Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FBB40A140C0D11EEBC5007164AD9E6FC.roa
File: FBB40A140C0D11EEBC5007164AD9E6FC.roa (raw, json)
Hash identifier: efZIBm7eGlfyrpUIi4xuGOAbIQYasaVcp6P6T14gHsw=
Subject key identifier: D3:4E:87:03:72:4F:7D:C8:FE:15:F4:C9:1F:C7:41:67:77:83:D2:E6
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F8A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FBB40A140C0D11EEBC5007164AD9E6FC.roa
Signing time: Fri 16 Jun 2023 06:21:09 +0000
ROA not before: Fri 16 Jun 2023 06:21:06 +0000
ROA not after: Sun 15 Jun 2025 06:21:06 +0000
asID: 49999
IP address blocks: 154.16.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3978 (0xf8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 16 06:21:06 2023 GMT
Not After : Jun 15 06:21:06 2025 GMT
Subject: CN=648bff55-1688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:79:bf:59:ff:cf:50:a5:1f:bb:43:78:12:60:
52:55:72:d4:3f:0b:40:ce:fc:58:21:8e:07:61:f7:
b2:82:1a:a1:6b:9b:de:be:bf:03:a3:dd:20:99:bb:
67:9b:47:18:3d:69:af:1e:03:13:84:f1:7d:0f:5a:
05:f3:77:a1:6f:0b:04:8c:25:bf:0b:5d:e6:04:14:
ca:21:29:cf:c1:77:3a:65:1b:0b:73:a6:ba:23:31:
a0:1b:fd:ce:f8:44:a5:cb:5b:29:f2:43:e7:51:eb:
43:c2:45:f2:78:17:8d:0f:ba:16:4b:f6:6b:9c:aa:
13:a8:a3:f4:c0:52:4e:40:ff:6c:72:9c:6c:47:72:
e5:01:88:1d:6f:f3:4a:ba:2b:41:cf:24:ae:1d:27:
d9:0d:cb:2f:b4:9a:44:36:cf:b7:a8:eb:57:ec:df:
87:1f:b3:2e:03:70:e2:18:f4:32:fb:bb:bf:92:4e:
fe:81:00:bd:53:01:b5:f7:7b:d1:cf:0a:41:d4:cd:
f2:57:11:38:69:1e:11:a9:80:30:f6:7e:66:1d:5b:
fd:c4:ab:7b:a9:ef:e4:25:a7:f3:77:d1:e0:f4:c9:
93:4a:cf:36:44:59:66:d7:7d:9f:29:6d:20:b4:12:
e2:cc:2e:53:72:c8:9f:6f:f6:e3:ad:ab:3b:41:87:
ef:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4E:87:03:72:4F:7D:C8:FE:15:F4:C9:1F:C7:41:67:77:83:D2:E6
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FBB40A140C0D11EEBC5007164AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.34.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:3d:cb:3f:d5:f1:18:77:21:b2:db:b1:d5:11:8d:6c:bd:45:
8e:ef:11:02:f4:fb:0a:94:03:1b:ad:59:d0:75:a7:07:b4:73:
0e:84:4e:30:74:f1:55:7a:92:b1:85:c0:a8:8c:73:c2:57:63:
b8:e7:4b:0b:b0:d0:be:d3:a8:1c:a2:90:d4:c3:a9:81:10:8f:
d5:d1:b4:85:e8:ac:e5:cb:8d:0e:22:f8:95:0c:9d:fb:a2:95:
1a:53:e2:51:b9:d8:ea:07:d0:36:c6:59:cc:ea:e2:cd:39:b2:
c9:30:0f:c8:ec:03:41:c9:13:45:0b:70:ad:99:0f:8c:0a:12:
3b:02:bf:05:4e:c0:e5:21:b7:10:76:eb:aa:8c:19:66:14:fc:
60:b8:2b:96:b9:85:3a:3b:ab:4d:58:56:4c:db:66:53:45:78:
6f:b4:6d:24:4b:36:c1:c4:85:32:f7:e1:f3:6e:95:c9:fb:4f:
f4:3a:78:06:6f:c5:3d:e4:1d:08:5d:ef:e7:b4:e2:0b:de:13:
24:ae:9a:45:5e:79:14:80:16:d1:95:72:fd:f7:cd:2f:10:0e:
7a:ba:a5:d0:3a:83:05:fa:32:14:c4:c4:43:5e:da:66:8a:ef:
ba:c2:8b:fa:65:40:64:1e:9e:da:cd:cf:18:59:85:c1:89:29:
2b:42:2c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 11:33:33 2023 by rpki-client on console-ams.rpki-client.org