Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1D922040A54B11EE90E18D3BD25BE465.roa
File: 1D922040A54B11EE90E18D3BD25BE465.roa (raw, json)
Hash identifier: XNfEYhw1Z10yWT0hvMRTL6pOweMSbWc97Ssv5yQDyQM=
Subject key identifier: 79:F8:69:CB:1C:B7:D1:2E:FD:CB:0C:81:FB:4E:D9:57:24:E5:37:CD
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1409
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1D922040A54B11EE90E18D3BD25BE465.roa
Signing time: Thu 28 Dec 2023 06:34:13 +0000
ROA not before: Thu 28 Dec 2023 06:34:10 +0000
ROA not after: Sun 28 Dec 2025 06:34:10 +0000
asID: 3320
IP address blocks: 154.16.218.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5129 (0x1409)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Dec 28 06:34:10 2023 GMT
Not After : Dec 28 06:34:10 2025 GMT
Subject: CN=658d16e5-2aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:03:46:bd:1d:9b:fa:9c:42:82:72:e2:82:55:
9f:86:c1:e9:56:82:9c:7b:85:10:ea:86:1d:c8:c6:
fb:77:06:ba:c9:63:a6:64:d6:df:86:3e:4c:03:ac:
a1:8d:11:5d:2e:0d:a6:24:87:ec:9f:35:1e:0c:39:
64:e5:5b:05:92:11:30:f3:24:9f:4c:47:10:9f:59:
3a:de:26:e9:85:b6:88:bb:0d:70:86:f8:3b:9e:2f:
6b:eb:5a:d3:13:ee:81:e9:b0:d9:20:58:91:4a:fc:
b9:e7:bb:bb:2d:dd:9d:5d:17:98:d6:ab:7b:53:81:
c4:56:da:a0:0b:6a:ac:22:5f:c0:b7:d0:f4:c6:3c:
a5:e6:59:4f:09:e5:b1:f0:ac:ae:7c:09:a6:db:a7:
22:d1:4e:5e:5e:0d:d9:e1:9c:6d:9b:d2:83:bc:dc:
6a:18:cf:d3:df:64:a7:51:f0:0f:cf:87:27:32:91:
94:b9:c0:77:e6:9b:85:0a:95:86:5a:b4:52:7a:4e:
b0:22:0e:74:87:52:56:6a:0c:f7:98:d0:f8:53:6c:
b8:84:ec:69:d3:cb:b0:36:e3:18:5b:72:76:5e:2c:
40:88:b4:26:a6:16:b0:37:12:b6:b6:93:f3:33:99:
e9:de:76:50:25:9a:41:ef:27:a3:1b:53:b5:b4:1e:
9f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F8:69:CB:1C:B7:D1:2E:FD:CB:0C:81:FB:4E:D9:57:24:E5:37:CD
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1D922040A54B11EE90E18D3BD25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.218.0/24
Signature Algorithm: sha256WithRSAEncryption
38:1c:db:ac:21:28:ea:8b:eb:8c:52:eb:34:32:b9:ce:df:1d:
5c:c3:f8:39:8b:e4:07:45:c0:b7:91:b7:c5:0c:e9:d3:2e:c6:
ff:6a:20:7d:d9:9a:3f:f2:cb:f1:40:f1:82:78:23:89:ed:a1:
72:8f:c1:fa:d9:e2:1c:94:eb:1f:d7:0d:fc:13:cc:3a:71:52:
67:81:14:46:ce:07:1e:99:b3:65:93:d6:ad:bb:38:47:41:c0:
be:36:be:67:33:7e:2d:df:a6:8d:4e:e8:c9:cb:59:5a:8a:03:
0c:32:17:2d:bd:76:e4:2d:1e:ba:11:ac:aa:1f:f7:03:8c:51:
96:f4:fe:95:2f:60:c0:f7:c0:b0:d0:6a:a7:f8:a6:e3:88:01:
e3:b3:aa:1f:39:1b:f7:81:4b:53:49:59:47:72:3d:c4:b6:a9:
eb:e0:00:a1:1c:4d:9e:cd:5c:44:83:f8:c2:2b:d9:db:79:46:
1b:04:9b:3d:09:f9:4d:81:60:3e:be:c7:ce:33:e5:90:8d:5f:
e6:75:8e:54:bd:76:72:92:af:c1:99:95:fa:e7:90:6b:b3:b5:
a5:dd:c5:cb:2c:40:7a:ef:6e:71:ea:72:90:10:cc:df:0c:21:
99:cf:85:c5:9c:76:a6:32:6f:96:1e:e2:71:0b:1f:00:15:e4:
ef:d1:68:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 29 08:55:15 2023 by rpki-client on console-ams.rpki-client.org