Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/39DA35F2FFBB11EDA7A64F3B4AD9E6FC.roa
File: 39DA35F2FFBB11EDA7A64F3B4AD9E6FC.roa (raw, json)
Hash identifier: O8UN09tY/q+P6ZiAXqcd0wyasLBD5+5JOhddYgufgWw=
Subject key identifier: 0D:BC:28:DA:4D:65:7E:02:01:F6:89:9B:40:53:58:0A:34:D7:C0:CF
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0E13
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/39DA35F2FFBB11EDA7A64F3B4AD9E6FC.roa
Signing time: Wed 31 May 2023 13:58:31 +0000
ROA not before: Wed 31 May 2023 13:58:26 +0000
ROA not after: Fri 30 May 2025 13:58:26 +0000
asID: 834
IP address blocks: 154.16.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3603 (0xe13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 31 13:58:26 2023 GMT
Not After : May 30 13:58:26 2025 GMT
Subject: CN=64775287-2f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e4:ad:5a:3e:5a:b5:be:5a:9b:09:21:56:b8:
74:85:d6:83:50:9f:51:9f:37:97:98:aa:cb:b0:0a:
a7:1a:f2:96:27:36:fc:ed:54:c8:05:68:ac:d4:5d:
26:7d:97:9b:6f:5f:83:9f:42:38:02:35:63:ea:07:
ed:2a:d5:d9:a7:b9:77:f1:5f:46:b4:59:da:1d:68:
a2:22:30:cf:19:a0:58:ac:b5:34:61:f7:7d:80:98:
2d:01:3a:d7:dc:c4:c3:81:43:ee:37:2c:83:24:14:
dc:5e:08:ae:94:56:7e:69:09:c3:f1:66:fe:2a:69:
2f:90:d8:37:f3:07:d5:84:e0:a4:ac:26:4c:fe:53:
48:fa:f5:bf:0d:f1:19:ab:5d:d1:bb:84:ac:0f:db:
ea:fc:dd:e2:3b:10:78:6e:7f:84:64:64:01:cf:43:
ba:9c:59:0d:1d:5a:8e:44:cf:7c:b8:ad:11:bc:60:
04:b1:b2:f4:ef:bb:8f:f6:90:bc:e2:ff:6c:9e:9b:
17:09:d1:73:5e:f6:34:2f:88:cd:ed:93:6e:84:17:
86:fc:e4:67:0b:49:8d:ed:5d:aa:d5:29:e4:d2:8d:
0c:cc:71:12:e2:e9:1c:6c:b9:93:b8:55:dc:c6:df:
ef:d4:83:b5:46:28:13:eb:01:bc:0a:20:39:d3:97:
cd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BC:28:DA:4D:65:7E:02:01:F6:89:9B:40:53:58:0A:34:D7:C0:CF
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/39DA35F2FFBB11EDA7A64F3B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.2.0/24
Signature Algorithm: sha256WithRSAEncryption
37:ae:ee:66:78:3a:cb:9a:16:9a:14:25:00:4f:51:07:9a:bf:
0f:8a:06:c1:b7:f8:ff:cd:0f:ec:07:e4:09:62:23:ac:8b:2d:
67:ca:d7:ba:de:7e:29:47:c1:96:f7:98:dc:d7:3b:6b:a0:08:
1b:be:50:96:56:5e:42:79:c9:89:6d:3e:50:3d:db:3b:e2:82:
04:7b:3b:1e:35:f1:ba:fc:fb:4e:e5:38:11:02:6b:5e:e9:fe:
cc:da:bf:93:b7:ec:8f:f7:60:45:81:95:87:5a:69:20:a6:9c:
18:e4:f9:ac:03:40:64:3b:87:9f:fe:be:34:62:5e:c2:8c:42:
d4:9a:7f:8c:6c:1f:5c:77:a8:0a:ab:95:90:dc:1a:3b:aa:46:
17:9a:17:74:97:c4:f4:a8:ff:53:ea:57:89:e5:c5:ed:32:ce:
eb:e5:65:0f:ac:c2:c4:99:81:3a:4f:da:4f:14:05:dc:d7:6e:
77:f6:22:2c:eb:8d:8a:80:9a:af:47:84:71:c3:7a:76:03:c5:
19:0c:14:3f:5e:bf:b8:31:bc:95:b9:55:d0:5e:14:01:70:3d:
6a:1e:c3:68:d2:74:b7:ac:24:6d:40:ba:ff:84:01:89:03:83:
1a:38:8c:f0:ee:9e:f7:87:a5:ec:65:a5:49:ce:67:13:c4:09:
fb:19:1d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org