:87:ec:b6:de:c8:ab:3a:83:eb:
b4:24:d8:b5:63:f4:23:38:34:38:d9:ac:4a:80:ef:0a:26:be:
ab:48:88:04:c3:ab:19:bb:c4:e3:67:92:8a:16:43:2a:07:c2:
68:0e:72:a8:21:e5:5d:3b:0a:2b:ba:3a:32:71:2b:c5:41:3d:
ad:da:aa:aa:b5:27:1e:de:6a:1a:04:94:c6:24:e1:e5:55:a8:
18:42:e5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org