Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/151EC29427CC11EE9B9C706D4AD9E6FC.roa
File: 151EC29427CC11EE9B9C706D4AD9E6FC.roa (raw, json)
Hash identifier: y0YBusQSOjs5AoYjEIea5bGUIvAKmAds0wmueazK02o=
Subject key identifier: F2:6F:BB:4D:49:B3:5B:AF:5F:6B:F3:41:93:16:A1:7F:AF:45:EF:F7
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 10C1
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/151EC29427CC11EE9B9C706D4AD9E6FC.roa
Signing time: Fri 21 Jul 2023 13:39:58 +0000
ROA not before: Fri 21 Jul 2023 13:39:54 +0000
ROA not after: Mon 21 Jul 2025 13:39:54 +0000
asID: 200482
IP address blocks: 154.16.232.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4289 (0x10c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 21 13:39:54 2023 GMT
Not After : Jul 21 13:39:54 2025 GMT
Subject: CN=64ba8aae-6275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b5:4f:4f:ac:82:07:e9:14:ea:3e:6a:ce:9a:
fd:58:e1:7c:d7:4e:c1:d5:77:94:c0:4a:75:72:01:
0a:e7:71:73:1d:d5:9e:d6:31:d3:cc:62:59:e4:aa:
02:62:f1:49:fb:68:01:7a:31:6c:e2:7a:75:8b:fa:
e9:ad:1a:79:1c:6b:dc:22:1e:28:89:d1:29:db:e7:
3b:7c:88:1c:fa:91:47:7a:30:be:ad:d6:a7:95:70:
cd:89:c9:34:52:b0:47:75:0e:d8:ef:b8:d1:21:ba:
96:2e:30:6c:5c:58:d0:84:ec:bb:65:50:e0:01:bc:
5e:7a:13:60:83:ba:d2:2b:c6:1e:03:b3:ca:fa:01:
38:5a:51:2c:60:71:59:ce:82:55:6e:9c:79:2c:dc:
63:d1:74:a0:c8:b3:90:25:9c:a9:ed:50:28:90:16:
ef:20:92:9a:8d:07:37:90:00:56:78:4d:b7:f6:7e:
fa:e7:d1:00:3f:1c:7d:a1:7b:2c:89:69:02:56:d8:
f3:c5:28:13:ab:d3:93:68:f2:36:78:e2:a2:b5:46:
bd:dd:d1:be:2c:68:90:36:ab:3b:80:92:a6:d1:bc:
cd:2f:58:86:3b:6a:7c:3a:6b:51:8f:09:ec:3f:ae:
d9:bf:2e:13:8c:83:2c:b3:80:09:a3:9c:b2:4e:89:
fb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6F:BB:4D:49:B3:5B:AF:5F:6B:F3:41:93:16:A1:7F:AF:45:EF:F7
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/151EC29427CC11EE9B9C706D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.232.0/24
Signature Algorithm: sha256WithRSAEncryption
93:79:98:8c:a5:26:50:5d:ae:a3:7a:6e:3c:52:c5:b7:a7:76:
2c:aa:db:46:c4:c5:73:10:09:6d:27:9e:bd:31:ba:5b:97:3d:
1d:6f:ae:a9:07:73:83:85:7a:c0:95:99:dc:40:1b:5f:8a:69:
e0:e8:ec:c8:2c:51:fc:0c:cb:f9:b8:4a:a5:92:87:69:90:01:
e4:79:d4:65:62:88:0c:37:11:ec:7d:ff:c3:fc:40:e9:56:f6:
50:4d:04:0f:26:1a:98:da:d1:61:4d:c8:18:5e:92:54:00:4c:
02:01:e0:11:11:17:c8:3d:c2:6d:1f:25:86:7e:d2:26:a5:65:
12:2f:61:87:56:fe:e7:06:c3:60:86:b5:cb:d6:1a:73:34:a4:
43:92:34:f3:ff:71:ab:f0:c9:40:a7:af:6b:4a:34:65:62:da:
70:3c:cf:5c:dd:d1:92:41:ca:56:79:90:3b:ed:ed:de:68:1a:
c2:c7:18:d4:ff:fb:d9:0a:dd:dd:f8:a0:35:9c:cf:f2:e0:b9:
4a:57:75:2c:74:c8:e2:59:f1:c3:69:56:18:42:86:d2:79:26:
62:3a:aa:a5:0d:dd:62:e0:dd:01:16:7c:ac:45:01:8c:cf:d4:
f7:1a:33:e6:f6:f5:34:3c:34:12:4c:8f:4b:f3:34:35:02:bd:
7f:7f:de:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 10:51:28 2023 by rpki-client on console-ams.rpki-client.org