Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E7CF5E34216D11EEAE7C247F4AD9E6FC.roa
File: E7CF5E34216D11EEAE7C247F4AD9E6FC.roa (raw, json)
Hash identifier: JyrT7mN7ejt5d9RB1WaYIJM+0qoJ9B4j0bCWAK/Bq0c=
Subject key identifier: FD:75:7F:31:82:40:52:B7:45:35:B8:87:F3:06:9C:B6:85:FF:7B:E6
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1087
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E7CF5E34216D11EEAE7C247F4AD9E6FC.roa
Signing time: Thu 13 Jul 2023 11:10:42 +0000
ROA not before: Thu 13 Jul 2023 11:10:39 +0000
ROA not after: Sat 13 Jul 2024 11:10:39 +0000
asID: 834
IP address blocks: 154.16.22.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4231 (0x1087)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 13 11:10:39 2023 GMT
Not After : Jul 13 11:10:39 2024 GMT
Subject: CN=64afdbb2-4ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1c:f7:70:33:98:dd:db:97:0b:b5:7a:17:37:
c1:63:87:27:20:f6:96:45:26:93:6e:bf:a2:ce:9d:
e4:a0:82:4e:9d:9d:25:dc:23:76:d8:fa:13:89:3d:
01:78:da:a0:b6:ca:48:c4:28:e3:2c:0b:7a:6b:ef:
4a:be:65:8a:89:4b:4b:14:7d:d2:0c:c1:89:e9:db:
81:ef:5f:4b:79:67:6e:7a:fa:fc:57:93:26:89:02:
37:28:e9:67:5d:e6:6a:96:27:b2:b2:9c:7d:00:fe:
c7:69:bb:47:78:5d:00:21:89:53:ff:bc:aa:14:c6:
cf:af:53:5c:bf:bf:52:54:57:1c:36:6a:c2:c7:dc:
c9:a5:89:43:9d:5a:b4:fb:66:7b:73:f4:3f:89:c5:
1f:f0:f8:39:3a:cd:44:30:61:62:cb:58:77:ad:b9:
ab:7e:58:a0:e0:6c:00:f8:49:42:a1:9a:b1:79:81:
b6:ed:5f:36:db:89:68:c1:c3:f6:f9:c8:fd:62:7f:
cf:df:e4:d9:a8:b4:8a:f7:11:fc:51:de:19:f1:84:
2a:4d:70:57:73:8b:0e:d6:3e:6b:2a:4b:ab:b0:85:
ca:6e:c2:c1:59:ed:36:68:91:6e:49:89:17:bd:03:
b3:59:56:64:7e:f6:b4:49:56:8d:0b:68:a9:c6:6f:
50:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:75:7F:31:82:40:52:B7:45:35:B8:87:F3:06:9C:B6:85:FF:7B:E6
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E7CF5E34216D11EEAE7C247F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.22.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:e0:2f:28:21:9c:19:cf:ea:86:59:d5:80:82:c7:5f:8c:84:
b4:a6:68:6f:74:bc:f4:f1:5b:d5:03:ef:fc:7c:2b:17:02:b5:
b9:60:39:07:99:16:dc:27:89:ea:66:63:38:86:90:de:4b:7b:
47:94:1a:b3:e9:06:1d:9e:b1:ab:d9:d5:cf:fa:67:ba:0c:e1:
79:af:0c:42:46:bf:f3:9b:0b:2f:72:76:94:21:3d:be:15:6d:
d0:7e:dd:ff:5e:ee:b3:f6:10:09:57:42:f6:06:9c:ea:29:96:
bd:d8:e2:a7:2f:48:07:3b:ba:30:2e:d6:d5:b4:11:da:cc:51:
47:bb:65:eb:20:91:d0:42:5e:02:bc:63:d4:44:43:d5:a3:97:
b4:d3:44:17:ff:85:7b:54:0e:04:f2:a0:eb:d4:37:68:45:8c:
83:c3:42:c6:d4:be:2c:d5:ca:a5:6a:50:9e:ef:12:e4:09:ad:
f5:2a:fd:d7:5b:c9:e6:00:f8:3e:7b:65:cf:4e:be:c5:40:01:
31:cb:2a:96:5b:f6:7b:c5:5f:5b:52:45:4e:a9:fa:54:c1:94:
34:7b:68:fb:1b:76:fb:74:cc:62:0d:ad:61:76:a9:a6:81:d0:
9e:2d:1a:d1:93:e4:0b:7d:3c:8e:86:c6:a1:dc:db:b0:a5:4a:
64:37:1f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 22 13:22:34 2023 by rpki-client on console-fra.rpki-client.org