Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/29F6FB1E3CAD11EEAF7DEB554AD9E6FC.roa
File: 29F6FB1E3CAD11EEAF7DEB554AD9E6FC.roa (raw, json)
Hash identifier: ySbZqPJ+p7uP2E/YQxtinof7CV8N96crQfvrBL8tvFM=
Subject key identifier: 61:9F:AA:84:62:32:99:14:16:76:C6:67:B4:27:26:E9:31:C1:B5:56
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1175
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/29F6FB1E3CAD11EEAF7DEB554AD9E6FC.roa
Signing time: Thu 17 Aug 2023 03:21:33 +0000
ROA not before: Thu 17 Aug 2023 03:21:29 +0000
ROA not after: Sun 17 Aug 2025 03:21:29 +0000
asID: 834
IP address blocks: 154.70.152.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4469 (0x1175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 17 03:21:29 2023 GMT
Not After : Aug 17 03:21:29 2025 GMT
Subject: CN=64dd923d-9850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:45:db:ef:4b:f5:cd:b5:06:1d:e7:ea:06:31:
dd:91:91:5a:b4:4b:93:03:69:d4:1f:f1:4c:e7:e1:
14:fb:bb:3f:84:f3:be:fc:d0:d7:ef:80:dc:90:28:
13:bc:bd:35:28:c1:74:23:9d:96:51:ee:2e:89:6f:
67:8b:f2:d6:99:40:65:95:c8:c9:92:76:08:76:df:
e2:9e:78:3f:64:fa:16:bf:83:80:d9:97:db:cd:18:
ff:fd:94:5d:c2:53:6f:2e:c5:33:7f:8f:23:4c:12:
4f:44:b2:f9:d1:14:f7:17:2b:76:87:8c:a0:e5:6e:
2d:58:77:2b:93:a3:72:fb:f1:00:c3:04:de:c6:71:
33:53:eb:b8:e1:72:26:42:5b:c1:6a:d4:44:eb:d5:
93:34:a7:6e:e3:2b:75:82:1a:c3:b9:73:c2:81:5c:
fd:d5:0d:d1:2b:58:14:f9:87:df:0a:8a:ab:33:9b:
bc:38:15:57:00:61:07:7f:d9:28:90:86:23:28:9d:
cc:c3:9c:4d:06:7c:5d:67:a3:d4:6b:b5:01:d0:8d:
d1:5a:91:95:75:a6:27:0e:fc:45:1c:18:f5:b6:05:
b7:ad:60:2e:5f:3b:72:ab:58:ad:91:b6:9e:fe:0a:
0f:23:8a:fb:1d:74:da:a9:80:33:09:62:9e:f8:8b:
90:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9F:AA:84:62:32:99:14:16:76:C6:67:B4:27:26:E9:31:C1:B5:56
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/29F6FB1E3CAD11EEAF7DEB554AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.70.152.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:cf:68:05:16:96:b7:fe:f0:5a:ed:a4:f4:bc:40:60:83:45:
c8:7e:f7:60:36:4b:72:7f:f1:e0:8a:74:af:9c:32:f8:95:f9:
10:b0:c8:0b:3e:31:a0:e1:c4:a9:df:58:7a:c9:c3:46:44:3d:
6e:d2:62:d0:77:49:cc:5c:c2:b1:74:a7:5c:47:2b:50:84:3f:
18:d9:23:f6:2a:bf:04:69:5c:5a:c0:92:fb:c0:07:dd:3a:7c:
1d:27:30:53:dc:a1:61:31:ab:bb:f3:18:82:31:8a:44:5a:ce:
59:8c:e0:62:d8:96:fb:86:6e:76:6e:d9:bd:5b:90:45:ec:22:
4e:88:ac:01:1b:a3:aa:28:92:e3:b7:26:c6:8e:ad:9f:45:4b:
5a:71:f4:15:09:05:e8:43:2c:35:19:6c:8d:2f:33:f8:8a:cc:
13:ba:87:e6:9d:f5:35:33:29:94:f2:a1:8f:fd:b9:ef:eb:7d:
c0:77:fb:17:c5:d9:64:22:bc:4f:73:da:a8:17:63:4f:bf:c5:
f0:82:26:77:73:52:69:1d:bb:4a:e7:70:84:33:22:7b:bd:8c:
bb:d1:d7:33:05:27:f3:84:8b:f8:a1:53:f3:d2:1c:13:c0:a0:
f7:dd:20:3a:4f:ab:63:70:cf:f0:70:22:04:26:12:66:64:5e:
ff:58:0a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 10:38:10 2023 by rpki-client on console-ams.rpki-client.org