Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/22234D60FFD711EDA8B0200E4AD9E6FC.roa
File: 22234D60FFD711EDA8B0200E4AD9E6FC.roa (raw, json)
Hash identifier: ZIa2+GORCl0XkfQ50ETmaajTmZjeVitJaerv1JJoIoI=
Subject key identifier: 4E:EB:08:73:92:BD:47:05:3D:71:88:B5:D8:22:6B:19:F7:08:DB:03
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0E40
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/22234D60FFD711EDA8B0200E4AD9E6FC.roa
Signing time: Wed 31 May 2023 17:18:17 +0000
ROA not before: Wed 31 May 2023 17:18:14 +0000
ROA not after: Sat 31 May 2025 17:18:14 +0000
asID: 834
IP address blocks: 154.16.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3648 (0xe40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 31 17:18:14 2023 GMT
Not After : May 31 17:18:14 2025 GMT
Subject: CN=64778159-0998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2c:54:42:44:f9:da:d1:53:40:be:d9:60:b3:
79:d8:40:8e:c3:0d:b7:3b:bb:75:55:c9:fb:d0:ae:
c2:ad:0f:90:f5:1c:7e:2c:11:ed:13:12:d9:60:a6:
d1:13:3d:53:93:69:e0:89:7a:3e:9b:ab:a8:05:17:
7a:fb:c6:17:0d:26:3a:9d:d5:c4:c0:c8:b8:1a:e2:
5e:57:00:ea:8c:5e:a9:ed:83:41:bd:61:b5:cb:94:
e3:0e:25:85:01:72:70:ba:32:e8:9c:b2:fb:64:fc:
3a:f3:76:bc:38:f4:e7:9a:71:83:40:66:97:3c:51:
bd:42:44:b8:01:49:2f:4f:48:7a:b5:5b:04:23:e6:
c8:b1:a4:94:93:ba:2a:61:b1:eb:ec:43:f7:f5:f1:
62:be:33:44:46:88:8f:39:d5:d9:8f:09:b9:12:7a:
27:6b:10:88:f8:07:88:84:54:08:23:7d:fc:e0:0d:
ef:c8:94:d4:14:cd:ff:b0:7f:e3:34:65:a6:57:41:
bc:76:5f:f5:9f:e1:c7:fe:00:a1:31:6e:e5:bd:a0:
b3:0b:c1:1f:c8:4b:18:44:ee:be:b9:27:89:49:f1:
ea:a1:f1:4b:9f:5c:03:77:2f:95:c2:1e:ca:31:8d:
72:f7:a5:c6:ae:91:c4:d2:7f:77:c0:0b:e6:86:2a:
56:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EB:08:73:92:BD:47:05:3D:71:88:B5:D8:22:6B:19:F7:08:DB:03
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/22234D60FFD711EDA8B0200E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.18.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:36:85:a5:2d:61:6b:98:b3:93:9a:86:88:b9:4b:0b:ef:34:
77:77:b9:a5:16:7e:e1:e7:f5:cc:a9:76:c8:83:3a:0e:bc:b7:
82:71:0a:81:2b:6d:41:e9:4a:8c:b5:68:43:e1:44:80:e7:ae:
0d:96:9a:87:f4:1f:42:ac:96:3c:17:6c:db:50:65:55:39:39:
f4:94:bb:b5:8c:0e:ff:71:94:03:86:91:e1:e5:0f:92:ab:30:
20:63:d7:c8:46:3b:e2:95:91:00:19:60:dd:99:98:76:1b:14:
75:32:b3:a1:8d:fd:6f:8c:6c:2f:83:65:1a:2d:36:b7:ee:9b:
22:ca:b4:38:9b:c0:79:fd:c6:46:96:dd:a5:f5:4b:3b:2a:53:
51:60:eb:0c:a9:8a:03:72:28:45:5f:72:98:06:69:7b:80:95:
01:45:14:34:e3:0e:24:90:f8:9d:27:73:dc:4b:ec:e8:2e:6a:
1b:31:ab:84:0f:82:6a:d9:4d:0f:07:b6:4c:c4:ec:c0:b3:40:
09:9a:3f:10:6b:df:6e:67:b1:db:44:2e:cf:f3:76:b1:59:74:
46:9a:be:37:86:dc:b5:bf:21:af:0f:53:b5:2d:72:6a:4b:7d:
89:b4:ee:4f:69:e8:54:7f:13:18:2c:15:f0:41:e6:dc:dc:7b:
8b:56:80:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org