Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0646E7D00FD311EEB3B9D57D4AD9E6FC.roa
File: 0646E7D00FD311EEB3B9D57D4AD9E6FC.roa (raw, json)
Hash identifier: NzgOZAB6aftSzxeZi9gH8j8JG3zbZm8ePoNeSyb5tSI=
Subject key identifier: 60:7A:D7:60:F9:52:54:AE:3B:23:2B:64:05:B6:A9:73:32:9D:5E:0E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0FD2
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0646E7D00FD311EEB3B9D57D4AD9E6FC.roa
Signing time: Wed 21 Jun 2023 01:29:11 +0000
ROA not before: Wed 21 Jun 2023 01:29:08 +0000
ROA not after: Wed 19 Jun 2024 01:29:08 +0000
asID: 834
IP address blocks: 154.16.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4050 (0xfd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 21 01:29:08 2023 GMT
Not After : Jun 19 01:29:08 2024 GMT
Subject: CN=64925267-9f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:26:64:7f:3d:bd:a6:d3:07:56:fc:76:43:67:
b9:2f:40:c4:09:ff:ae:5e:fc:2f:6f:bb:7c:f9:04:
37:e8:22:9d:07:6d:ef:64:b0:a1:e3:2d:59:8b:ce:
b0:85:68:06:cb:1d:f1:cd:c2:21:9a:3e:0e:03:69:
87:87:8c:b1:13:b5:4d:da:e2:17:d0:be:f6:1e:bd:
34:55:75:be:78:57:d0:d2:91:84:b8:db:13:ca:28:
43:2d:78:f2:f5:34:76:2e:af:da:1b:41:15:12:57:
99:f4:5a:03:55:ce:32:45:3c:bf:5a:16:2a:6c:67:
a6:3e:ad:ff:36:ed:f8:ef:2c:5f:b8:7e:3f:83:96:
e8:88:0d:fd:aa:a4:f1:bc:cf:db:66:da:96:12:f1:
dc:ec:e4:ca:30:35:f1:a6:35:9c:65:26:78:ad:56:
d8:60:e2:50:62:b8:85:e3:b5:68:50:75:dd:2c:ae:
40:0c:f1:df:dd:31:d1:8f:f9:a4:cc:ab:66:2d:dd:
11:84:79:72:fc:cc:06:92:a3:8d:0a:a2:cd:30:b3:
39:b6:0e:c9:fc:f9:b8:a9:6f:da:9c:51:35:75:dd:
26:09:3c:de:0e:ed:be:48:05:b4:c6:2f:59:25:a5:
49:e6:4f:05:58:60:f0:16:3f:cd:1b:64:77:52:43:
92:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7A:D7:60:F9:52:54:AE:3B:23:2B:64:05:B6:A9:73:32:9D:5E:0E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0646E7D00FD311EEB3B9D57D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.48.0/24
Signature Algorithm: sha256WithRSAEncryption
44:92:3b:99:ff:04:04:4b:6c:e0:3e:ad:29:d3:60:4b:25:ce:
e9:14:2b:8f:e4:47:72:b9:45:8e:e6:49:69:41:77:9a:ac:6a:
15:f6:c3:8c:1c:1c:15:2d:a2:c2:8d:d0:aa:69:da:4e:a2:53:
ba:7f:0a:a0:4d:71:b3:f9:59:0a:48:e3:66:14:2f:9a:5b:10:
b2:75:76:50:21:8e:bd:a0:31:68:c4:95:30:91:a8:95:80:13:
d5:30:1a:5b:9d:75:e8:c2:c4:58:48:e9:3d:b8:62:6e:6a:51:
73:97:a1:a1:dd:e5:b4:fc:ff:1e:f1:53:18:a6:d8:46:0b:97:
ee:3c:85:51:fc:f3:e9:82:98:0d:ca:c5:0c:ea:99:3b:0a:cc:
31:c7:e2:93:2c:a3:2b:69:9d:f4:b9:be:13:f2:5c:ee:0f:5a:
9a:73:a5:75:3a:26:32:02:68:e4:c1:33:68:9c:71:61:87:e3:
5a:6a:38:62:3b:06:08:61:cd:76:93:3e:f6:65:0b:9e:a1:fb:
bc:19:81:ca:9b:d4:b9:bb:45:1f:7c:d9:a7:60:98:6a:59:19:
34:a6:87:b7:e9:2c:66:dc:9b:ac:de:b9:55:43:f6:b9:67:4d:
d7:ac:b1:87:1d:9b:c6:5b:bc:f5:27:d8:ab:fa:a1:c7:80:3b:
bf:8c:79:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org