Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/65CDB0AC40C611EEA33DA44D4AD9E6FC.roa
File: 65CDB0AC40C611EEA33DA44D4AD9E6FC.roa (raw, json)
Hash identifier: Y24QVybGhRGzGdGN7N1/F76O45jAuq4y4DPLF7Z6Wd8=
Subject key identifier: 4E:2D:AE:E1:D6:FB:E0:EA:59:FA:2E:5F:97:F8:B3:D7:BA:8D:ED:BA
Certificate issuer: /CN=F36AC63AAP/serialNumber=53F78D80CAC0EB2EACD77B0175DF319E8F752796
Certificate serial: 04
Authority key identifier: 53:F7:8D:80:CA:C0:EB:2E:AC:D7:7B:01:75:DF:31:9E:8F:75:27:96
Authority info access: rsync://rpki.afrinic.net/repository/apnic/U_eNgMrA6y6s13sBdd8xno91J5Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/65CDB0AC40C611EEA33DA44D4AD9E6FC.roa
Signing time: Tue 22 Aug 2023 08:32:15 +0000
ROA not before: Tue 22 Aug 2023 08:32:12 +0000
ROA not after: Sat 22 Aug 2043 08:32:12 +0000
asID: 16800
IP address blocks: 163.201.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Aug 2023 09:08:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AC63AAP/serialNumber=53F78D80CAC0EB2EACD77B0175DF319E8F752796
Validity
Not Before: Aug 22 08:32:12 2023 GMT
Not After : Aug 22 08:32:12 2043 GMT
Subject: CN=64e4728f-990f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:84:0d:d4:1b:37:6e:4e:fe:29:fb:44:ac:f6:
19:8c:20:82:de:6f:05:93:17:78:a3:0b:e8:38:f5:
b4:7a:9d:c5:11:3e:f8:72:df:8c:ef:6a:e8:34:d4:
67:40:c0:ce:cc:22:99:b6:25:92:70:9f:71:eb:90:
03:94:69:7a:41:69:74:23:df:99:f4:b9:32:8a:0c:
da:30:02:d7:61:7a:c8:8d:12:61:69:24:a5:38:24:
f3:42:dc:43:a6:67:fd:07:75:d1:37:b1:a4:ea:d5:
74:db:61:a6:61:7b:c9:70:bb:8a:62:4d:10:ae:34:
af:4c:25:23:08:56:a7:d9:5a:14:21:27:c3:6b:76:
54:ad:2f:ca:86:9f:87:5c:eb:93:60:2c:80:c7:9a:
7b:c3:b8:c3:d6:ff:a6:cb:98:a7:ba:c6:63:79:e9:
da:c1:2d:ab:19:6d:df:40:e8:10:6a:a5:69:1f:ad:
2c:2f:b3:49:56:6b:49:fe:35:27:71:9c:27:73:60:
69:54:3a:ad:85:38:1e:c2:b0:db:2c:a6:91:80:8f:
7f:b2:e5:72:4a:b5:60:0b:45:b4:89:ae:ae:20:0e:
01:39:c3:d6:9b:06:b5:a5:86:74:8e:dd:d4:49:1a:
e5:28:f0:d3:2b:11:66:7c:b8:33:6e:54:b1:77:b3:
1d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2D:AE:E1:D6:FB:E0:EA:59:FA:2E:5F:97:F8:B3:D7:BA:8D:ED:BA
X509v3 Authority Key Identifier:
keyid:53:F7:8D:80:CA:C0:EB:2E:AC:D7:7B:01:75:DF:31:9E:8F:75:27:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/apnic/U_eNgMrA6y6s13sBdd8xno91J5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/65CDB0AC40C611EEA33DA44D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.201.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c7:1f:b5:cb:41:d5:ec:f5:c7:f7:f5:89:e1:c9:10:c2:89:f2:
19:7c:cf:2d:0a:dc:f7:53:c6:8b:d0:4b:26:65:21:75:2a:87:
2e:17:5c:37:52:7e:c1:c9:36:a7:6b:6b:6c:30:ee:80:a1:b7:
42:a5:61:78:85:92:d7:af:2f:68:43:ba:52:79:f8:bc:f5:9c:
d4:c2:bd:c3:00:3f:94:47:03:52:ed:83:d4:d2:f4:34:cc:2a:
52:17:4e:6c:a2:97:fa:d5:53:02:ca:27:99:2a:ea:14:83:62:
de:71:a9:bb:3d:09:05:3a:7f:79:da:6b:95:83:28:3d:a6:b8:
f1:d0:73:d6:98:b1:b9:b6:8b:2d:3f:cd:ca:4e:2d:70:e3:97:
35:81:a5:61:6c:d7:2f:ab:ea:d9:d1:84:89:4f:11:30:a3:de:
79:eb:9f:e7:7e:91:1f:e5:aa:c3:92:64:26:11:ca:44:a8:06:
4d:ee:52:9b:8f:9c:63:71:ae:f9:2c:a2:bf:7f:4c:55:e3:e9:
51:c4:23:ee:09:55:73:8b:ce:15:7c:09:da:2a:81:04:80:e2:
c7:45:fd:39:0d:23:c1:18:e2:a0:b2:67:7e:06:52:cc:6a:d4:
eb:6b:67:31:26:dc:f0:66:b8:c9:54:78:79:62:53:d7:5e:fc:
e3:2a:3b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org