Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1839991C3A6A11EE859675754AD9E6FC.roa
File: 1839991C3A6A11EE859675754AD9E6FC.roa (raw, json)
Hash identifier: 1ZCpS54NtA9vxSwJkH2c4JPK8mXeZ0KWpheV4GJffV0=
Subject key identifier: 62:D5:3D:3C:A4:1E:29:41:1F:F0:F1:E6:BF:52:D2:40:90:7F:39:7B
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1148
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1839991C3A6A11EE859675754AD9E6FC.roa
Signing time: Mon 14 Aug 2023 06:16:24 +0000
ROA not before: Mon 14 Aug 2023 06:16:21 +0000
ROA not after: Thu 14 Aug 2025 06:16:21 +0000
asID: 834
IP address blocks: 154.16.28.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4424 (0x1148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 14 06:16:21 2023 GMT
Not After : Aug 14 06:16:21 2025 GMT
Subject: CN=64d9c6b8-6522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c1:fb:3b:7e:02:de:b7:bb:de:1e:a3:f7:25:
16:34:42:15:8e:92:cb:d0:1d:9c:5e:2c:4d:b6:0c:
12:f4:46:e6:8c:90:d7:9e:ff:be:e1:6e:21:01:a1:
d7:91:58:9f:7a:ad:1d:2d:78:25:c0:d6:2d:ac:6c:
aa:bc:7a:a5:ff:be:b9:2f:96:8c:f3:0f:d0:13:8e:
47:8a:ca:82:79:67:10:4c:99:c5:6c:d7:54:eb:99:
ef:d4:e6:a8:70:d8:27:56:9b:4b:09:fd:6a:72:e9:
54:43:f0:3a:07:7c:4c:23:08:a3:03:e1:88:78:5d:
97:a8:41:05:6d:0e:7d:39:af:0c:7a:46:70:02:97:
a1:90:16:25:d8:e7:f5:7e:43:4f:ee:8c:c1:67:3a:
72:2c:a7:92:e6:c8:1e:c0:47:57:eb:ac:c8:41:44:
4c:d1:d5:ca:0f:92:a3:ed:84:b5:35:4b:fe:18:d0:
5e:27:04:e3:26:f3:d8:aa:48:68:42:87:0d:f8:32:
28:00:a5:d3:5e:84:11:18:57:66:65:5e:78:e5:3d:
66:f1:72:85:26:e8:ba:ae:77:0d:30:7d:bf:9e:09:
30:f7:4b:ec:9d:8f:74:2b:ac:da:2a:5a:5e:bf:a2:
be:66:dd:4f:bd:c5:35:e8:45:85:06:4f:8c:c0:4a:
cf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D5:3D:3C:A4:1E:29:41:1F:F0:F1:E6:BF:52:D2:40:90:7F:39:7B
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1839991C3A6A11EE859675754AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.28.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:13:c5:6d:ff:80:15:94:ef:bb:e8:7b:77:26:ac:03:15:af:
a4:68:84:a3:b4:78:7c:75:f2:59:96:76:28:c8:e6:37:83:03:
31:d0:1d:f6:d6:ff:97:9e:b7:24:28:cc:c2:80:05:c7:91:ae:
ef:f5:3b:29:fe:ee:41:f3:77:de:ff:57:a8:a2:a3:19:07:3d:
e5:1b:fa:33:bf:8f:21:97:0a:8e:d5:38:4f:a5:b3:bb:f3:42:
70:cd:84:bc:3a:b4:fa:52:0d:79:11:82:72:ac:45:9e:09:44:
c5:5b:80:a2:ba:a0:4e:15:e0:e3:0c:0a:9f:3c:d4:e2:98:e3:
98:46:bd:31:41:45:0b:ae:f7:e8:4e:67:96:b8:3e:35:33:db:
8a:c1:70:91:0b:41:49:cd:b8:33:ef:c1:c9:96:bf:6d:64:67:
a9:27:e0:7b:41:b3:5d:6e:6c:ef:4a:38:17:41:dc:5e:1a:24:
90:f9:b3:ec:1f:73:cc:98:26:1f:3c:3f:9d:06:4e:f0:e8:6b:
ad:28:dd:8b:11:43:bc:03:a0:48:43:b0:f9:00:ef:61:2d:c5:
1d:69:ec:b6:bc:7b:a2:07:9b:b4:33:6f:69:d7:4e:c6:db:f1:
aa:37:e4:2b:03:8d:70:bd:01:6c:12:f9:bb:b6:bc:3c:31:7e:
fb:ee:04:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 29 16:06:02 2023 by rpki-client on console-ams.rpki-client.org