Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4314D41A351211EEBE504D504AD9E6FC.roa
File: 4314D41A351211EEBE504D504AD9E6FC.roa (raw, json)
Hash identifier: A15tQLWJ6eIlBHRT8BFEkMI6sEWmoLMkkeMpcZA+DI4=
Subject key identifier: 7B:18:9D:86:FD:09:8D:31:A8:23:8D:74:CC:AA:81:56:49:B7:66:29
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 110D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4314D41A351211EEBE504D504AD9E6FC.roa
Signing time: Mon 07 Aug 2023 11:05:05 +0000
ROA not before: Mon 07 Aug 2023 11:05:01 +0000
ROA not after: Thu 08 Aug 2024 11:05:01 +0000
asID: 834
IP address blocks: 154.16.53.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4365 (0x110d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 7 11:05:01 2023 GMT
Not After : Aug 8 11:05:01 2024 GMT
Subject: CN=64d0cfe0-2641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ed:f6:d7:d6:96:9f:05:18:09:d1:b5:b9:73:
a6:d4:99:d7:dc:a6:2c:9b:93:64:dc:b7:90:3d:22:
86:9a:a9:92:c4:c6:d5:80:33:03:b1:d4:03:db:ae:
c4:f1:8d:f2:9b:e0:52:ad:8a:cd:22:fd:cc:c7:5d:
b4:ce:2b:f9:9d:17:4c:c6:16:0a:8f:4c:1a:56:b9:
ec:89:2d:43:b8:cc:9f:d1:87:79:b2:81:10:fa:78:
de:2b:c2:db:73:d1:e2:73:ef:9c:1a:1d:dc:d3:8d:
5c:89:af:e7:e2:5d:be:64:50:ce:13:1b:7d:46:f3:
28:b8:aa:dc:48:5c:fc:b7:6a:1d:41:b1:03:96:d2:
f4:c5:62:60:6d:b0:2e:c3:4a:42:8f:84:14:67:b7:
34:e3:76:d8:c5:c8:0a:c0:23:57:9a:80:7a:17:c4:
ec:79:14:23:13:d0:e1:59:38:45:a9:23:ee:33:d5:
99:11:57:42:ad:ad:af:1c:c4:ca:ac:e8:58:68:5f:
6a:7b:bc:0d:6e:a7:03:aa:15:a2:a3:05:6a:6a:97:
28:94:50:68:1c:58:9c:bc:38:4a:2c:ed:10:9b:97:
15:4f:49:1f:e5:51:eb:14:11:ed:ac:f9:04:23:9a:
3f:01:12:05:8e:3e:c9:9a:ae:5a:43:2b:95:45:2e:
16:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:18:9D:86:FD:09:8D:31:A8:23:8D:74:CC:AA:81:56:49:B7:66:29
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4314D41A351211EEBE504D504AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.53.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:b0:52:af:cc:9f:18:0d:70:6a:5d:65:0a:94:2d:82:0d:50:
04:82:f1:dd:72:ad:52:6d:18:96:2c:d3:04:b0:97:e1:0e:61:
41:c2:cb:c3:4d:f6:26:0e:24:f9:66:67:78:14:90:72:af:dc:
ee:c4:ca:96:c8:d5:ff:1a:c4:7b:4e:e8:40:c1:85:ff:e1:4c:
0e:b2:27:b6:df:55:7c:f8:02:45:e5:6b:c8:e7:31:10:a5:34:
2e:ff:9f:bb:02:49:63:30:18:2d:04:a5:4c:1f:86:74:f8:c7:
14:4f:e1:1f:92:63:69:af:ef:c8:ac:d0:58:f9:9a:39:47:d5:
b3:79:7d:ec:aa:14:99:a7:cc:62:f5:88:22:0e:82:60:9a:be:
25:e5:44:41:5a:a2:fa:30:5d:1b:ee:0f:ed:7c:0e:75:fb:22:
06:ec:13:e4:78:43:c6:c5:87:8a:03:22:da:45:4b:ee:09:23:
0d:65:4c:4c:74:2d:62:90:f5:d9:79:d8:4a:cb:c0:70:69:59:
02:76:ce:4a:33:a8:0e:65:d3:75:ee:6e:f1:b7:19:9b:f5:5c:
3e:85:b1:31:87:c3:84:9e:3c:51:ed:27:df:d2:63:46:c0:3e:
0d:7a:9e:b4:96:0f:44:5c:ae:15:ee:4b:e5:f7:6e:d6:4f:55:
0d:6c:ee:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 25 11:53:59 2023 by rpki-client on console-ams.rpki-client.org