Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0FD3DE32493011EB9D6D9654F8AEA228.roa
File: 0FD3DE32493011EB9D6D9654F8AEA228.roa (raw, json)
Hash identifier: vVQkEACIOip0gG1DCETi+PuGhlkhv1pQO+csJhF61PY=
Subject key identifier: 95:FC:52:42:70:6D:9B:8A:60:5F:10:51:A6:A3:EE:24:98:5F:B8:DA
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0462
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0FD3DE32493011EB9D6D9654F8AEA228.roa
Signing time: Mon 28 Dec 2020 17:13:54 +0000
ROA not before: Mon 28 Dec 2020 17:13:48 +0000
ROA not after: Thu 28 Dec 2023 17:13:48 +0000
asID: 46562
IP address blocks: 154.16.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1122 (0x462)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Dec 28 17:13:48 2020 GMT
Not After : Dec 28 17:13:48 2023 GMT
Subject: CN=5fea1252-0998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2c:d6:ec:5f:50:45:6c:d7:8b:39:e3:28:54:
b9:9d:95:c7:f9:bd:e4:dc:9a:73:d8:15:37:2e:cc:
c2:a3:51:1a:cb:a6:40:0d:a7:81:6d:75:8e:9a:b3:
ed:06:79:17:a6:73:95:a6:0b:c4:66:8a:79:d7:19:
41:67:8d:47:e9:45:5a:df:84:ab:21:14:c0:21:89:
75:d2:50:df:5b:89:fe:e1:8f:bb:ac:6e:d9:64:ae:
ed:56:d7:19:7c:27:79:29:ce:1b:01:7f:b7:cf:c1:
1c:4f:de:9d:57:44:7f:f2:9c:f1:bf:99:09:9e:1f:
79:21:05:53:f9:35:d5:78:a3:a0:50:9e:69:47:98:
97:98:dc:ca:98:92:fb:6b:62:e1:8e:f3:ea:6a:31:
07:16:e7:55:66:a0:3d:0f:17:3e:96:7c:dd:5e:f7:
c9:5e:6c:5b:15:f5:5b:50:1c:de:85:7d:98:df:51:
e7:a3:1b:a3:7d:96:47:df:a9:ea:d9:db:7e:7d:ee:
43:ba:9c:57:9a:ae:9e:d9:d7:23:14:f1:c4:15:4f:
25:14:07:5f:26:50:42:26:53:64:d1:54:ae:2d:89:
cb:db:0a:ca:c1:f1:b4:e5:83:7c:db:d5:73:83:3b:
d8:70:eb:d9:45:10:3d:b4:c4:1f:8b:3d:94:11:9a:
fc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FC:52:42:70:6D:9B:8A:60:5F:10:51:A6:A3:EE:24:98:5F:B8:DA
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0FD3DE32493011EB9D6D9654F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.175.0/24
Signature Algorithm: sha256WithRSAEncryption
39:70:29:2f:82:2d:8c:88:68:65:d4:24:93:1c:8d:a3:ef:fb:
8c:be:d9:e3:cc:9a:08:c8:80:78:6a:b4:6a:a1:a9:4c:c8:f8:
a8:46:3c:bb:82:fb:0d:63:ac:e9:ba:81:25:1c:34:28:42:5d:
53:3c:49:a3:df:cd:91:cb:f0:b1:e9:bf:5b:e6:cf:23:a0:6c:
7a:2a:d3:4e:23:f6:63:b5:7d:e5:14:ab:ea:1f:b6:c7:c3:36:
d1:fe:53:95:bf:27:37:ea:c9:be:96:b2:19:91:90:3e:77:4d:
c2:63:b5:30:ff:de:c0:ef:d4:ce:ea:83:8a:e9:ca:ff:c7:c4:
2c:ef:b6:b6:14:11:74:0e:47:4f:5c:86:c8:a1:4d:a5:df:f0:
90:8d:0f:10:5e:dc:89:64:62:80:73:c7:55:a9:93:1b:e5:96:
be:5a:08:17:ea:17:f8:cd:e3:60:30:b1:d1:9e:2f:e5:a4:d3:
e6:f9:54:37:ca:2d:34:02:56:9b:4c:eb:7d:24:80:2f:c6:71:
1c:44:17:3d:09:c2:e5:a8:c1:8d:73:94:23:37:05:f0:fd:05:
c4:cf:5d:e6:12:b6:18:74:a2:74:18:f8:83:2c:e5:6a:b2:50:
97:67:6f:d8:c8:18:1d:57:70:9b:c4:23:6d:c8:5b:16:cb:f5:
da:4b:66:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org