Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3D32DFC0FFBA11EDBF6344384AD9E6FC.roa
File: 3D32DFC0FFBA11EDBF6344384AD9E6FC.roa (raw, json)
Hash identifier: yvBvXb7zSQMhrk/7Vn7A+lvppPLaod6KnsFsYKCs+yc=
Subject key identifier: 52:06:4C:7D:02:13:24:D9:87:6A:BA:0C:3E:5B:CC:BF:9C:DA:E7:55
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0E0E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3D32DFC0FFBA11EDBF6344384AD9E6FC.roa
Signing time: Wed 31 May 2023 13:51:27 +0000
ROA not before: Wed 31 May 2023 13:51:24 +0000
ROA not after: Fri 30 May 2025 13:51:24 +0000
asID: 834
IP address blocks: 154.16.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3598 (0xe0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 31 13:51:24 2023 GMT
Not After : May 30 13:51:24 2025 GMT
Subject: CN=647750df-85ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b2:fc:38:3a:3c:3a:15:32:fd:b5:e8:81:d8:
28:86:ad:5b:31:f0:a1:13:7d:e9:c5:1a:38:d0:a9:
bc:4a:92:55:de:a3:45:e5:ad:4d:87:db:cf:97:53:
da:cc:a4:bd:30:17:14:a4:28:34:03:d6:44:c9:e6:
af:8d:bc:81:ea:27:7d:ee:26:43:1b:f3:b3:97:cc:
da:3e:3a:64:91:db:cb:4c:12:df:da:4a:a6:d0:f7:
c3:d8:f0:96:92:97:69:b6:6b:d3:fc:66:6b:f2:1c:
46:52:9c:dc:f0:d2:95:88:6e:10:a9:1e:aa:3c:b0:
cc:66:1a:7a:2f:c5:38:9c:cb:3e:bc:30:07:08:4f:
df:ca:87:be:16:91:4d:69:9e:8f:e8:cc:41:42:b0:
da:41:49:cf:6a:48:7c:dd:e7:51:ce:14:f3:32:29:
64:d6:02:e9:8e:7d:e5:e3:85:e3:1f:0e:05:db:aa:
62:50:ba:44:8f:89:29:7d:57:05:0b:b3:01:8a:0c:
1b:c5:fa:5f:9f:04:9d:56:f7:c4:ca:75:c2:7d:89:
7a:dc:24:f0:7c:75:bc:3a:b0:85:00:36:05:c6:85:
ed:a0:bc:dc:ed:c3:56:8d:5d:47:ce:84:bc:bb:c2:
ff:b5:a6:26:6d:df:e9:d3:f0:8c:17:0d:dc:7d:d4:
77:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:06:4C:7D:02:13:24:D9:87:6A:BA:0C:3E:5B:CC:BF:9C:DA:E7:55
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3D32DFC0FFBA11EDBF6344384AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.10.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:08:d2:af:0c:39:7f:ca:12:22:52:40:de:64:2c:28:41:39:
4a:8c:10:7f:98:27:8f:38:9d:d0:34:34:68:37:49:57:db:c3:
35:9d:d4:f5:88:4d:8f:e4:1f:da:9f:5c:22:48:10:7c:4d:cb:
60:94:30:08:37:ca:fa:a9:de:32:67:a6:1c:55:94:b7:28:e5:
fb:c5:01:54:1c:f3:f4:83:d9:f1:d2:73:9a:3a:15:5a:69:fb:
9e:7e:c1:ab:4d:9f:bf:5d:0b:39:2f:40:db:17:85:4d:e8:92:
ea:05:76:6f:8b:a3:6d:f3:5a:20:83:d5:91:ab:9d:9c:8f:2c:
65:04:3d:09:86:78:6e:53:c9:61:c8:ec:3e:aa:07:45:b3:4b:
4a:6e:32:37:a4:3c:e2:21:ee:58:b6:d5:e1:1e:7a:28:87:a4:
b8:30:96:66:b6:be:57:6a:ca:43:ad:e5:31:b0:19:3e:16:ca:
c0:e7:ff:4e:e1:b2:19:ab:e3:0c:76:69:89:11:8f:8b:83:81:
27:1b:91:3f:8f:0d:92:6b:10:0a:33:86:68:e4:2f:55:ca:68:
e4:cb:43:d9:f1:8b:08:7b:8c:71:c2:8a:1e:3c:1a:a0:29:2d:
d0:8c:8e:c3:a1:06:72:c9:02:02:1d:3e:f5:2b:b2:62:c8:99:
ee:1d:78:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org