Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3640DFD/AE0987D2896E11EF8242EE77762E951A/FEB7CC14897011EF82D27386762E951A.roa
File: FEB7CC14897011EF82D27386762E951A.roa (raw, json)
Hash identifier: rXYVprHNHrLqrPSIPIE6Z/5HdxvCwVfYD82+Ke4oe/g=
Subject key identifier: FC:54:5B:4C:3C:B3:03:AA:29:FE:7F:BC:4F:A7:BA:31:78:D8:2E:A4
Certificate issuer: /CN=F3640DFDAF/serialNumber=4E1CF64DA223F8B8A270A1DF0FA8DEC792A45CDB
Certificate serial: 0D
Authority key identifier: 4E:1C:F6:4D:A2:23:F8:B8:A2:70:A1:DF:0F:A8:DE:C7:92:A4:5C:DB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Thz2TaIj-LiicKHfD6jex5KkXNs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/AE0987D2896E11EF8242EE77762E951A/FEB7CC14897011EF82D27386762E951A.roa
Signing time: Sun 13 Oct 2024 14:39:47 +0000
ROA not before: Sun 13 Oct 2024 14:39:44 +0000
ROA not after: Fri 13 Oct 2034 14:39:44 +0000
asID: 33617
IP address blocks: 154.65.4.0/22 maxlen: 24
196.1.176.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Oct 2024 10:53:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3640DFDAF/serialNumber=4E1CF64DA223F8B8A270A1DF0FA8DEC792A45CDB
Validity
Not Before: Oct 13 14:39:44 2024 GMT
Not After : Oct 13 14:39:44 2034 GMT
Subject: CN=670bdbb3-e34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:ed:57:6a:c3:26:3c:ee:cd:85:e1:ce:cf:
2f:62:ab:00:d9:42:7d:16:ae:a6:f9:f6:b7:c7:e9:
eb:0d:ff:05:9f:6f:af:bd:75:b9:21:e3:bb:08:be:
eb:47:4a:c3:3c:0e:86:c0:22:b7:5c:41:be:5d:64:
5f:41:c5:3f:0d:ae:ce:2f:30:bb:e5:24:41:bc:0d:
17:b8:9a:9e:55:23:b3:37:aa:70:ab:fd:55:c6:2c:
1c:23:c5:e1:0c:f2:ae:8a:f8:af:51:e2:ff:6f:11:
7d:29:74:51:69:f7:4c:64:cf:56:c0:78:6c:28:5a:
04:ef:51:5b:ea:10:81:67:96:c4:44:ef:60:80:18:
28:27:94:2a:19:bb:77:74:d4:24:37:f2:dc:8e:26:
ce:2c:36:f8:eb:24:45:6b:22:94:b7:e4:c6:fd:16:
46:06:c8:f5:88:c5:95:76:5f:6e:9c:b5:a0:5d:47:
ce:e3:1f:d6:6c:d2:6b:30:ea:c8:67:a3:90:e4:e3:
23:0b:e3:70:bc:fc:3e:d2:4e:1f:de:01:a3:f2:a8:
40:34:df:86:d1:e3:0a:0a:06:4b:79:60:b7:ee:de:
31:2e:c7:aa:99:cd:2d:c4:31:27:20:e0:38:ec:14:
e1:73:2f:7a:e7:bc:3a:78:ee:4a:5d:a7:62:72:4a:
a0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:54:5B:4C:3C:B3:03:AA:29:FE:7F:BC:4F:A7:BA:31:78:D8:2E:A4
X509v3 Authority Key Identifier:
keyid:4E:1C:F6:4D:A2:23:F8:B8:A2:70:A1:DF:0F:A8:DE:C7:92:A4:5C:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/AE0987D2896E11EF8242EE77762E951A/Thz2TaIj-LiicKHfD6jex5KkXNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Thz2TaIj-LiicKHfD6jex5KkXNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/AE0987D2896E11EF8242EE77762E951A/FEB7CC14897011EF82D27386762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.65.4.0/22
196.1.176.0/20
Signature Algorithm: sha256WithRSAEncryption
77:e6:48:52:f1:e8:42:39:3d:b5:3a:24:80:f2:bd:bf:1c:c7:
f1:e6:8d:5e:f9:93:80:b3:d9:40:33:af:bc:e5:18:9b:db:3f:
30:fd:03:3f:92:93:58:3c:f2:37:fc:70:76:7a:e8:56:05:37:
7a:cd:99:75:d3:90:b0:6b:1a:96:9b:36:d6:29:a1:b2:66:bc:
cd:01:f4:a0:db:e8:a8:6d:d7:38:76:c5:39:01:62:e4:6b:c9:
cd:3e:dd:9f:e0:a1:79:cc:9c:3b:85:08:c6:a1:ec:69:f2:73:
7d:92:b2:08:78:01:22:62:0a:fd:25:bb:16:ad:03:78:db:4b:
2e:c0:4a:19:dc:9a:2d:d2:a7:64:26:f7:57:a1:3a:4e:ed:9a:
a8:32:13:73:2c:78:51:4a:da:8d:29:60:dd:b0:0d:f2:b8:98:
13:8f:73:17:18:3a:09:d2:ec:bd:90:01:68:51:6c:d6:d3:1e:
51:a6:78:62:0f:0d:98:f3:1d:dc:ff:22:62:df:ac:c4:4f:a3:
1a:75:fa:cc:da:d6:84:1c:ae:4f:86:62:81:1d:6f:36:6c:6b:
4a:ee:f8:4d:58:2e:09:6f:08:da:90:1e:ce:b5:32:7f:01:18:
cd:aa:ec:30:b2:dc:b5:1a:be:b0:40:f0:ab:a7:29:e9:60:cc:
df:69:84:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 16:36:33 2024 by rpki-client on console-ams.rpki-client.org