Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1F8496B0241A11EE87417E154AD9E6FC.roa
File: 1F8496B0241A11EE87417E154AD9E6FC.roa (raw, json)
Hash identifier: aDzUcgwsChQBQBhm8vihEUvNgWvvgkLqfrKZn60p92g=
Subject key identifier: 26:D4:BA:5C:16:10:00:ED:7E:A6:92:6B:6B:F8:18:A7:F6:EA:B9:AF
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 10A1
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1F8496B0241A11EE87417E154AD9E6FC.roa
Signing time: Sun 16 Jul 2023 20:48:31 +0000
ROA not before: Sun 16 Jul 2023 20:48:28 +0000
ROA not after: Tue 15 Jul 2025 20:48:28 +0000
asID: 834
IP address blocks: 154.16.30.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4257 (0x10a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 16 20:48:28 2023 GMT
Not After : Jul 15 20:48:28 2025 GMT
Subject: CN=64b4579f-7d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:83:79:44:a3:57:93:fd:53:12:74:ea:30:d4:
ab:17:04:e3:eb:6e:ab:a2:4c:7e:53:7e:12:5f:e0:
81:e7:36:ee:0b:56:2e:e9:71:54:61:eb:b1:0f:ae:
65:10:a6:ee:3a:26:7a:a2:2a:50:f2:21:19:31:e7:
c9:bb:a5:3d:9f:33:ed:55:71:95:e6:ad:cc:ca:55:
6f:77:37:c2:1c:79:43:cc:5b:a6:83:8c:b7:55:6c:
57:f8:7a:1b:59:b5:c7:0a:b4:80:a9:c3:43:2c:d2:
16:1e:f4:fc:fd:d3:2c:8a:a8:bf:11:57:17:e0:6e:
71:1b:0f:30:b3:6c:2d:5c:2f:0c:01:cf:5e:3a:fd:
fe:40:7d:01:71:b2:62:30:e7:90:4e:18:1d:04:99:
b7:5c:b0:9c:3d:64:50:af:a2:a6:ea:03:4e:14:eb:
af:3d:1e:da:3e:bf:ef:f3:ef:98:ae:1b:b9:6a:ac:
5a:1e:91:59:cc:5c:32:f7:67:53:18:78:6d:71:27:
14:35:87:42:23:c2:70:4c:f9:0c:63:dd:fc:9f:e6:
08:54:e2:70:2c:f3:c4:3a:a0:6b:2a:f7:8b:cd:8e:
0c:cc:e2:08:5a:77:5b:ca:49:8f:51:aa:a5:84:05:
9e:52:a9:4b:12:a7:e5:eb:97:9e:ad:8a:44:1b:a4:
3b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D4:BA:5C:16:10:00:ED:7E:A6:92:6B:6B:F8:18:A7:F6:EA:B9:AF
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1F8496B0241A11EE87417E154AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.30.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:85:99:f7:2d:ce:8c:2c:f0:d7:ee:90:7b:55:46:c2:e0:8d:
e3:30:ba:58:92:91:b8:0a:6f:01:6b:0e:85:1f:c6:e1:3a:cb:
5c:7c:77:50:9b:ef:be:66:86:9c:f3:08:11:ec:ee:ec:67:a7:
2d:1b:56:b8:1d:db:89:3a:fb:3b:c7:fc:3f:50:8f:4f:0b:3f:
7f:b2:2a:e6:f4:75:23:4d:01:96:cc:9c:a3:95:de:53:03:21:
1e:0d:bd:3b:d3:bd:0d:53:92:57:b1:e2:1a:1d:c4:c2:88:fb:
7d:d6:b0:71:f3:a2:ba:d2:c7:b8:68:18:57:73:57:4c:44:1c:
43:ba:6b:fc:ce:91:7c:0f:9d:32:9d:5d:39:d8:1f:5c:0d:c7:
c6:3c:57:13:26:79:e9:7f:50:8f:9d:d0:49:bd:20:49:aa:26:
cc:14:e9:d6:16:56:24:a8:0e:8e:9e:13:79:5c:a5:00:52:5c:
45:1d:58:a8:f6:fd:70:0e:ed:73:b3:50:34:ba:6e:05:e8:63:
91:ad:88:93:38:6b:14:bd:1a:29:6f:cb:8a:6d:03:8e:e9:bb:
21:fd:15:e6:d6:4b:85:ee:a1:77:21:ed:d1:54:78:40:df:c0:
9f:3c:76:45:53:cc:54:0a:72:19:a6:cb:2a:b5:58:92:0d:8b:
3f:44:40:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 27 14:23:10 2023 by rpki-client on console-ams.rpki-client.org