Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0504F948B43E11ED966A3BACF1222468.roa
File: 0504F948B43E11ED966A3BACF1222468.roa (raw, json)
Hash identifier: XlzKFNFhGDwGpmz+y0Mkcx2Y/YlmyLN+0xNBNws0t54=
Subject key identifier: F7:67:32:C5:FB:4F:B4:C6:9F:B5:C6:F5:E0:8F:E6:72:D9:9F:18:18
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0C19
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0504F948B43E11ED966A3BACF1222468.roa
Signing time: Fri 24 Feb 2023 12:23:18 +0000
ROA not before: Fri 24 Feb 2023 12:23:15 +0000
ROA not after: Sat 22 Feb 2025 12:23:15 +0000
asID: 61317
IP address blocks: 154.16.53.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3097 (0xc19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 24 12:23:15 2023 GMT
Not After : Feb 22 12:23:15 2025 GMT
Subject: CN=63f8ac36-0f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9a:27:b6:a0:0b:f6:cd:93:96:89:fc:9a:dd:
83:33:74:06:da:51:9c:18:e5:06:f6:38:c1:73:1c:
28:1a:f4:d5:e1:7a:94:98:a5:f6:bb:b0:a4:da:81:
21:42:3c:11:b3:07:0f:dc:91:59:86:7b:c8:fb:fd:
36:9c:31:95:a1:85:6e:67:9f:98:e8:bf:17:c9:c0:
b5:2b:23:fb:e4:eb:18:e6:45:cd:23:8a:f3:1f:fd:
92:05:33:21:44:f5:6b:f3:1f:19:b8:5f:e6:6d:2a:
0e:0e:92:14:25:a3:6c:41:83:86:4a:1e:19:d2:97:
d7:21:3c:66:9f:db:99:55:02:f3:22:85:f1:54:f5:
fa:6e:42:ac:2a:0e:6e:d9:d9:e2:44:ad:de:2b:a5:
1e:f4:ca:bf:bd:a7:4b:d0:63:b7:ee:a0:17:cc:d8:
b0:20:61:6e:e0:75:34:42:8b:90:b9:db:c8:11:8c:
70:52:f7:bb:04:cf:00:8e:64:6b:24:fb:53:15:16:
b9:76:66:83:7d:3a:46:8d:c2:10:23:98:11:cf:4d:
82:6c:0b:f4:d1:f0:18:40:b9:f4:f0:04:be:e0:aa:
96:d7:a2:95:1c:3f:83:32:5e:5c:a6:35:de:ab:48:
a3:e4:5d:5e:73:e8:7f:57:08:43:57:11:95:18:2f:
7c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:67:32:C5:FB:4F:B4:C6:9F:B5:C6:F5:E0:8F:E6:72:D9:9F:18:18
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0504F948B43E11ED966A3BACF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.53.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:5d:8b:0d:11:d7:b4:c9:06:49:5b:0a:4f:ee:52:c5:0e:5a:
2c:83:26:04:3f:1f:5a:87:52:fa:c8:59:4b:c8:80:1e:c5:e7:
d0:6d:12:b6:00:37:36:5b:9c:da:de:29:9b:3e:a8:a8:3b:67:
f9:d9:5c:0c:6e:0f:cf:08:e8:89:4a:41:9a:a2:e6:33:af:9e:
20:aa:9d:53:79:76:ab:bf:af:a0:45:47:b7:7e:98:c7:be:8a:
4a:5d:50:46:60:13:e8:dc:f9:d1:ce:54:a0:cf:d5:f9:24:65:
89:63:fb:21:20:d1:52:7c:e6:4b:55:a2:7a:13:81:3a:11:fd:
7d:6c:30:3c:14:56:94:23:ed:b8:fa:8b:60:20:9e:ee:21:89:
84:79:01:c4:b9:de:97:d3:3c:46:bf:7c:a1:39:b7:04:53:6c:
c4:bf:8d:e3:98:02:e6:fa:19:64:d1:00:69:64:0b:27:52:d0:
aa:65:ea:d2:be:6c:70:48:61:93:b6:04:0a:85:ed:51:ea:91:
5d:4c:ed:2d:1a:38:7f:fa:79:e6:75:68:88:73:72:65:96:b1:
7c:e7:77:c0:f5:81:8e:82:14:69:96:72:25:c2:88:d6:d1:74:
53:ac:87:47:f7:f3:2a:77:cd:50:9d:3e:7b:0f:28:e3:b4:55:
b0:73:58:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org