Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/03F3FB043C2811EEA98E533D4AD9E6FC.roa
File: 03F3FB043C2811EEA98E533D4AD9E6FC.roa (raw, json)
Hash identifier: qJsJEvHR84bTiXjtutLqLB1NOnjsLoGGP/y3iA+NP5E=
Subject key identifier: 7C:A8:43:1C:FB:7C:B2:DB:C3:83:42:59:7A:38:40:26:B8:21:09:BF
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1170
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/03F3FB043C2811EEA98E533D4AD9E6FC.roa
Signing time: Wed 16 Aug 2023 11:28:26 +0000
ROA not before: Wed 16 Aug 2023 11:28:21 +0000
ROA not after: Wed 07 Aug 2024 11:28:21 +0000
asID: 834
IP address blocks: 154.16.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4464 (0x1170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 16 11:28:21 2023 GMT
Not After : Aug 7 11:28:21 2024 GMT
Subject: CN=64dcb2da-5fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:60:7e:fb:c7:13:17:e3:06:d4:20:7b:27:9f:
b7:17:07:91:89:ef:80:df:58:3b:53:3e:2f:1a:c8:
52:d6:a2:5e:b5:77:57:06:9c:ab:2e:6f:87:3b:dc:
89:11:91:0b:42:91:36:f5:bb:cd:e6:de:7d:28:66:
0b:b6:6b:d8:f5:ca:d5:a8:23:91:de:40:35:b9:e6:
f6:b3:5a:50:27:24:41:ae:39:a6:35:e3:2f:7b:3e:
39:0d:c5:81:08:a2:0f:38:b3:fe:4c:d1:a4:28:a0:
0e:e5:8f:32:c5:c0:04:1b:b3:34:b4:78:60:3e:41:
27:3e:5a:5a:73:83:f0:f7:69:ef:6c:d3:2b:0b:03:
b5:05:07:0c:ee:be:30:8c:11:43:4a:70:56:59:10:
b6:fd:c8:fc:3e:46:4c:8e:c2:11:46:b4:7f:87:bb:
9d:61:21:5b:7f:82:4b:e7:c8:f7:05:ae:b2:a6:43:
f0:97:b3:8c:dc:bc:81:55:1d:4c:18:ec:bc:29:b7:
6a:67:d6:5b:08:8a:72:39:3e:5b:2d:05:1a:59:ac:
85:43:2c:cd:d1:f4:8f:4e:83:81:05:de:af:96:b7:
16:3a:78:bd:cd:89:fc:3c:40:e9:00:69:14:58:ff:
e2:08:f9:93:14:37:b2:e8:30:d8:7b:54:be:b2:14:
45:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A8:43:1C:FB:7C:B2:DB:C3:83:42:59:7A:38:40:26:B8:21:09:BF
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/03F3FB043C2811EEA98E533D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.62.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:4a:ab:8b:07:bc:f8:02:9c:14:05:29:a1:89:77:f8:9e:59:
d3:8e:b8:ec:f0:72:10:42:55:af:3e:f3:aa:40:69:06:a0:67:
87:e1:1e:a2:00:d9:5b:7f:42:a3:0e:68:3c:e7:d0:77:13:23:
16:d9:90:71:9a:66:80:3e:da:7c:84:a5:ba:17:7e:96:1c:a6:
4a:36:13:d0:af:1d:0d:ec:f4:92:71:12:fd:f1:74:71:73:99:
09:a3:f0:04:33:ea:e9:b8:10:c2:7f:75:cc:d4:13:7a:9c:cc:
5b:bb:48:e1:46:a9:d7:dd:ce:cc:cf:0f:7b:de:19:2f:45:af:
f2:b3:13:f1:e6:f4:94:a0:93:a7:d0:e7:cf:6e:18:38:25:72:
1c:5d:b1:3b:e4:df:09:20:1a:d6:39:6b:d8:0a:c1:80:7e:1a:
01:82:ac:f5:42:44:79:a7:c2:bf:ce:1c:74:e0:52:b0:6f:95:
42:f5:cc:4a:c0:67:0e:ed:82:ab:ee:f1:6f:6e:fc:b6:54:68:
dc:5f:1f:5f:ad:89:4e:ee:70:74:88:aa:86:11:db:9a:67:c1:
a3:90:fc:e7:03:93:21:9e:b1:a2:66:7a:18:e7:00:f2:6d:1b:
5b:4e:d1:04:0f:f7:c4:c2:64:17:34:eb:02:cb:1b:a9:ca:8e:
30:2e:f5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:17 2024 by rpki-client on console-ams.rpki-client.org