Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ED94C5B68A5B11ECA5E7A9B45A40D577.roa
File: ED94C5B68A5B11ECA5E7A9B45A40D577.roa (raw, json)
Hash identifier: gWRfxQNCuTBScTX9yUrwyzQOBHfrIoQliN2X5bgqqhw=
Subject key identifier: 62:98:7F:21:0E:9E:54:8E:B8:38:1D:E1:53:6F:DA:0B:A6:55:6E:92
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 07BD
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ED94C5B68A5B11ECA5E7A9B45A40D577.roa
Signing time: Thu 10 Feb 2022 10:26:37 +0000
ROA not before: Thu 10 Feb 2022 10:26:33 +0000
ROA not after: Tue 10 Feb 2026 10:26:33 +0000
asID: 43260
IP address blocks: 154.16.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1981 (0x7bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 10 10:26:33 2022 GMT
Not After : Feb 10 10:26:33 2026 GMT
Subject: CN=6204e85d-4637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:56:c3:9d:3e:de:3a:6d:f6:b7:5f:c9:70:dc:
b6:ff:4e:09:2d:9a:a5:eb:f5:01:12:b7:ca:67:65:
8f:7c:02:f2:15:c5:b4:1d:02:f5:94:66:b1:5d:36:
ad:f8:ca:c6:16:88:7c:91:cf:52:20:0d:33:91:aa:
3c:c5:81:0f:5c:ce:0c:0e:b3:bf:87:64:b2:01:ad:
04:b3:ba:a3:5e:97:e9:d7:d0:1d:21:8e:94:25:fe:
cb:5b:19:84:9b:1d:8c:78:01:ea:9d:85:49:32:f2:
e1:f5:da:1c:20:ae:c6:7b:89:73:6c:f8:36:ef:f8:
c7:7a:a6:96:72:1e:ad:9f:42:1c:47:b7:12:af:18:
88:52:3d:bd:81:e9:07:5a:d5:ad:ca:7e:89:10:ab:
f8:27:63:30:3e:9d:0b:2b:b2:1f:1d:b6:9d:73:62:
47:97:d0:dc:71:8a:0f:84:1a:d2:4a:f3:85:28:96:
6c:4f:f9:f0:ff:c7:c3:ee:30:56:51:2d:5e:06:9b:
07:d2:ea:9f:90:cf:83:7d:9e:fa:8d:65:36:56:d7:
ec:fa:e2:f7:a1:0f:8f:22:00:b1:d0:e2:61:51:d0:
bf:d2:0f:54:d1:3d:31:81:f8:4d:78:3c:59:23:30:
2f:d4:e0:20:26:8d:16:37:af:11:11:5e:57:04:bc:
27:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:98:7F:21:0E:9E:54:8E:B8:38:1D:E1:53:6F:DA:0B:A6:55:6E:92
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ED94C5B68A5B11ECA5E7A9B45A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.35.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:6d:f2:c6:b2:f5:7e:00:af:11:08:de:3e:27:af:64:b0:41:
2e:6f:2f:04:2a:2a:85:a1:96:f9:bb:e0:b8:42:ba:d7:88:4d:
76:47:e5:00:06:c5:38:17:73:c4:c4:a7:73:22:50:40:e1:21:
a9:01:7c:cc:4d:82:a5:c8:6a:d0:bd:6c:b7:57:78:a0:73:bd:
ff:53:ad:4f:09:05:b9:53:c5:fc:13:21:46:48:bd:a0:1e:90:
74:43:43:d8:13:29:5a:d7:3b:97:3a:1c:ef:6c:03:96:d9:9b:
7a:43:87:66:cb:3e:8d:95:b6:e0:68:fe:2c:19:77:e6:69:ae:
ef:a2:e0:80:e3:ce:be:dd:2a:e2:68:69:89:d9:09:b5:a9:1c:
e8:3f:8c:59:81:0c:5f:00:69:9c:7a:4f:53:13:b6:0b:87:d2:
2c:db:fc:2a:41:f9:6e:1d:14:be:ba:cd:f7:65:eb:f3:7b:9d:
b8:20:3a:43:26:82:ea:e1:cc:fd:88:93:56:d2:a7:03:87:58:
f2:6a:81:cc:59:ab:6d:6f:54:40:c6:dd:4d:37:f5:87:19:90:
d0:45:0f:9c:d0:fb:d0:ee:44:f5:c7:a6:c1:ea:c7:ef:a8:f1:
a5:cb:2d:8d:9a:b0:58:d1:4b:b3:ec:4e:7a:5a:b1:ec:fc:b2:
5d:fc:84:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org