Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F79DB314158E11EEA6D4CD614AD9E6FC.roa
File: F79DB314158E11EEA6D4CD614AD9E6FC.roa (raw, json)
Hash identifier: 8kcqJni9zpunclvVdAShh2i3AG/Upib8YUJUcrsmWyM=
Subject key identifier: 41:6A:04:2C:B8:A2:58:A2:B1:FD:A1:63:5C:BD:CB:A8:B1:11:84:E8
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 101F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F79DB314158E11EEA6D4CD614AD9E6FC.roa
Signing time: Wed 28 Jun 2023 08:37:08 +0000
ROA not before: Wed 28 Jun 2023 08:37:05 +0000
ROA not after: Sat 28 Jun 2025 08:37:05 +0000
asID: 834
IP address blocks: 154.16.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4127 (0x101f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 28 08:37:05 2023 GMT
Not After : Jun 28 08:37:05 2025 GMT
Subject: CN=649bf134-342a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6c:67:32:69:d9:2b:8f:65:9d:33:57:d1:1f:
9a:ab:03:04:ca:4e:97:5c:a6:02:c9:2d:06:de:de:
74:e2:16:d5:c5:17:6d:3c:ec:0d:06:60:b2:a7:03:
b7:4d:70:49:6f:21:b9:f2:ea:58:69:5a:e9:80:85:
bf:6b:0a:95:7b:4d:4d:ae:79:ba:45:b1:4a:e0:d0:
b5:ed:9e:aa:bc:09:21:18:6b:15:41:2b:6e:ff:5c:
0a:82:60:6b:00:01:57:c1:1d:58:09:47:ca:f0:cc:
70:73:25:b3:69:2f:7c:e9:7a:00:7d:44:de:6b:cb:
93:34:d9:5c:4f:ee:66:9e:b5:c5:3f:04:96:e0:14:
c4:d8:17:13:8b:a1:c0:d2:d9:fa:28:db:2a:94:d8:
20:4c:41:fd:b7:72:83:2e:7e:97:09:93:3f:81:6c:
96:78:bc:74:82:60:b8:ce:53:da:f1:01:aa:2e:d9:
5a:62:de:4b:90:d7:3f:89:a7:75:f7:e1:bf:60:db:
c2:5a:3b:7d:d0:9a:f5:4f:89:4a:ce:61:db:f2:3d:
d4:c1:c4:ba:cd:51:69:5c:b0:2b:91:71:da:31:58:
44:aa:6b:30:e5:6c:ac:ec:aa:64:f4:84:e8:04:82:
82:44:e5:17:4c:d2:6c:bc:50:a8:5b:45:e2:b2:e6:
23:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6A:04:2C:B8:A2:58:A2:B1:FD:A1:63:5C:BD:CB:A8:B1:11:84:E8
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F79DB314158E11EEA6D4CD614AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.107.0/24
Signature Algorithm: sha256WithRSAEncryption
15:e0:88:31:62:86:a5:27:f8:88:a3:65:80:8a:db:7d:da:fe:
41:e8:dc:ea:99:f9:15:6d:8e:b8:08:19:0c:cf:22:36:db:15:
b3:b6:ab:2a:00:31:ee:24:f3:71:74:52:34:5f:a5:bf:0c:07:
03:48:d9:c3:28:5f:49:fb:57:2b:83:a0:ee:0f:e5:c2:76:6b:
09:21:ee:b4:13:b6:a1:af:34:ce:0f:57:44:62:10:c9:0d:4f:
14:cf:83:df:41:c0:cd:ac:b4:8d:71:20:30:7f:b2:77:7d:cc:
d5:3e:5a:f2:d9:93:dd:ba:bf:52:7d:16:3c:b4:36:cd:89:5f:
c4:c4:4e:70:4e:4d:26:08:b4:4d:89:7a:e5:5c:00:d8:f3:4b:
7c:d0:44:67:64:1a:e8:96:8a:f1:67:0b:98:19:d4:d0:bf:5a:
42:5a:23:bb:dc:30:f9:bc:68:cc:a1:81:be:67:7c:b8:2f:47:
8e:4a:5d:e7:c4:fc:c6:7c:33:1b:6c:d4:15:c6:09:c8:29:3a:
f2:51:46:57:3e:37:36:bd:26:07:8c:e5:bf:7e:bd:74:9b:07:
6b:1e:95:f6:4f:cb:cb:8a:6f:39:19:7d:7c:85:fc:f8:b6:d8:
d0:6e:88:fc:32:24:8e:18:8f:88:6c:c8:9a:02:63:a3:4e:1f:
f9:2e:ad:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 25 12:09:27 2023 by rpki-client on console-fra.rpki-client.org