Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/428C9448496111EEB5B2053B4AD9E6FC.roa
File: 428C9448496111EEB5B2053B4AD9E6FC.roa (raw, json)
Hash identifier: EmCG5AwzbhS0Gtx0ozMsvODCSSiZdUg3TLZ1/ApZKrk=
Subject key identifier: CA:C9:20:66:5D:B6:9F:C1:42:50:5D:33:58:8F:E9:72:0C:D1:8B:71
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 11E7
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/428C9448496111EEB5B2053B4AD9E6FC.roa
Signing time: Sat 02 Sep 2023 07:20:57 +0000
ROA not before: Sat 02 Sep 2023 07:20:54 +0000
ROA not after: Tue 03 Sep 2024 07:20:54 +0000
asID: 834
IP address blocks: 154.16.152.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4583 (0x11e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 2 07:20:54 2023 GMT
Not After : Sep 3 07:20:54 2024 GMT
Subject: CN=64f2e259-5b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7f:20:04:6c:4d:a7:9a:61:08:79:34:78:d5:
1d:7b:6b:44:16:17:69:42:d9:f1:a8:88:1e:ee:1e:
c1:a3:56:1b:13:e9:58:9f:29:37:1c:00:9e:f2:86:
68:bb:e1:e0:cb:34:d4:5b:02:b9:2f:82:fd:c9:85:
3e:5f:69:d8:19:f6:bf:0c:52:23:10:6c:06:40:c9:
c1:eb:93:4f:1a:87:c1:25:28:79:1c:11:65:a7:0f:
a8:23:3d:91:9b:b5:d5:d4:2a:76:4c:3d:cd:46:0f:
c5:c8:60:f7:ea:3b:d4:be:20:14:54:6c:62:cb:11:
51:3d:ff:1a:19:cd:bf:bf:14:24:d0:89:34:5b:45:
f4:a4:11:42:16:ff:bf:fd:c9:f9:ae:6e:d5:dd:38:
8a:84:4f:9d:ae:5c:71:be:af:dd:c3:15:d5:52:0b:
33:73:a7:f9:d4:02:a0:92:be:78:b9:c6:fa:4e:56:
a9:fc:77:b0:83:93:c7:06:2a:34:ac:e3:a8:97:bb:
d0:bb:b7:9c:08:11:75:7a:45:bb:59:ea:3c:f6:bf:
bc:8a:12:81:15:10:f2:55:30:c8:97:a1:7c:c4:74:
4a:ef:60:7c:6a:44:d6:70:f3:7b:05:18:76:a6:09:
6f:b9:84:85:e6:f7:54:97:0c:f5:98:eb:56:63:32:
bd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C9:20:66:5D:B6:9F:C1:42:50:5D:33:58:8F:E9:72:0C:D1:8B:71
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/428C9448496111EEB5B2053B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.152.0/24
Signature Algorithm: sha256WithRSAEncryption
26:d8:df:1d:30:a1:d2:e2:70:2a:bf:91:f4:d0:b2:5c:76:6d:
ed:0a:5c:c2:5e:62:c7:f6:ff:bb:fc:67:c8:6d:1a:1a:4c:f4:
9d:f2:68:09:9b:8d:ce:d6:f9:1b:2a:fe:ba:5c:a0:5c:e7:05:
b3:04:47:78:fc:13:a1:01:d1:13:95:f9:7d:56:6c:01:3c:2e:
af:58:7c:ff:0f:16:a0:71:9c:61:ac:7c:c2:53:c0:77:45:e4:
30:b7:70:c5:f4:4f:06:23:ba:b8:6a:b5:a6:ba:de:db:be:1b:
db:d7:6b:1e:4d:c2:14:4e:ff:44:94:e5:4d:34:c2:09:56:84:
25:2c:81:8d:45:2a:f2:06:88:56:9f:04:e2:38:40:15:b7:7d:
e4:00:da:27:80:7d:b4:69:1f:69:fb:8b:8f:7b:7f:e9:8c:cc:
47:9a:26:b3:81:89:e8:7a:17:d2:4d:ee:e0:41:74:a3:f3:86:
e9:d4:a4:2f:6a:2a:c7:d1:de:44:0a:47:04:19:b7:34:8f:c7:
73:14:a5:38:0e:c6:fd:1a:d1:f8:61:27:40:d2:47:ab:f2:9f:
06:fc:b3:97:1e:06:ad:6e:03:9f:de:e4:97:0b:90:9b:0c:a6:
1a:0c:ac:ae:02:c3:32:e9:91:29:d0:ec:a9:53:b1:41:92:ba:
ce:ba:a3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 29 07:45:50 2023 by rpki-client on console-ams.rpki-client.org