Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/209F2AA43AA611EE83DE18274AD9E6FC.roa
File: 209F2AA43AA611EE83DE18274AD9E6FC.roa (raw, json)
Hash identifier: n4V3tLRTcQTiQ7N33J+HephsZNtvm6foYIVGoScshSc=
Subject key identifier: 13:C1:05:70:B6:DC:E2:FE:59:09:62:28:1C:A1:2A:47:ED:71:08:7E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1150
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/209F2AA43AA611EE83DE18274AD9E6FC.roa
Signing time: Mon 14 Aug 2023 13:26:08 +0000
ROA not before: Mon 14 Aug 2023 13:26:05 +0000
ROA not after: Wed 13 Aug 2025 13:26:05 +0000
asID: 398465
IP address blocks: 154.16.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4432 (0x1150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 14 13:26:05 2023 GMT
Not After : Aug 13 13:26:05 2025 GMT
Subject: CN=64da2b70-37c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ab:a2:c8:4c:e4:03:c3:3f:c1:42:7e:6f:b5:
81:63:db:ce:e1:3e:79:f4:01:8a:ff:3f:a8:ac:ed:
c0:16:95:4b:e3:45:5f:ee:52:89:8e:cd:6b:58:c3:
d5:83:dc:15:10:1f:06:aa:fd:ad:5a:80:65:1b:37:
80:f9:4b:0d:dc:9b:2d:eb:40:fc:48:83:0e:57:4b:
33:56:46:39:13:e7:85:92:ad:a7:33:e8:39:fd:75:
5e:da:51:7a:f5:58:fc:4f:0b:68:d7:b8:93:80:47:
b3:d6:bb:4c:ec:b1:47:2b:32:e4:9b:4a:1e:85:73:
df:e2:a9:1a:d0:ba:3b:25:2a:a1:1f:1f:4e:71:d7:
bc:c3:03:f5:99:5e:34:3a:cf:72:5d:23:83:a6:ab:
87:14:d0:37:dc:08:b7:56:77:03:12:0a:1b:22:c2:
03:d7:38:5b:38:0e:cb:f4:70:fd:31:6b:e0:b9:9a:
2f:65:ca:78:34:34:f4:25:32:f8:63:04:2e:ba:91:
4b:ae:94:24:2b:df:3e:02:07:e6:30:5c:c5:93:7a:
6a:1e:ac:0b:81:d6:5c:3e:e4:ba:24:59:33:06:8a:
f1:ca:9c:9c:17:8a:fb:da:b0:51:4d:fa:b3:ac:15:
26:98:03:56:cf:11:62:4d:75:c8:7e:5a:f5:19:58:
27:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C1:05:70:B6:DC:E2:FE:59:09:62:28:1C:A1:2A:47:ED:71:08:7E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/209F2AA43AA611EE83DE18274AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.50.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:b6:d7:7f:7a:75:a0:36:ab:bf:78:cd:4e:a0:85:60:74:bc:
8e:18:f1:c7:38:1f:13:ab:0c:73:e7:2d:41:7c:a3:ff:6a:d7:
5b:a0:46:b0:2b:fc:5f:89:10:98:77:27:64:2a:d1:e2:2c:fc:
c2:c0:45:25:a5:d1:89:c3:1f:de:70:f4:3b:65:a6:08:59:46:
5b:80:21:de:8c:b1:c9:63:25:3a:65:9e:5c:8c:2d:76:62:0a:
16:ee:8c:da:cf:83:19:13:f0:8b:bc:c8:70:18:dd:30:65:4a:
87:25:36:8c:49:67:ad:0c:64:5d:f0:8b:68:84:b1:bf:53:c2:
88:f1:e3:52:9d:eb:86:a3:f8:df:46:62:d5:ac:be:81:81:d5:
4f:91:a1:bf:d0:2a:66:9d:7d:01:27:0e:98:db:61:73:cc:bc:
eb:5f:ea:cc:9b:36:b3:94:25:85:94:36:f6:e3:72:bc:8d:18:
2a:7b:61:8e:bb:86:93:a1:58:04:54:fc:9d:4a:bb:8c:67:14:
e3:2d:5f:af:e3:55:ec:15:c1:f5:bf:34:c7:cd:fd:7b:04:2b:
68:ed:86:2d:9f:d2:df:8b:9a:93:b7:b6:a1:b7:8a:5f:03:5d:
3c:d9:48:02:61:c2:87:6f:00:51:0e:18:38:a7:f1:b1:76:5d:
b5:82:8b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 22 12:44:34 2023 by rpki-client on console-ams.rpki-client.org