Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/52826544305211EEA785DF604AD9E6FC.roa
File: 52826544305211EEA785DF604AD9E6FC.roa (raw, json)
Hash identifier: 3QcAFGmBYJPHCAu2Zp/s4G1u6z6ZDMWi8h2l8iCwRto=
Subject key identifier: 3D:AA:A6:27:AE:C7:75:E4:FB:8A:CF:69:23:E7:FD:AC:DB:BF:B6:84
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 10FB
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/52826544305211EEA785DF604AD9E6FC.roa
Signing time: Tue 01 Aug 2023 10:01:02 +0000
ROA not before: Tue 01 Aug 2023 10:00:59 +0000
ROA not after: Fri 01 Aug 2025 10:00:59 +0000
asID: 834
IP address blocks: 154.16.218.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4347 (0x10fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 1 10:00:59 2023 GMT
Not After : Aug 1 10:00:59 2025 GMT
Subject: CN=64c8d7de-442c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:21:9a:79:ae:ad:de:f2:00:bf:e1:17:47:1c:
1f:5d:b3:28:f4:9e:8c:76:6a:7c:89:92:9f:c9:c1:
7d:2b:3f:f2:c1:91:c2:9a:a5:c5:aa:0f:64:7f:c1:
2f:fd:01:67:b9:9a:cc:66:c6:31:88:fa:94:70:19:
7e:6a:13:d6:58:07:38:44:54:98:e2:33:47:ea:cb:
bf:17:a6:8e:a4:87:a0:02:c2:48:86:2c:dd:b7:6d:
7c:81:69:db:3c:2e:35:fa:d7:09:36:ff:63:5f:4e:
64:c3:ff:c1:9a:ad:19:e2:65:ce:07:bc:aa:ed:da:
00:3b:2a:03:dc:ba:0b:b5:e6:c9:3f:2b:2d:ae:fe:
34:63:49:c2:89:01:80:a9:e4:61:be:22:b6:a6:0e:
61:b9:d8:07:d8:7d:93:2b:3e:3f:10:b4:94:72:a5:
74:6f:f1:80:09:4e:fe:50:d4:83:0b:63:78:82:7a:
10:f1:47:ab:f7:29:49:12:ab:a0:8a:f9:fb:a5:42:
50:30:b1:36:5f:5e:02:08:c5:6c:32:c4:36:b3:64:
ae:c1:e2:52:14:e5:6b:ab:14:3b:9c:d4:18:91:30:
02:ca:24:8d:59:90:a0:c4:13:ef:04:b9:6c:a6:60:
2e:88:c3:41:57:e3:87:4c:fe:88:b5:1e:e7:fb:9c:
af:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:AA:A6:27:AE:C7:75:E4:FB:8A:CF:69:23:E7:FD:AC:DB:BF:B6:84
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/52826544305211EEA785DF604AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.218.0/24
Signature Algorithm: sha256WithRSAEncryption
79:27:a7:33:17:8e:b4:6f:62:09:02:87:23:3f:67:57:93:ba:
9a:b4:32:63:a2:10:9e:56:b3:83:29:5e:79:ca:f9:9a:54:42:
aa:da:5d:fb:b8:1b:25:3c:c9:b9:a2:c3:4f:e3:12:ad:fe:72:
29:bd:29:27:71:a0:95:bb:49:3e:ef:2b:89:11:e7:81:1e:cc:
89:d6:f8:ef:0a:01:0e:da:65:15:62:e4:9c:a1:4e:a0:4c:a6:
08:a8:bc:b7:da:17:06:04:15:14:9e:01:0d:74:bb:cc:d0:97:
68:d7:4f:eb:37:4f:b2:a3:02:4e:47:c2:77:c0:27:0e:47:3d:
ce:f0:c4:1c:8f:d8:14:a2:e1:45:ff:9e:90:a3:9f:1f:30:1d:
c0:c3:9b:53:9f:1e:55:75:74:f8:59:91:5d:47:5a:e8:4e:6f:
00:c8:1a:fc:b0:c0:2d:fe:3d:6c:4e:f4:dc:62:75:fc:d6:82:
f2:c2:fb:f1:16:68:2b:2c:30:a7:19:0b:b5:08:d4:0a:47:42:
f7:00:13:63:76:17:6c:b7:e6:bd:a6:1c:0f:97:74:e0:8f:22:
6e:02:5d:7b:5b:c4:71:cc:71:fc:33:19:9b:1c:7f:9b:aa:60:
b1:8a:50:fc:48:68:11:4d:d3:17:34:f3:a3:82:8d:c1:0b:51:
c4:16:f9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 29 07:08:20 2023 by rpki-client on console-ams.rpki-client.org