Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EA06D8CA0A1711EE9CFEE6154AD9E6FC.roa
File: EA06D8CA0A1711EE9CFEE6154AD9E6FC.roa (raw, json)
Hash identifier: wWx8C2b84vmB/y7ohzX1hqMsCb8tRc4rrB/vcVvu2bc=
Subject key identifier: E9:0D:9F:21:BD:81:CA:BB:05:D9:AB:41:59:99:A3:C2:7A:F0:28:AC
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F51
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EA06D8CA0A1711EE9CFEE6154AD9E6FC.roa
Signing time: Tue 13 Jun 2023 18:27:12 +0000
ROA not before: Tue 13 Jun 2023 18:27:08 +0000
ROA not after: Sat 14 Jun 2025 18:27:08 +0000
asID: 55154
IP address blocks: 154.16.68.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3921 (0xf51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 13 18:27:08 2023 GMT
Not After : Jun 14 18:27:08 2025 GMT
Subject: CN=6488b500-c25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:27:02:d3:dc:d3:42:18:81:f7:d5:49:65:bb:
81:8d:f4:3a:47:b3:22:fa:e6:c3:d8:5c:a5:a9:44:
df:e6:45:06:26:96:42:6c:de:2d:bd:04:31:2c:63:
7e:7f:f9:63:21:88:a2:50:ac:c7:fd:fa:2e:44:52:
2e:da:ef:39:1d:cd:a5:ee:0c:3c:2d:a8:7a:b5:88:
d0:d8:93:0f:47:46:d0:dc:4e:0d:2f:75:cd:65:53:
2f:2c:96:2e:bc:fb:81:f6:bb:e7:ea:be:0e:d4:bf:
51:fc:af:11:33:a7:62:5c:17:ed:d6:23:5d:97:82:
ff:88:9e:e8:54:15:92:f9:ab:a0:a1:01:d6:9e:69:
cb:94:4c:bd:09:a7:d3:41:9f:b7:a1:e8:8e:c9:22:
ff:c1:19:97:75:cb:23:79:e4:5c:88:77:67:1f:2d:
c8:3c:2f:68:1a:69:04:4d:8f:33:76:e1:70:8c:7e:
3d:76:4e:de:36:69:22:33:41:22:66:f5:47:3b:a4:
b6:08:8f:a3:bb:6c:19:92:c2:0e:8b:63:32:45:0d:
f1:5b:17:e6:fa:a2:1c:d1:9a:f9:34:7a:d2:5d:67:
8e:18:79:a1:40:db:a2:54:de:9e:e7:72:7d:78:17:
e8:6e:3e:73:0f:23:cf:ac:41:49:b5:de:7a:64:54:
d6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0D:9F:21:BD:81:CA:BB:05:D9:AB:41:59:99:A3:C2:7A:F0:28:AC
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EA06D8CA0A1711EE9CFEE6154AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.68.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:41:89:1b:70:72:51:a6:41:f2:6d:9a:86:4d:01:03:33:17:
01:45:a1:59:a9:a0:bd:64:b2:a0:43:49:37:11:2f:30:5f:dd:
0f:55:66:20:95:08:d9:10:7a:f9:aa:93:bf:f6:24:56:5e:66:
86:b4:fc:c0:c1:70:d7:fe:a8:44:14:e7:46:92:2e:75:c6:f8:
36:35:8c:bb:f6:64:7c:f7:3c:3a:7c:4f:c8:29:a1:ab:0f:e8:
7d:00:97:61:ae:85:00:6b:b8:70:aa:f4:3e:05:ec:c7:67:5f:
b0:67:09:6a:50:90:5e:62:5c:ee:8c:fb:75:20:5d:c4:29:57:
8c:83:3e:eb:5f:d1:a1:68:41:34:dd:2f:51:ec:0e:ea:ea:a9:
ff:66:51:6f:8f:bb:34:8e:c7:7d:a0:c9:8c:a6:ca:62:21:ab:
68:a5:04:30:ab:e6:4b:7a:bf:88:98:3a:22:09:39:73:5d:d7:
2c:c3:bd:c7:fc:28:92:b3:82:91:5b:8a:52:3e:58:f7:ac:2d:
40:b3:1b:34:1b:35:0e:e3:0f:47:f8:8b:4b:2a:ff:d3:01:0c:
1b:03:ea:98:54:61:3b:16:a5:5e:a2:12:66:32:53:ed:85:90:
f3:b0:60:a0:16:e5:00:ab:f8:bd:5c:06:3c:af:42:38:f0:bd:
3f:6c:ef:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 13 07:55:17 2023 by rpki-client on console-fra.rpki-client.org