Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/978B7182EE6F11EDBB2E618A4AD9E6FC.roa
File: 978B7182EE6F11EDBB2E618A4AD9E6FC.roa (raw, json)
Hash identifier: jXi/7rnNnavFgopAB43BaiEzmnIAxYZc5odnOzEhIBw=
Subject key identifier: 6A:7D:D8:8D:29:7E:7F:D4:DB:34:0E:7D:A8:D8:49:EA:BF:12:C3:D7
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0DAE
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/978B7182EE6F11EDBB2E618A4AD9E6FC.roa
Signing time: Tue 09 May 2023 13:44:17 +0000
ROA not before: Tue 09 May 2023 13:44:13 +0000
ROA not after: Thu 08 May 2025 13:44:13 +0000
asID: 834
IP address blocks: 154.16.160.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3502 (0xdae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 9 13:44:13 2023 GMT
Not After : May 8 13:44:13 2025 GMT
Subject: CN=645a4e31-c029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5a:58:41:0c:bd:c1:b7:e1:8d:f5:cb:23:b2:
4f:fe:7b:4b:28:2f:3c:c2:90:c1:38:28:b2:60:ca:
22:6a:1b:db:67:eb:e3:8b:f9:8d:68:0f:3e:67:94:
1a:2c:d7:11:e0:41:8e:62:36:8a:60:47:62:e9:9c:
9a:ab:bf:3b:51:33:57:b4:db:6f:8d:0f:d7:00:f2:
af:6b:2c:ec:a4:ab:05:c3:49:36:b1:f8:f6:21:94:
14:27:ff:19:14:68:76:de:bc:79:d9:1e:a3:ac:24:
55:b6:5a:11:e8:3d:c2:6c:a2:67:38:09:68:f4:ee:
db:e8:a8:75:fe:e5:79:ca:13:48:89:ea:c3:3f:e1:
12:ad:04:0b:5e:40:be:3c:43:6e:59:38:6e:1d:82:
34:68:ae:55:f8:b2:b4:30:77:cd:cc:f2:37:3f:ae:
69:f3:be:3c:fc:8a:74:f8:2d:4c:b9:60:a7:c5:76:
ea:92:de:46:ad:b8:d1:cd:4a:33:d3:0f:43:b3:fb:
89:d0:7c:b4:d8:41:2e:51:49:1e:61:f4:31:52:a8:
4f:f2:98:e5:6c:af:84:4b:df:02:0e:ae:2b:be:18:
56:c5:98:c8:9f:a6:62:ac:ba:38:88:03:7f:2e:c4:
02:41:e8:05:fb:ce:eb:3c:31:e1:d6:1a:6a:b1:55:
5d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7D:D8:8D:29:7E:7F:D4:DB:34:0E:7D:A8:D8:49:EA:BF:12:C3:D7
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/978B7182EE6F11EDBB2E618A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.160.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:c9:27:24:df:f4:6c:1d:b8:e0:49:9f:43:e7:c5:0e:20:69:
2f:77:ea:dd:2e:a3:60:41:99:e4:43:ab:27:2b:95:ee:b6:f7:
93:8a:07:88:56:70:50:df:37:d4:63:5a:ad:8e:85:d3:cf:b3:
7e:4c:e4:86:d3:ac:50:f2:e7:60:e0:f8:8d:e5:fe:98:79:f5:
bb:50:09:11:f7:c5:0c:95:7d:ac:04:cd:be:99:14:db:3a:eb:
24:d7:0d:a4:b0:8a:d4:ac:a0:ad:c2:ea:e4:af:5f:e4:a2:33:
0a:0d:3c:2c:94:f3:37:c5:b7:dd:fb:8e:3c:cc:95:ee:25:5c:
bf:f0:05:f1:5b:7b:bc:60:d9:5e:aa:e2:c5:a8:d0:0c:2d:73:
81:fc:7d:cf:f4:fa:5b:b9:1b:01:6e:3c:da:f8:ed:2d:3d:f8:
ca:04:7b:77:db:ef:41:ce:18:ba:27:a2:34:a1:98:24:73:61:
ef:67:c5:ec:1b:58:74:57:bc:77:b1:3d:77:0a:91:4f:7f:89:
7d:77:0d:20:4e:35:9d:78:32:5b:b6:f6:8a:92:be:e4:7b:c5:
8f:61:b8:95:6c:e9:d7:19:29:6b:cb:34:81:b0:d3:2a:42:ba:
70:a6:94:27:72:54:60:da:bb:52:8f:5e:23:d5:ab:2b:d0:03:
35:9a:dc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org