Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/263CF7CE1EAA11EE97EC6E0D4AD9E6FC.roa
File: 263CF7CE1EAA11EE97EC6E0D4AD9E6FC.roa (raw, json)
Hash identifier: zfxOwCJgDacztjITvFEH/WC1DitBKbYt9EIfFg4Ytng=
Subject key identifier: D8:0B:4A:8C:F2:4F:93:E5:00:97:F3:14:30:0F:6A:F5:71:B8:D3:A5
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1057
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/263CF7CE1EAA11EE97EC6E0D4AD9E6FC.roa
Signing time: Sun 09 Jul 2023 22:44:23 +0000
ROA not before: Mon 10 Jul 2023 22:44:19 +0000
ROA not after: Sat 12 Jul 2025 22:44:19 +0000
asID: 834
IP address blocks: 154.16.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4183 (0x1057)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 10 22:44:19 2023 GMT
Not After : Jul 12 22:44:19 2025 GMT
Subject: CN=64ab3847-a6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:87:b4:de:b8:17:99:55:27:aa:a3:de:0c:60:
34:83:69:a9:9d:d5:32:34:73:73:e3:39:6a:b2:d8:
0b:d9:2c:6d:3d:2a:28:9c:c9:01:7e:bb:79:43:20:
ff:cc:18:ca:62:5e:ad:39:cd:7f:fe:41:0f:4f:fe:
dc:08:ca:f0:0e:dd:cf:0d:b2:25:4f:48:1f:a6:c3:
4f:2c:0a:d1:f5:21:bd:a2:a9:ed:56:3a:06:2b:24:
a4:7b:92:b0:d1:c9:1a:5e:7a:39:a0:6a:1b:bb:24:
cb:57:3f:15:b0:73:68:af:4d:a0:16:d3:2c:78:ce:
a5:fa:04:30:1a:85:31:d5:35:b3:d4:fd:aa:32:12:
0c:b5:a9:25:4f:58:d2:b7:aa:1c:62:82:1c:71:82:
54:79:6f:50:f7:4c:67:34:7f:9f:48:89:40:36:cb:
a1:90:56:3d:78:31:5e:b3:13:f8:ee:1d:7e:72:7a:
5a:67:d1:39:e2:6d:c0:2c:d2:69:7b:95:50:8e:0b:
8b:00:3b:7d:5c:ec:80:29:e5:13:df:ea:cc:31:72:
05:8c:0b:df:23:32:cc:1c:f8:02:8f:ad:a4:24:8a:
0b:4b:30:c9:e6:7b:aa:17:14:cd:34:61:ac:99:63:
6d:59:45:88:70:3d:72:0f:4b:00:a2:01:12:12:fe:
72:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0B:4A:8C:F2:4F:93:E5:00:97:F3:14:30:0F:6A:F5:71:B8:D3:A5
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/263CF7CE1EAA11EE97EC6E0D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.18.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:92:1b:35:54:e9:34:e5:a4:99:78:9f:95:3a:34:b9:19:55:
aa:02:5c:b2:f4:e6:3f:2b:f5:cd:2f:4c:f6:b6:19:1d:b1:b7:
77:bc:ba:32:a5:4c:be:ff:6f:f2:16:cf:66:60:dc:ed:e9:e2:
7c:5b:c7:e7:b8:d3:75:c1:ad:b4:f4:99:7d:a7:4f:04:40:68:
4e:cd:5a:c0:2c:b2:78:0f:26:73:a5:ff:2a:4d:15:f6:b0:3c:
fc:26:44:9b:1f:3d:1e:72:a0:40:e3:9b:25:af:9f:10:4f:2b:
bf:50:eb:30:a2:70:4d:db:b9:41:68:eb:0b:9b:93:51:e0:70:
93:06:4f:32:b1:da:ab:82:3e:a7:a2:00:3f:48:3f:ea:84:45:
99:6a:84:db:44:88:56:65:f3:6a:05:65:45:eb:f4:f2:de:6a:
85:93:8c:c6:5f:33:d9:5b:15:1e:62:ba:39:97:c1:b2:cd:b9:
54:b6:f7:28:b6:cd:aa:09:cb:14:ac:ff:34:ce:cb:93:3b:5b:
ef:28:ef:c2:e8:07:c6:90:b6:c6:22:bf:9d:e2:23:70:68:36:
86:15:3e:e4:ec:5d:36:b3:bb:0e:b3:f0:ea:63:8d:cf:58:44:
d8:e0:57:b5:f9:29:5f:55:37:4c:2e:65:1e:b8:5b:a2:25:45:
dd:36:1f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 10 12:12:59 2023 by rpki-client on console-ams.rpki-client.org