Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/26619D48FFBC11EDA3E60A3E4AD9E6FC.roa
File: 26619D48FFBC11EDA3E60A3E4AD9E6FC.roa (raw, json)
Hash identifier: CCPv0TwejpVodFYqOazYE9mpLKS+g11oCs0KvQO99y0=
Subject key identifier: 0D:55:CD:72:A0:B1:76:9C:39:7C:FF:DF:A6:7D:3F:8F:22:75:E8:6A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0E18
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/26619D48FFBC11EDA3E60A3E4AD9E6FC.roa
Signing time: Wed 31 May 2023 14:05:08 +0000
ROA not before: Wed 31 May 2023 14:05:05 +0000
ROA not after: Fri 30 May 2025 14:05:05 +0000
asID: 834
IP address blocks: 154.16.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Jun 2023 18:25:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3608 (0xe18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 31 14:05:05 2023 GMT
Not After : May 30 14:05:05 2025 GMT
Subject: CN=64775414-42e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2e:bc:fb:f4:17:2f:d5:05:2e:c3:30:35:b2:
c9:2f:30:d4:d0:f3:29:08:3a:f6:26:12:83:ae:7e:
d7:40:52:6c:f4:47:17:fd:eb:1d:8b:48:c9:6c:d1:
6a:de:91:22:71:02:c2:5f:ea:e8:9f:28:f6:2d:c6:
b1:ee:96:f7:b4:c6:c7:5f:5d:0b:4a:e8:cc:90:b2:
f7:d2:62:2b:3c:03:9e:76:c1:80:b3:40:2d:c1:0b:
c6:32:58:7d:d3:29:69:ad:d6:6d:a0:48:d3:43:3f:
b0:14:43:ea:ab:7a:67:27:1c:10:21:c6:4e:ae:ff:
60:38:b7:78:4d:f2:88:07:cc:8c:81:8b:a7:53:68:
a1:70:43:df:c6:c7:6a:6d:46:84:c1:6c:8a:ec:ee:
4e:05:01:0a:35:38:25:e1:ad:ea:81:a3:e2:53:b8:
45:89:a3:5c:10:7f:ff:ac:0c:2f:23:38:f5:1f:f9:
a6:d3:d0:00:33:f6:91:22:f4:1a:5a:ba:a8:f9:71:
ef:77:c1:a9:ad:39:b7:66:d1:e7:04:82:ba:0b:97:
a9:74:e3:e0:c2:2e:b0:f8:60:fa:e7:8a:67:6b:9b:
c6:1c:9d:12:34:d2:8c:c9:83:8d:7e:bd:ac:52:95:
01:81:3b:06:34:4f:16:b7:38:60:70:09:c4:14:c6:
80:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:55:CD:72:A0:B1:76:9C:39:7C:FF:DF:A6:7D:3F:8F:22:75:E8:6A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/26619D48FFBC11EDA3E60A3E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.90.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:0d:b0:8f:b6:c9:e6:81:1b:dd:7c:77:5e:65:88:77:a3:30:
65:46:34:d2:4a:b6:da:60:de:3c:a9:31:5b:5c:9c:6b:f4:89:
e2:86:c4:29:d7:e0:e4:8b:7a:a9:1a:39:ef:e0:52:e0:e0:c8:
08:0e:5d:d2:ab:06:51:5f:7e:4e:2b:91:88:71:c8:71:bd:11:
bf:a6:c0:fe:23:44:34:a4:e5:1f:62:cb:9a:75:7e:db:45:18:
78:5f:77:80:57:aa:b3:e7:34:11:6a:75:c9:7c:cb:7d:aa:75:
79:a3:39:2e:67:3a:f0:00:7a:77:64:09:2c:c4:2f:e8:e2:ba:
02:5b:29:da:74:ab:79:d1:9c:30:1e:ff:9c:8e:c1:d9:1b:c1:
20:80:df:ee:4a:a0:ac:8b:2d:01:87:e6:ca:8e:65:c0:ce:a9:
e4:03:f7:72:a9:39:4c:ac:f3:98:da:a2:25:b2:eb:5d:a9:d7:
b0:6c:ae:ae:cc:5c:3a:d1:c5:53:48:0b:2b:99:c5:d2:d9:ec:
c1:e3:4b:79:cd:04:05:3a:85:7a:00:53:1d:56:4e:fb:ca:19:
a6:ed:f3:3e:da:89:14:90:b1:eb:0e:28:97:3a:6e:23:8c:4c:
06:ee:b0:83:97:78:50:9e:7d:9d:21:92:b8:cf:cd:1f:b3:93:
3f:20:a3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:36 2024 by rpki-client on console-ams.rpki-client.org